Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
File: hXosdK9aRNmq5HoLiUJfpPf8fBk.mft (raw, json)
Hash identifier: AcwFIuezh6GnDD2DsmNd/tQk7On68uJySNpokBWwTAQ=
Subject key identifier: B0:E4:21:3C:9E:A8:E8:51:AB:92:D4:9A:AF:21:49:34:E6:96:24:FE
Authority key identifier: 85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
Certificate issuer: /CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Certificate serial: 0194BB96C580302BC729791DC49F225387CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 09:00:07 +0000
Manifest this update: Fri 31 Jan 2025 09:00:07 +0000
Manifest next update: Sat 01 Feb 2025 09:00:07 +0000
Files and hashes: 1: 2ocBNxmBQmUkoRPjhlhWgOYgiMs.roa (hash: vHBT5RZYwMgp/JaFcd7djyz4ta6PJ5W0BzdunzoRb3k=)
2: GLrf-4476lN-mWAGatfWehKzDpo.roa (hash: UBhmVRo+40lzdmL/jOTwvI0uo4yogaRRq+nqy+WHQ4s=)
3: bAf4pYlPQH01VJAbtj0tnC5SXTs.roa (hash: Is6byuQI/ji+q5pWZ94ZQraf9joydkFIunAau5zwEaA=)
4: hXosdK9aRNmq5HoLiUJfpPf8fBk.crl (hash: sQdQKRlS50Q24BvwJcNZB0hTrYUBuf646gE42O8+gpc=)
5: t7q0gRp_Rjm1TKofQQJGVXRxiQ4.roa (hash: 8i0M18hNbssP3r3dcfAr+F0zW7Rf4keL31Nq8c6T/TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:96:c5:80:30:2b:c7:29:79:1d:c4:9f:22:53:87:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857a2c74af5a44d9aae47a0b89425fa4f7fc7c19
Validity
Not Before: Jan 31 09:00:07 2025 GMT
Not After : Feb 1 09:00:07 2025 GMT
Subject: CN=b0e4213c9ea8e851ab92d49aaf214934e69624fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4b:5e:63:74:e1:51:42:df:cb:5c:88:9f:96:
3a:09:7f:3a:2e:2f:c4:d8:1d:3d:50:f1:b2:21:9e:
63:5a:5a:ad:b8:67:46:fd:72:20:ac:9a:93:ce:8d:
d8:e7:c4:5e:9c:a0:2f:f8:1c:bc:63:b5:65:54:9a:
be:67:95:54:87:95:89:3e:c7:da:98:00:9d:a4:5e:
9b:15:33:37:84:f2:21:a5:b7:8f:6b:78:92:3e:b8:
4d:89:f9:8e:98:aa:3c:07:fb:a3:61:1b:cc:9c:e2:
03:5e:d6:3d:43:97:9f:9f:6d:a9:e0:b0:fc:f4:e3:
37:fd:05:9f:23:86:3b:d9:03:10:2c:32:f2:79:99:
92:37:eb:6b:6e:eb:14:d4:de:e5:97:80:eb:7a:09:
9a:17:e3:35:63:ac:58:d5:21:e5:b3:27:81:df:8f:
ca:0b:aa:37:36:d7:71:07:d9:2b:2a:5e:e5:61:76:
4e:1d:49:07:eb:b2:33:53:3e:a5:48:5b:bf:1c:0e:
3c:32:9f:ff:79:65:74:cc:eb:05:db:c4:8c:88:ed:
4c:b0:13:fa:76:37:96:5b:93:2f:41:3a:9a:49:84:
88:5c:c4:a2:dc:51:10:2f:7a:70:b9:4a:92:f1:49:
47:cf:d6:99:e0:7c:02:51:ec:eb:8d:81:3b:a7:0e:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E4:21:3C:9E:A8:E8:51:AB:92:D4:9A:AF:21:49:34:E6:96:24:FE
X509v3 Authority Key Identifier:
keyid:85:7A:2C:74:AF:5A:44:D9:AA:E4:7A:0B:89:42:5F:A4:F7:FC:7C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hXosdK9aRNmq5HoLiUJfpPf8fBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a9a33-99dc-4b92-8ced-836ac97c01bb/1/hXosdK9aRNmq5HoLiUJfpPf8fBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:34:22:57:d6:f8:87:35:2d:0f:1e:9b:3a:41:3f:0d:07:b7:
c5:b6:d4:0f:03:80:c8:3c:11:9b:e0:ca:8f:e4:26:4a:27:be:
6f:ec:ab:bf:de:a4:5d:dc:33:59:45:83:a0:b1:d5:ac:a4:77:
59:01:6b:30:1a:56:24:9b:e5:ee:95:c6:e6:87:78:96:39:56:
c4:80:bc:89:2d:ac:73:7f:eb:1a:30:f5:74:2a:80:48:b9:53:
ce:71:27:6a:78:35:8b:81:c4:63:7d:ac:4f:75:b7:3f:22:d8:
a4:f0:20:2b:c5:63:eb:e4:e2:09:db:6e:14:28:4f:bb:6f:26:
fd:ed:16:dd:fb:9c:40:48:35:6a:ae:15:97:76:3c:a3:9e:55:
a4:2c:fe:fc:80:db:dc:f4:3c:dd:d8:f7:f3:08:49:de:ff:e4:
76:3f:9b:e8:2a:6e:6c:91:b4:73:cb:15:27:d5:1e:62:bf:36:
7c:c4:36:9d:60:d0:9c:a6:7a:8a:ff:82:a0:12:cb:41:b0:62:
76:25:da:bb:c4:45:44:ee:db:91:e2:35:7f:1b:de:ea:d1:0b:
82:8d:cd:3d:d2:6c:b4:91:6d:1b:60:b7:78:78:27:50:70:fe:
25:1f:8e:ba:22:6b:28:d2:bb:0b:1b:0e:04:62:a3:2b:c6:27:
0f:7d:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:27 2025 by rpki-client on console-fra.rpki-client.org