Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: CwT+/qQJAFweOMMSOGlV6Gr+26AWJ1p3+QUFoht+cBg=
Subject key identifier: C8:1C:91:56:83:39:8F:EB:B5:F2:C1:BE:6B:E7:17:FC:BA:72:8A:68
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 0194C3F629D8C1D663553B81672C78A9509F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 118E
Signing time: Sun 02 Feb 2025 00:01:17 +0000
Manifest this update: Sun 02 Feb 2025 00:01:17 +0000
Manifest next update: Mon 03 Feb 2025 00:01:17 +0000
Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
2: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: EBwxk8Y9q9hjhbQKvSSiGVCbiv54baaVMXmXa+FMwU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f6:29:d8:c1:d6:63:55:3b:81:67:2c:78:a9:50:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Feb 2 00:01:17 2025 GMT
Not After : Feb 3 00:01:17 2025 GMT
Subject: CN=c81c915683398febb5f2c1be6be717fcba728a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:e3:a7:27:c7:16:39:29:86:ab:d0:dc:d0:
27:42:07:6e:29:40:61:00:c0:d2:2b:18:ea:c5:59:
7b:55:e3:0e:24:fb:3a:7b:8b:53:9b:52:bf:e5:d4:
df:d8:7b:be:e1:07:92:00:93:7b:fd:fe:99:cd:78:
bd:20:8b:f8:9e:f5:50:d6:51:c2:2c:86:f7:ff:4b:
c6:9f:43:52:94:c1:0b:e5:96:4b:cc:be:44:0b:10:
4c:6b:e5:3c:fb:4b:40:b5:64:6f:7a:e6:05:31:c2:
0e:ae:77:cd:6c:72:bb:ba:f6:45:59:2c:47:82:f6:
e6:c2:b8:ee:53:3d:36:e9:37:78:3c:57:ae:43:62:
48:75:82:46:8d:08:89:85:de:48:18:1d:65:ef:83:
ea:91:06:28:b6:0c:0f:f6:44:96:04:92:2a:f6:c0:
ed:31:aa:b3:30:07:5f:bc:3d:87:23:c4:cc:d5:fb:
13:fc:dc:35:2d:ad:8f:ff:5b:8f:0e:de:7b:50:8d:
32:16:c8:52:f0:49:6b:c4:db:4a:42:04:f9:67:65:
38:8c:ff:bc:e9:49:9d:44:c1:09:8a:35:92:21:1c:
5a:10:84:03:e5:55:fa:dd:86:68:df:96:64:b7:64:
0c:0f:0c:ac:e1:d8:20:97:45:06:2a:43:f4:2b:a6:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1C:91:56:83:39:8F:EB:B5:F2:C1:BE:6B:E7:17:FC:BA:72:8A:68
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5c:15:7a:85:0b:89:40:d3:8d:cb:b7:82:c2:50:c6:49:ea:
7c:b3:b3:ec:b6:5b:c7:1b:dd:b3:9e:3b:52:90:a5:df:f6:d7:
97:d6:85:10:28:2e:f2:b1:a4:af:a1:8e:59:8f:c7:9c:14:a8:
eb:cc:5c:54:6f:e7:4a:d2:f0:8d:38:f6:d9:8a:6f:6c:67:ca:
85:3e:b8:57:1f:fa:d8:0f:e3:a5:ed:72:82:98:c1:80:11:07:
99:24:b1:71:81:31:a9:25:59:7a:d1:dd:24:99:78:a6:7f:c2:
db:08:83:9d:fd:74:c9:1a:09:ed:78:45:ff:da:e2:78:36:f4:
e0:d2:d9:62:04:8c:1d:93:e8:60:37:5d:8a:64:c3:e7:12:a2:
dd:81:9d:f8:d9:1a:21:47:c8:66:7a:ce:c4:6d:65:e6:ca:27:
d2:aa:cc:06:0c:f9:85:cd:f9:c7:de:41:f6:36:4c:9f:b7:e9:
37:15:a6:a4:d1:d5:89:93:44:8e:1d:fa:3d:4c:49:19:4d:1d:
d0:c6:b8:9e:0a:2e:fa:ee:1a:36:a2:c1:0a:6a:a1:42:4e:c9:
98:5b:74:71:3f:1f:48:4e:26:12:c2:d0:c0:21:91:25:86:0d:
f8:5a:50:b3:1f:b2:2e:7d:4e:33:ef:9d:6e:b8:3b:c6:eb:63:
00:f0:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:47:56 2025 by rpki-client