Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier: gq0YJXzgDK4BcupKRMzVm+ZqBMLrOwyhLQIDiPRPTLA=
Subject key identifier: A8:59:ED:5D:8F:09:FE:02:5E:86:85:D0:E0:93:71:64:9B:09:5E:85
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 0194BABB555CBA48678F2A007C8A5C673A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number: 0BA0
Signing time: Fri 31 Jan 2025 05:00:26 +0000
Manifest this update: Fri 31 Jan 2025 05:00:26 +0000
Manifest next update: Sat 01 Feb 2025 05:00:26 +0000
Files and hashes: 1: RHGOdSgcoaK-6eU2dKjKlpRjaMo.roa (hash: NRVJAc4Gjyt0Wmb+WBhbiFKpJbnBkqjBbBZ7MMuCSS0=)
2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: QYlpN45ko2W/2SKWWR29OivTL6Ve6y4xvITMbNU4BZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:55:5c:ba:48:67:8f:2a:00:7c:8a:5c:67:3a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Jan 31 05:00:26 2025 GMT
Not After : Feb 1 05:00:26 2025 GMT
Subject: CN=a859ed5d8f09fe025e8685d0e09371649b095e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:74:34:bd:a5:b7:74:56:38:fd:a9:d0:99:
62:a5:be:0e:47:53:d2:27:b8:eb:b3:e0:6f:8a:11:
3c:7d:27:a8:33:b5:ac:7a:e1:64:42:13:da:4e:6b:
d9:8c:a8:78:eb:6a:b8:18:b6:6b:37:c7:6c:18:ef:
81:b2:4e:a6:8f:77:a9:aa:64:d2:ec:79:9c:0b:df:
e5:5a:8f:d5:86:91:b2:33:54:7e:38:a3:ff:11:a2:
5f:8a:1b:34:b3:57:cc:2b:a1:9e:08:6d:6c:de:02:
1e:83:70:3a:70:d2:12:c0:10:a1:20:90:17:14:49:
a1:6e:4f:8e:47:c0:5e:44:d9:6b:9c:aa:5b:54:0e:
c9:9b:d1:36:9a:23:e0:d4:08:bf:1a:a7:fd:5d:dd:
09:5e:04:16:57:50:c0:c8:95:5c:65:7b:bc:8c:af:
74:3e:a4:9f:44:cc:ad:e4:0b:e4:c9:9c:e8:79:7a:
6e:61:60:c7:ee:22:56:38:44:04:27:e9:98:71:4c:
ce:c4:df:c8:d6:ab:1c:e8:e2:9f:ed:02:2e:78:6d:
d3:91:aa:dd:8b:6d:44:ff:f1:b6:e3:54:18:86:25:
19:dc:ef:9c:e5:ed:9a:c2:67:a9:f9:dc:ca:af:53:
ac:b5:49:3e:36:7d:93:69:bf:4b:55:44:91:99:33:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:59:ED:5D:8F:09:FE:02:5E:86:85:D0:E0:93:71:64:9B:09:5E:85
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5c:d7:fb:83:1c:19:da:61:4d:27:fa:bb:97:bf:7d:64:18:
7f:ae:a9:8a:4d:b7:bc:70:38:00:41:b4:19:a6:9e:f3:4c:0d:
d8:6e:50:10:70:a6:2e:87:3f:3a:02:92:85:d8:32:0e:45:e5:
4b:f6:de:a0:58:f8:65:10:31:1c:d9:6a:fc:df:bb:f7:f7:5e:
3e:06:6b:13:b7:14:c7:5e:a3:53:c4:6b:b9:ad:87:d6:e1:0a:
fb:a5:67:e9:e0:54:ad:3f:80:a7:c1:1f:3f:99:18:b0:4c:9c:
b8:38:4c:00:d8:f1:aa:b3:74:75:68:00:8d:49:1a:55:4b:ba:
36:52:06:5b:f4:b4:f8:5f:4f:6e:b9:7d:77:27:a5:66:8c:65:
a6:ad:ed:bd:88:bf:8b:cf:29:dd:b3:43:6c:fc:4c:eb:ff:92:
1a:16:23:76:25:0d:0d:f5:07:ac:11:87:0c:97:74:87:b9:7f:
1e:ea:28:35:b0:1f:fc:02:4d:ff:40:9a:07:58:f4:05:55:0e:
3e:3b:3a:3f:a0:6a:62:3c:33:cc:31:12:76:06:fa:1c:cb:d2:
07:4f:9b:00:da:be:c4:97:1d:ba:bc:12:14:39:28:16:c9:c5:
52:88:c0:52:10:4a:8b:2f:d0:f2:b9:75:60:6d:4f:dd:a4:1e:
c8:5b:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:28 2025 by rpki-client on console-fra.rpki-client.org