Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
File: DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json)
Hash identifier: 2+tizyI9v/S862BviCo7U4Mn1mEQuQvjtqbqAb5eKsU=
Subject key identifier: 56:22:35:BE:BD:68:37:A5:83:A0:D9:2A:0B:14:6C:BE:85:F8:F4:68
Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782
Certificate serial: 0194C5085116708257979A4D636080106ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
Manifest number: 0F
Signing time: Sun 02 Feb 2025 05:00:43 +0000
Manifest this update: Sun 02 Feb 2025 05:00:43 +0000
Manifest next update: Mon 03 Feb 2025 05:00:43 +0000
Files and hashes: 1: AyMTRTSNhqKy20C0SEK--C7gNJ4.roa (hash: /rFc3n1MX+dvr9KRftoBZVejlv7vWIrjtjmHQ1QhM24=)
2: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: txWFe77CbOKwX8fcF90XSQ0o/6JH1cm+xHnhw8bqs1w=)
3: ihZ66_FRP1ZEi9NozSdwfCGel-M.roa (hash: wFOQHVX1zMY4YtBKixW4VOsy+9ZxuzYcQZi+JYB6nWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:08:51:16:70:82:57:97:9a:4d:63:60:80:10:6a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782
Validity
Not Before: Feb 2 05:00:43 2025 GMT
Not After : Feb 3 05:00:43 2025 GMT
Subject: CN=562235bebd6837a583a0d92a0b146cbe85f8f468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:53:eb:ce:24:b2:3f:47:fe:e2:c1:2a:02:
0f:cf:df:53:52:27:83:ae:4a:aa:bf:75:5b:cb:1e:
26:96:b7:8b:2e:3b:36:3d:fe:7c:68:11:c9:98:1c:
b2:68:1e:1e:ba:07:1b:f3:e3:67:aa:46:08:0c:d7:
94:bb:65:8b:26:fd:de:02:a0:3c:7c:d2:c1:f4:42:
1f:00:ae:d2:c3:d0:2b:08:55:ef:e2:06:9e:6d:fc:
c3:c1:cb:87:c7:be:8b:ee:78:ca:b5:7c:e9:79:43:
9b:3c:39:49:94:54:3b:de:04:a1:53:3a:a6:34:68:
4b:c7:d5:36:8d:ff:05:39:85:b3:ee:44:e2:d2:e2:
05:68:c2:ad:80:3f:7c:86:f6:e5:4d:cb:15:7d:54:
ab:50:5c:06:d1:d7:d1:f8:83:f5:07:1e:69:1c:c2:
b8:53:91:8a:77:ea:a3:39:26:8d:3f:51:61:7b:6c:
25:1a:e5:9b:72:39:1b:df:3a:17:12:70:91:f7:b4:
e6:e9:15:73:b2:e5:7c:c9:8f:6c:7f:60:a9:f3:e7:
5b:64:55:5b:db:a1:7b:03:cd:08:b0:11:92:42:86:
02:c5:63:15:f6:eb:f7:6d:2a:12:dc:ed:33:96:57:
b1:6c:e4:6b:19:a2:96:42:07:af:62:3b:0f:14:9b:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:22:35:BE:BD:68:37:A5:83:A0:D9:2A:0B:14:6C:BE:85:F8:F4:68
X509v3 Authority Key Identifier:
keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:58:1e:f3:5d:70:73:26:93:04:1f:e9:6f:ec:bf:6d:5d:9c:
a7:aa:92:55:8d:40:1a:b8:42:2f:0d:3c:e2:8a:93:e1:61:a3:
d4:3a:17:3b:6b:3f:6e:32:79:d7:7e:a0:2a:bd:c8:e8:47:57:
a3:02:8c:ea:5b:b7:89:34:cd:3f:4b:2d:40:70:2a:4b:93:78:
b9:4d:9f:31:1f:ae:2d:e7:9a:5e:43:47:57:57:d6:c3:63:e0:
d3:04:cd:5d:b5:88:03:85:d5:20:28:dc:c6:41:8e:54:7e:3c:
72:ca:f6:12:65:76:3f:15:bd:9b:3c:3c:a9:7a:7b:37:74:05:
30:d6:92:69:a4:c5:83:d4:76:4d:ad:ee:71:37:0a:a3:c4:67:
14:8e:32:4a:35:df:db:a5:f5:a5:33:fc:a9:59:ca:34:ac:c4:
c5:5c:da:30:fa:42:04:68:84:6a:bc:1b:a8:2c:2f:ca:cc:b9:
f0:61:c3:9a:67:f2:5e:7a:16:ae:ac:4a:c7:b1:43:21:b8:b3:
5f:ff:ae:d1:60:a4:8a:a8:49:b0:12:16:32:00:ef:60:d7:99:
47:4a:60:8e:9e:0b:5a:4d:1a:09:aa:37:47:fb:13:81:56:a7:
a0:5c:bf:8f:77:58:ed:b6:94:ee:c7:58:0a:f9:e8:b6:44:7c:
16:d1:b3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:52 2025 by rpki-client