Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
File: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft (raw, json)
Hash identifier: egaCXJsHBd055DdZntwyeO7XO4uF4JtdIFC0Vn6afgI=
Subject key identifier: 51:B9:A1:0F:87:3B:49:35:7E:E7:2F:40:55:0D:F1:7C:2C:C3:3A:BB
Authority key identifier: 86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
Certificate issuer: /CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Certificate serial: 0194BAF27E5C57C3A0741F9267B783772ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
Manifest number: 0641
Signing time: Fri 31 Jan 2025 06:00:41 +0000
Manifest this update: Fri 31 Jan 2025 06:00:41 +0000
Manifest next update: Sat 01 Feb 2025 06:00:41 +0000
Files and hashes: 1: hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl (hash: hWmFwJ2LzZIOHKVKSgfzICcbvv/boKrgBZrbPc6tk6Q=)
2: oiBFy3pkObmB-SUVyi8mjUeggCE.roa (hash: DrQMitQl5NyHBIDeRzh85R9x2+NpayUje01H5X2GJbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:7e:5c:57:c3:a0:74:1f:92:67:b7:83:77:2e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86ee1268fe0aadf317ab44fd816d10fe54ddfc0c
Validity
Not Before: Jan 31 06:00:41 2025 GMT
Not After : Feb 1 06:00:41 2025 GMT
Subject: CN=51b9a10f873b49357ee72f40550df17c2cc33abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:e7:7c:14:0a:2a:43:92:30:d8:e9:f9:b5:
45:4f:35:68:12:36:cb:e0:67:ce:f8:86:db:08:9b:
82:ed:8e:58:46:b1:f0:c5:c6:e7:09:d5:59:44:5f:
f3:32:16:42:0e:a1:ac:7d:9e:0b:e0:b3:db:a1:75:
0b:7e:f3:83:4e:45:c0:d1:8f:23:4f:a9:b1:37:78:
aa:10:18:1c:e1:66:2a:7a:48:c3:20:f8:4d:f0:97:
79:18:b7:57:40:4a:14:c9:0b:c2:be:c7:e5:92:8f:
ee:d9:02:82:bf:46:cd:fa:9d:c2:35:7f:5b:6e:61:
18:9d:4e:22:83:36:68:fd:a2:4e:31:a8:5f:04:90:
f7:51:f1:73:83:89:c8:f1:49:3b:8e:dd:2e:b3:33:
2e:5e:4a:56:a4:ef:a0:2e:8b:eb:72:88:34:ad:f6:
80:e5:14:0e:f4:ba:40:2e:c7:fd:68:07:b6:e0:12:
d8:68:f8:2d:72:29:c0:12:ea:3c:90:32:43:90:87:
0c:e4:07:6f:6c:31:f5:61:09:62:17:be:82:45:39:
9b:42:d5:5b:d5:55:c7:48:ad:5d:ec:bd:a6:e2:f7:
d6:fc:4c:ec:c9:21:7f:32:77:e0:11:ea:36:26:d2:
21:fd:c6:30:28:54:13:5c:2c:09:4c:b5:82:d7:28:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B9:A1:0F:87:3B:49:35:7E:E7:2F:40:55:0D:F1:7C:2C:C3:3A:BB
X509v3 Authority Key Identifier:
keyid:86:EE:12:68:FE:0A:AD:F3:17:AB:44:FD:81:6D:10:FE:54:DD:FC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f34254-0e9d-4dc5-a418-1b711aec1fbc/1/hu4SaP4KrfMXq0T9gW0Q_lTd_Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ac:76:f1:05:4e:6e:e3:22:39:39:9e:7f:ca:bd:fc:44:a5:
80:db:a9:cd:c4:92:3a:1d:e7:4e:40:f9:b1:e2:a3:5c:04:7a:
dd:ab:62:32:fb:2d:4a:c6:bb:39:d9:37:fe:ac:2c:66:10:1f:
86:ac:df:8b:30:43:d3:04:7f:72:3b:20:87:c8:06:7f:3b:ea:
95:89:54:f0:39:b7:a3:5f:a3:ac:d5:f7:47:73:a1:be:97:fe:
a2:ca:bd:ed:ef:cd:2a:4e:43:5d:ae:45:6b:05:d1:a1:e5:71:
b6:b9:c2:2e:31:47:60:ea:d6:d9:fb:89:82:26:d7:dc:1c:8c:
52:04:71:ea:a8:71:0e:f1:a5:00:c9:e6:cd:5d:bc:cb:a8:12:
e6:83:03:59:cd:a3:6f:73:35:15:3b:22:7e:30:3a:c6:6e:7e:
78:e8:2c:00:4b:53:45:71:f2:3d:a5:5f:f9:cf:b2:ad:e1:e6:
05:40:3c:77:39:43:f0:a7:aa:ca:0c:75:6d:d7:7d:3f:cb:76:
a5:ff:64:61:9a:80:32:ee:93:9f:e1:5b:fb:17:7d:a2:81:1f:
d2:38:89:e6:24:d4:e3:01:ff:9e:66:cf:a9:62:e9:1c:a9:00:
ce:be:70:4a:35:88:aa:aa:29:00:2f:44:7f:5c:74:c7:9b:2c:
27:19:5a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:45:07 2025 by rpki-client on console-fra.rpki-client.org