Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
File: Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft (raw, json)
Hash identifier: JKbedNaXshu+erOGaW7k7zUfVWW3c35fcfIXZZOmc2c=
Subject key identifier: B2:B4:30:77:A7:01:FF:11:8F:F4:D2:47:41:21:01:47:DE:82:9E:33
Authority key identifier: 1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
Certificate issuer: /CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Certificate serial: 0194BAF26B66EFED35EF742866EC39C1F4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 06:00:36 +0000
Manifest this update: Fri 31 Jan 2025 06:00:36 +0000
Manifest next update: Sat 01 Feb 2025 06:00:36 +0000
Files and hashes: 1: BXSG7yvBfzfSNaMTJpttdMTmSwI.roa (hash: 1RyXuzT18l9m34jhodBKLjc26bjq4on+qltizIR39go=)
2: Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl (hash: 6YhDQxMcPdx65JgAtS98Yyi/ziqA5v6oPNR3fRH8huQ=)
3: ziWItZyxi3pgc4xhCv8AY_ye8qQ.roa (hash: SUXoNw7/XslPVf+LyLnG1Yvy88uBm5yyDGjaK5XKEjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:6b:66:ef:ed:35:ef:74:28:66:ec:39:c1:f4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0e4d2dbde986fdc25bf3bf75637852da87abf1
Validity
Not Before: Jan 31 06:00:36 2025 GMT
Not After : Feb 1 06:00:36 2025 GMT
Subject: CN=b2b43077a701ff118ff4d24741210147de829e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:69:40:fb:86:5d:f6:cb:2a:4e:63:48:0c:
19:1d:d7:d7:d5:29:b3:e7:9d:50:8d:1b:5f:08:6d:
0f:3e:19:1d:cd:e2:45:ca:19:3a:68:18:8e:b1:76:
de:31:d7:aa:38:1b:6a:8a:48:7e:27:46:29:88:f0:
10:7b:d7:3a:39:fb:e5:d1:0d:d5:e8:40:ac:cc:63:
d7:37:ba:83:eb:48:cb:6e:65:dd:c5:40:db:6f:84:
ec:d5:c2:60:46:27:f0:42:b8:55:2e:04:15:e8:fc:
2e:2f:7b:ba:98:a4:61:7a:a3:fa:ea:27:c3:1d:69:
62:4c:b7:c8:9c:ba:8b:f5:76:aa:a8:60:65:15:60:
c6:23:36:3a:5d:e8:56:ab:27:2a:8c:37:7c:2c:f1:
2e:f9:13:f9:6e:1c:ee:81:91:fa:62:b7:34:56:fe:
c4:55:ef:21:d3:c8:23:e5:b5:8c:e9:19:62:b4:60:
e4:89:59:a3:8d:b7:19:5f:6a:90:fb:97:17:31:c9:
2d:df:27:f7:77:bf:85:72:5d:7e:65:ce:3f:33:fe:
6b:e9:d1:5b:7d:de:ce:48:d0:f7:11:14:94:ea:aa:
e4:d9:e8:a1:fa:69:81:e3:d6:65:a7:ef:a3:7b:0c:
7a:35:b9:9b:8c:2f:7f:8a:17:f2:85:ff:87:11:ed:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:30:77:A7:01:FF:11:8F:F4:D2:47:41:21:01:47:DE:82:9E:33
X509v3 Authority Key Identifier:
keyid:1E:0E:4D:2D:BD:E9:86:FD:C2:5B:F3:BF:75:63:78:52:DA:87:AB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hg5NLb3phv3CW_O_dWN4UtqHq_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c9e115-1236-4fda-a033-99eea1f0a354/1/Hg5NLb3phv3CW_O_dWN4UtqHq_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9a:7c:72:78:21:b5:f3:c2:b2:97:5a:cf:7b:64:04:a9:70:
a8:c0:35:ce:fa:e3:2f:d0:5f:36:52:05:03:45:91:5a:ae:38:
87:21:d8:0b:30:36:23:cc:c5:f5:2e:d9:52:85:1b:04:f3:2c:
d7:1a:73:8e:30:29:f0:ad:f2:8a:de:86:c0:53:40:86:71:0f:
ef:e8:02:19:7d:fb:83:50:95:4e:23:e8:6d:44:4a:df:fe:2b:
58:11:76:6c:1a:6d:3a:f1:f2:b2:4f:c8:00:5f:7e:5e:35:48:
7f:84:49:10:4a:0d:91:11:d8:97:b6:5f:65:06:d0:3f:5d:da:
dc:0f:2b:bd:b3:b7:86:dc:8b:97:32:f8:6b:4f:94:ce:b4:46:
71:af:e7:55:c3:92:33:e2:de:98:a8:3d:4f:3f:5a:85:af:0f:
db:4f:de:6d:95:58:13:7e:a9:8c:6e:49:a7:cd:ba:7e:1e:23:
6f:1d:08:c2:fc:9d:d7:31:b8:e7:1c:b0:d3:64:ee:e8:85:a5:
d9:eb:56:c6:d8:cc:91:04:b7:d7:77:4e:2c:91:66:d9:ed:98:
a3:fe:b5:dd:95:8e:f4:ee:e0:da:34:0d:ba:91:90:83:39:f2:
96:f0:ba:69:fd:08:ea:15:8f:a3:14:4d:46:72:af:8f:8b:c2:
d4:03:39:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:43:47 2025 by rpki-client on console-fra.rpki-client.org