Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: rYlZRkZkwtKzRlDVO0aKuPIuN3OieGvf7xuZZRhbeY8=
Subject key identifier: 5F:F9:BC:F1:93:76:87:CD:7C:E6:0F:B1:97:A1:08:44:72:B5:11:80
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 0194BABB0B967A5A0532DE824B85E3A2E01C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 05:00:07 +0000
Manifest this update: Fri 31 Jan 2025 05:00:07 +0000
Manifest next update: Sat 01 Feb 2025 05:00:07 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: LWkS5Q7p0Wp2CQUgPkiHhq76nzvS/0duMPkSjGlsCGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:0b:96:7a:5a:05:32:de:82:4b:85:e3:a2:e0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Jan 31 05:00:07 2025 GMT
Not After : Feb 1 05:00:07 2025 GMT
Subject: CN=5ff9bcf1937687cd7ce60fb197a1084472b51180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:08:5a:8b:1b:2e:61:16:1d:50:fd:69:9f:
56:05:49:bd:c7:ca:3c:d5:a4:9a:12:dd:a0:55:2d:
a3:f4:8c:0e:b2:3b:93:d8:4f:09:02:91:b8:51:80:
9c:ad:d7:d9:af:1f:2d:62:6a:7b:ea:4f:9b:61:7b:
28:d0:f8:b5:94:4d:ac:76:bc:30:70:b9:cf:8b:cf:
83:f7:32:b4:a8:6b:0f:96:0d:e4:4a:44:77:49:3e:
3a:77:97:28:24:20:48:6a:10:91:0c:7e:48:01:08:
fe:2c:9d:13:aa:4e:55:6f:83:29:c0:7c:cb:91:f0:
a5:25:57:cd:69:70:50:c0:a9:f4:f4:21:0e:9e:ee:
fd:02:31:5b:da:ba:02:ca:c6:93:a6:10:94:65:a2:
98:28:29:a5:d4:64:50:34:b6:d9:2c:5e:85:ba:12:
de:c7:bd:d0:f0:1c:a1:31:67:98:68:f5:93:55:70:
7f:e5:15:28:72:77:fc:ed:99:56:7a:e2:d4:86:db:
a5:0b:b9:bd:07:60:ee:03:92:a9:60:43:8e:aa:fc:
d0:15:79:48:a2:7f:5f:3a:a0:d5:b2:5b:d2:2d:c8:
c1:55:89:5b:ed:57:20:14:72:d7:55:bc:d9:c8:51:
39:4b:fc:5f:1a:e2:80:e7:d4:2f:16:f7:21:0b:5d:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F9:BC:F1:93:76:87:CD:7C:E6:0F:B1:97:A1:08:44:72:B5:11:80
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:42:94:dc:1a:ba:28:bc:d8:b9:98:0e:c8:6d:bb:ba:c3:05:
aa:0e:4b:ab:08:a8:1f:33:cf:ad:c5:28:3b:ba:66:a7:0f:42:
64:fe:97:0a:ec:90:4a:dc:10:fa:df:52:50:2f:0c:6f:73:55:
a0:00:6d:2f:ea:d4:58:d7:5a:37:40:54:b2:34:70:55:d9:0e:
04:f2:7c:a1:4b:70:01:b6:1b:77:da:1a:8a:2f:80:1f:cd:4a:
01:f4:fc:56:b3:01:ba:3a:9f:d4:70:0a:ac:52:1f:10:c5:7f:
13:1f:50:c7:8c:0d:b4:d4:5c:37:bf:fb:9f:2b:0f:09:e9:57:
c8:20:a9:d9:03:aa:3e:c7:df:39:b8:d7:43:23:80:d1:54:8f:
12:6a:dc:0e:2b:9c:67:b4:5b:09:17:6a:5c:ea:c2:76:45:c1:
b2:22:6e:f9:10:30:22:cf:a0:bc:53:f4:f3:6f:18:c2:a5:c8:
31:02:28:ff:2d:b9:98:35:d0:b9:db:f4:e8:73:7a:c2:21:70:
ce:ed:f4:14:f3:4e:16:08:8c:c7:a4:a6:22:b2:fc:89:9b:82:
a6:8a:fb:97:a4:92:9b:5a:eb:be:69:3d:d6:47:e1:28:b3:5d:
d3:1a:09:29:6a:e4:ff:f2:89:72:2f:44:31:a6:18:62:32:3f:
de:b1:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:32 2025 by rpki-client on console-fra.rpki-client.org