Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: by6vIDjxHoKMoYnb1wVYiLHTFAYqjpdaONnYmBMf2bI=
Subject key identifier: F4:47:94:5D:41:46:8E:8B:36:68:57:D5:A4:10:C4:E6:36:4E:47:02
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 019511D94E02214F8BA8B8A571B18DBF5FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0B48
Signing time: Mon 17 Feb 2025 03:00:08 +0000
Manifest this update: Mon 17 Feb 2025 03:00:08 +0000
Manifest next update: Tue 18 Feb 2025 03:00:08 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: QRScBxHQf/4fpAnOJ9VvB5+0u+S+vJX+tFVCh5elJvM=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:4e:02:21:4f:8b:a8:b8:a5:71:b1:8d:bf:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Feb 17 03:00:08 2025 GMT
Not After : Feb 18 03:00:08 2025 GMT
Subject: CN=f447945d41468e8b366857d5a410c4e6364e4702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:47:49:73:91:7e:aa:76:66:c6:4c:18:52:
41:f1:f9:e3:99:8c:c2:bc:e4:d8:30:a5:48:1d:1f:
33:78:c3:b5:86:29:39:b7:ed:6b:b9:a7:4a:de:95:
75:24:d3:33:92:26:1a:ba:9c:f8:58:68:66:91:7d:
a7:30:97:a9:02:c2:54:68:f6:8b:fb:bd:85:90:7f:
99:ff:99:d6:64:9f:23:dc:49:4b:f3:01:f2:4f:b3:
91:dd:39:09:43:56:c7:e4:fd:53:1e:b4:ef:b5:70:
97:f1:dc:fe:7b:5f:96:13:29:b9:5e:f5:e6:52:1a:
ca:02:0c:0a:20:1b:b3:3b:80:21:05:dd:60:8b:56:
76:40:c1:1d:4e:f1:a2:2c:28:93:7c:25:26:fd:6c:
ab:d4:ec:42:10:38:6c:b0:0a:c2:5e:94:92:1b:e8:
62:a3:f9:e4:a3:1f:50:d2:39:5d:96:22:cb:cb:be:
22:ac:4f:24:44:75:4c:db:e4:4b:36:d5:39:3b:e7:
b3:3c:bb:7d:e3:f9:5c:34:c3:87:c6:59:f9:f1:41:
a9:25:c4:c1:7f:84:66:ce:a2:36:da:7c:89:70:16:
74:70:3c:5b:6a:26:46:82:a4:6f:79:47:73:e1:e5:
3d:80:c6:6a:6f:0b:0c:18:8f:f1:3a:ef:77:cd:ef:
66:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:47:94:5D:41:46:8E:8B:36:68:57:D5:A4:10:C4:E6:36:4E:47:02
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:20:a2:4c:88:52:58:d3:2b:61:cd:18:02:4c:c3:13:64:6b:
94:a7:cc:fa:d9:2f:1c:83:e5:03:12:c9:86:da:c7:5b:81:92:
b7:20:6d:de:36:6b:74:65:39:24:23:ab:63:e8:74:a2:c6:04:
73:ab:95:9f:d5:50:9d:c8:0d:ec:c8:ce:c6:21:9c:b2:0a:23:
e4:84:0a:de:73:c5:2f:1a:b5:be:ec:0f:68:db:c5:1c:d6:07:
c8:eb:83:18:fa:79:a6:c7:c7:a0:5e:fc:4a:18:5c:48:cb:bf:
89:42:7f:bc:1b:44:9f:25:a7:7c:5e:bc:70:c7:d3:64:4a:c3:
51:ae:3a:6d:f9:6f:92:ad:09:ff:ed:a5:b4:7f:f1:b1:48:86:
80:30:64:c4:69:61:61:94:9e:93:1c:01:cb:1b:15:52:e4:72:
e6:aa:36:90:30:99:a9:7d:a5:0a:b9:9e:f1:3e:22:1d:ec:cd:
be:4a:2d:0e:bb:04:35:e7:c7:41:fc:64:9c:00:8d:32:c4:f1:
5b:11:29:c2:73:1f:07:44:3b:45:c7:c0:4b:3a:1b:c3:a5:18:
0b:55:53:7f:31:2f:69:a6:fa:0c:32:35:b5:03:ab:f5:22:fa:
e6:8c:56:62:69:9a:4d:c4:1d:f9:9a:3d:51:14:aa:d1:09:93:
a6:30:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:42 2025 by rpki-client