Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: m/nLXQN0oNsWaskKc1HdORHXroNGpNYdWrie4nwTNkc=
Subject key identifier: 46:80:6D:39:F0:0A:89:3C:A9:BC:11:8F:F9:F8:44:D9:30:AF:08:25
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 0194BAF257B68A8EAF22BF8E31D4A1AF4B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 06:00:31 +0000
Manifest this update: Fri 31 Jan 2025 06:00:31 +0000
Manifest next update: Sat 01 Feb 2025 06:00:31 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: v6a5tsGTQyOqsIDFhDozyy45KpidKQvLqOrQ03G5iWg=)
2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:57:b6:8a:8e:af:22:bf:8e:31:d4:a1:af:4b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Jan 31 06:00:31 2025 GMT
Not After : Feb 1 06:00:31 2025 GMT
Subject: CN=46806d39f00a893ca9bc118ff9f844d930af0825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:d1:d6:9b:46:89:7c:9b:fb:c6:b8:03:ff:
49:03:40:fa:0c:ff:4a:01:38:cf:f2:d1:03:07:1e:
3e:6d:20:b3:28:a2:39:a1:c3:c0:89:10:86:d9:2c:
df:23:86:2b:d4:ea:ea:70:30:e9:c5:a8:1c:78:5b:
12:68:42:f8:f3:08:68:87:70:08:47:87:f7:c5:23:
3c:f0:ff:1c:6d:93:fa:45:98:0c:57:33:4a:6c:87:
22:80:ff:db:09:5e:67:76:32:5b:e3:06:e2:ea:a8:
6d:1d:7a:25:c8:8c:11:cb:e7:5b:91:76:cc:e5:38:
85:d4:93:70:62:46:8b:a9:8c:e2:af:cd:04:cb:14:
6e:ae:dc:a2:17:47:12:ee:bf:64:56:20:0c:3c:e2:
4d:38:14:e6:a3:68:b0:d4:5e:07:82:fe:65:a5:b5:
e7:24:c7:24:88:d5:16:ab:45:4b:73:09:10:f4:19:
aa:b8:40:14:77:8f:30:c8:dd:4d:0e:21:3d:ec:c5:
9d:46:8a:5d:9d:e1:92:1c:65:49:e8:00:a2:d2:82:
3a:ce:32:60:a7:5b:1f:46:1a:4d:02:de:be:48:6b:
13:24:3e:51:9c:f4:20:f0:61:f1:be:69:4a:b4:32:
d5:28:4f:05:1c:ff:be:f0:b6:e3:b3:b3:15:91:1c:
e5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:80:6D:39:F0:0A:89:3C:A9:BC:11:8F:F9:F8:44:D9:30:AF:08:25
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f8:e8:f5:37:24:38:3c:06:25:e0:66:0d:b9:de:22:63:7c:
b8:81:97:50:db:89:98:3b:b0:67:a6:55:62:68:59:9b:61:2f:
92:cc:f2:c5:72:72:01:2b:39:3f:28:57:ca:d7:71:c2:61:ba:
5a:19:97:58:ca:1c:72:1e:45:ec:30:9f:0b:4e:29:14:72:08:
08:05:ad:b0:05:3b:a9:85:fc:82:93:86:2f:cc:18:f8:69:b3:
a5:4c:d3:c7:1b:f1:8a:83:8c:01:04:c3:75:be:bc:dc:71:00:
88:cf:6a:68:3c:9e:1c:48:ec:85:c8:b8:00:9e:f1:15:49:49:
7c:6f:1d:f0:8e:fb:de:63:23:7b:a2:79:92:dc:29:5f:30:dd:
24:87:0d:83:6e:17:b1:ea:9e:9c:81:87:c3:c6:c4:13:e0:b7:
71:4e:18:6e:bd:6a:d7:96:b3:7d:3c:cc:05:fa:49:91:d8:18:
cd:65:65:0f:07:7d:f5:ad:79:29:e6:e1:3a:fa:75:e9:8e:f5:
69:78:3e:a5:e8:43:fe:a9:86:29:91:22:5d:b6:51:bb:dd:fe:
81:42:cb:b6:ac:95:9b:78:6d:4f:8f:1e:4c:31:88:91:ec:a6:
a2:34:c9:12:07:9d:8a:9e:d5:6e:d1:8b:4e:15:54:05:f3:59:
70:f1:8e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:32:06 2025 by rpki-client on console-fra.rpki-client.org