Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File: hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier: JPI8A45Fs6XBMNesAMa2VnYEinoR46NipQ0xWvJBV6k=
Subject key identifier: 13:A2:00:49:E3:87:6C:D0:88:37:43:12:FC:CD:72:41:1C:08:DD:FD
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 0194BA847409E60426ECE0FF6A6D1A13A747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 04:00:30 +0000
Manifest this update: Fri 31 Jan 2025 04:00:30 +0000
Manifest next update: Sat 01 Feb 2025 04:00:30 +0000
Files and hashes: 1: cdpye_KyS4EmcLPLYSZp6vr21yY.roa (hash: Zz0lFiDAwglkcbO2M8ukF/dTePvCgzsApZfE0jU6Bcs=)
2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: wFSoSfH9Fam04NHFHUvKuLkysTLjke0nqcOgOROXeF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:74:09:e6:04:26:ec:e0:ff:6a:6d:1a:13:a7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Jan 31 04:00:30 2025 GMT
Not After : Feb 1 04:00:30 2025 GMT
Subject: CN=13a20049e3876cd088374312fccd72411c08ddfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:64:06:42:05:2a:52:a3:b1:59:8f:b9:96:
ee:e6:e6:a7:5f:47:8c:12:f0:df:8e:9c:85:c0:45:
3f:bc:00:87:e8:f6:64:df:c0:2c:0d:f5:a7:2b:1e:
15:dd:04:29:42:28:14:e8:e0:54:b1:95:b7:f1:50:
9d:36:8d:77:09:13:d4:38:d5:f9:03:1b:a4:60:d3:
89:23:a8:f9:1a:93:b2:b1:4b:57:42:06:67:69:f8:
30:ea:7f:eb:6a:75:58:92:e0:2a:49:5f:b0:65:88:
55:8c:99:24:79:42:cd:fb:4a:68:34:e1:35:c9:82:
54:a5:59:9f:46:36:25:90:c0:2d:dc:be:f9:8c:10:
fa:aa:13:6e:11:60:99:75:b0:c1:7f:51:f9:b9:2b:
78:8f:f6:d9:3d:27:d4:c0:b6:c6:6e:60:76:14:ed:
f0:ee:36:74:1a:19:8b:ae:07:54:53:4c:1f:40:5d:
bf:ff:8f:57:c7:42:92:e4:4e:f2:d2:62:96:fe:f1:
19:97:55:df:9b:c9:be:92:a1:60:22:41:fb:48:78:
ea:fe:d6:a2:60:7f:a2:30:7b:1a:5c:f1:02:9e:77:
69:a9:bf:3d:16:8c:f3:f6:c0:28:3c:79:0a:a1:1e:
0c:f1:9e:0d:83:76:dc:e0:d6:fa:50:08:a3:49:57:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A2:00:49:E3:87:6C:D0:88:37:43:12:FC:CD:72:41:1C:08:DD:FD
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d9:c3:61:ec:b3:84:ad:ed:4e:36:ce:2f:85:0d:f7:ca:ad:
c8:ec:f7:6d:4c:d9:ff:14:3b:c1:f1:a1:19:9a:58:ec:85:7f:
8e:66:2c:51:e4:83:8d:45:fe:23:3f:2e:f5:d0:96:41:27:76:
77:ba:80:c1:32:c3:d6:5c:61:6b:07:59:5b:e1:16:a3:8a:50:
c4:b6:42:0e:74:07:d2:b1:7b:bf:74:e4:b2:15:5f:77:b2:1a:
67:c3:b0:6e:db:fd:c0:35:64:da:37:c7:14:bb:a6:c1:bd:c8:
08:f2:3b:8c:e3:4c:e0:44:b4:f0:df:53:f6:a3:c4:e2:d5:be:
ef:30:d5:21:87:d4:29:ca:8d:8c:15:53:9a:4b:de:2e:7b:69:
70:50:13:df:c8:75:44:5c:58:2a:b8:96:63:46:d4:2d:b1:14:
e8:9f:16:c1:f4:1c:11:bd:3c:6f:ab:af:99:ad:7d:af:3a:7c:
67:77:21:03:45:d3:bf:7b:5f:84:5e:ae:e3:52:2f:f0:cf:16:
d1:c6:6d:4a:53:d8:14:84:f6:36:e4:dc:0e:85:96:88:99:32:
e8:0c:a5:d2:21:8d:d4:0a:b6:f2:a1:35:a0:f9:02:54:4c:66:
d2:1a:40:3e:42:da:d3:a1:9d:f6:cd:ac:fb:9a:53:47:42:aa:
63:06:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:31 2025 by rpki-client on console-fra.rpki-client.org