Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
File: ha9TEIBex1YaGiL5yJDJcx-23r8.mft (raw, json)
Hash identifier: KOk1HNjsAEQdrcCUYQdsIVTsWsQO6/6e/oP4s/1ZeI8=
Subject key identifier: FC:62:88:77:6A:80:A6:42:DE:C1:B0:E2:E1:05:47:59:1C:7A:B2:B7
Authority key identifier: 85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
Certificate issuer: /CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Certificate serial: 0194BAF2417B11ABBE16A4A96EF464B33B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 06:00:26 +0000
Manifest this update: Fri 31 Jan 2025 06:00:26 +0000
Manifest next update: Sat 01 Feb 2025 06:00:26 +0000
Files and hashes: 1: Gumma7CSH0QJDyYLGYO8JVucFbw.roa (hash: AHbFRK4oddEvM9hnH4lxRaSLOWlIxIkwfpWyReC2ymY=)
2: ha9TEIBex1YaGiL5yJDJcx-23r8.crl (hash: xQud7hgYHgnTea/QqPe2QJVRZj2oHXiS1EtQkF3YFrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:41:7b:11:ab:be:16:a4:a9:6e:f4:64:b3:3b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Validity
Not Before: Jan 31 06:00:26 2025 GMT
Not After : Feb 1 06:00:26 2025 GMT
Subject: CN=fc6288776a80a642dec1b0e2e10547591c7ab2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:4c:7f:13:f9:fb:6c:de:31:1c:da:b1:5e:
07:a6:cc:9a:7c:b2:a6:7c:6a:9c:be:b3:82:7f:18:
a2:8f:45:df:35:d2:46:63:9a:78:09:55:cb:9f:c5:
2b:4e:f2:e2:42:02:0e:22:a8:07:45:b0:f7:e7:16:
10:f1:ad:d8:b7:3f:b9:bf:95:72:e3:8c:ab:2d:c1:
0d:82:c5:9c:45:88:65:2a:8d:20:8e:37:3a:51:23:
58:1d:20:a1:cf:b8:0e:63:45:fc:3a:ba:29:4b:9c:
59:93:af:18:29:97:ee:87:2d:cc:5f:c7:6a:bc:64:
cd:80:b9:32:a6:af:7e:95:b5:6d:55:b8:a4:80:7a:
ac:41:b7:68:4c:f5:ef:f9:e7:68:4c:a5:4e:76:78:
85:4d:e4:2b:82:6c:0d:88:f4:47:24:13:ef:69:0f:
45:f9:37:b4:28:3e:98:89:cd:61:21:48:d7:67:7d:
ef:3f:6d:60:b4:e2:e0:83:99:df:83:8a:9e:54:69:
99:2c:80:6e:bf:90:80:53:d1:43:9a:79:4c:37:4a:
4a:93:73:52:a2:c6:6c:bd:4a:65:e2:62:36:f8:88:
73:63:9f:9c:7c:4e:cb:c9:f6:b0:c6:07:4e:c3:2f:
81:44:5b:bc:80:ed:aa:8e:a0:01:55:d7:6a:d2:0e:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:62:88:77:6A:80:A6:42:DE:C1:B0:E2:E1:05:47:59:1C:7A:B2:B7
X509v3 Authority Key Identifier:
keyid:85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b0:b8:32:15:92:ec:63:ea:96:ad:ed:15:0a:5f:b0:d3:9b:
ff:25:ba:db:c5:99:09:a4:79:e6:5d:d8:97:85:13:17:29:c4:
1f:31:56:6b:fd:b7:37:c9:23:b4:ff:00:9d:45:0c:9e:14:f6:
4a:96:82:e3:62:4a:35:1a:11:b5:29:f3:fb:66:a5:da:5d:94:
10:22:43:b0:52:a7:42:7e:4d:13:74:ac:33:21:14:34:d5:53:
45:f2:ff:57:d2:ae:3c:dd:b3:a3:5a:a8:28:86:9e:a0:86:54:
2e:41:f4:cb:b0:e1:d6:89:ac:e9:58:b4:06:c5:b8:d7:4b:51:
f2:1a:97:4a:0c:9e:b4:bd:02:45:68:97:53:b7:80:21:f3:81:
c6:26:2f:6d:f6:84:76:15:4e:04:86:45:93:c8:16:69:f8:0c:
a8:d3:d8:8f:eb:38:d3:18:a7:ac:f2:56:60:ae:9b:e7:0f:c0:
13:1e:e9:c8:73:52:16:44:e9:53:68:44:7f:cd:2f:85:17:8f:
d2:15:6d:bd:e5:61:4e:9a:d4:50:01:c9:3d:fe:4c:ef:5d:ef:
62:ca:bb:dc:32:b2:16:10:38:7a:ad:19:3f:68:b3:e4:81:00:
9e:82:0e:1c:7a:c3:2b:43:40:91:ba:bb:68:df:7f:b1:c4:43:
35:80:f7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:40:47 2025 by rpki-client on console-fra.rpki-client.org