Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier: cq3q1lWFjz4M9D1lSROC03Wt+cA2jk+8AOIEpXMihJs=
Subject key identifier: 56:C1:F3:1B:45:BE:75:D4:82:0A:B2:CA:F3:2B:15:F1:A9:66:36:B4
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 019510FE0D2FEFF2980BD6D812D16CCC4D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number: 117D
Signing time: Sun 16 Feb 2025 23:00:39 +0000
Manifest this update: Sun 16 Feb 2025 23:00:39 +0000
Manifest next update: Mon 17 Feb 2025 23:00:39 +0000
Files and hashes: 1: j1BO9Furs7_Q3tvlbetVSRlAckY.roa (hash: tdoQUM0H+jW+enIWtoFRlfboER49yX/MAZeA5JaKIMs=)
2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: YejxuqrVlNgG47lMNXvbk3mZLhSSi5sH97Gyeg0ZziQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fe:0d:2f:ef:f2:98:0b:d6:d8:12:d1:6c:cc:4d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Feb 16 23:00:39 2025 GMT
Not After : Feb 17 23:00:39 2025 GMT
Subject: CN=56c1f31b45be75d4820ab2caf32b15f1a96636b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fa:b2:75:00:61:54:47:76:66:a8:29:94:a5:
c4:3c:70:71:d4:5a:3c:76:dd:04:05:f1:12:1f:61:
8d:e4:91:f1:75:8b:f3:ae:0d:59:5b:e5:22:f4:b0:
7c:73:71:b6:11:f0:10:71:a0:f7:2b:a6:15:bd:35:
67:7b:89:1c:78:b5:c4:ce:8b:8f:a7:17:bd:77:6e:
c3:fa:b1:a9:44:bc:ac:e8:09:5e:b1:98:46:64:0d:
d4:83:94:d6:37:dc:96:77:ef:5c:6a:f1:11:0c:8b:
a7:44:dd:cf:38:6d:b7:f7:b5:d8:2d:98:4f:f4:73:
e4:a7:2d:35:a3:cc:10:45:c4:57:9d:ac:79:0a:72:
b6:d9:00:6a:ae:ab:ad:ce:cf:fb:58:ae:b9:a4:40:
94:41:34:37:52:a7:37:85:1b:ea:86:98:14:00:7b:
3a:21:65:cd:1b:36:07:5b:a9:1a:5c:29:0c:8e:78:
f2:f3:20:04:32:89:74:fc:84:d3:9d:a5:b6:ee:aa:
9c:22:12:fd:b4:55:36:b7:51:87:8e:a4:01:9f:be:
bf:f4:45:85:91:90:40:76:f5:8d:6f:63:c4:12:ec:
a4:fc:78:6c:6b:9c:86:10:74:3a:69:81:dd:09:29:
e5:3c:12:27:60:8d:d8:50:13:de:fd:6e:6b:a9:d1:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C1:F3:1B:45:BE:75:D4:82:0A:B2:CA:F3:2B:15:F1:A9:66:36:B4
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e9:4f:78:a0:a8:c3:ff:bf:82:aa:04:98:3f:17:44:f4:3d:
d4:a5:e7:da:3a:a7:20:08:00:1e:84:b6:c7:a0:82:87:74:8d:
51:e8:ee:09:06:5c:d4:83:4d:a8:8c:92:86:83:5d:99:e5:2e:
94:08:42:f9:b0:32:8c:6a:53:ea:bb:8c:75:a7:8b:af:05:c0:
3f:22:ed:f7:29:03:3d:a8:95:67:9c:e1:ff:e9:00:6d:40:25:
fd:00:87:e8:31:64:89:66:2e:09:3b:71:d0:a5:05:32:b7:50:
30:31:57:cf:7a:42:39:f5:34:fe:31:2b:78:c4:43:97:68:ed:
19:af:57:af:da:18:89:a9:9c:c4:92:d3:21:2e:de:2e:44:1f:
01:8a:34:6c:6b:fe:a3:b1:28:2d:93:6c:85:dc:4d:2c:c4:72:
73:a2:61:e2:e0:9b:28:fc:ac:09:5c:df:be:74:31:8a:a3:70:
12:0e:4c:ba:58:dd:95:d0:17:d5:64:3f:77:0b:c8:0b:d8:c9:
7c:b9:fc:6d:e0:ae:51:7b:29:06:58:9f:d4:20:cf:29:16:b0:
23:f9:05:ed:ae:62:fb:d6:b8:2e:0a:44:26:e7:d8:f2:07:26:
8d:03:89:12:8e:5e:10:cf:eb:f0:4f:83:d4:48:b7:9a:3b:f2:
89:7a:71:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:38 2025 by rpki-client