Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
File: HyyzW4dHgMuT3EQhC5151u2U_l4.mft (raw, json)
Hash identifier: H8t3TpGG0zrIg9sVo97ZXwnULDi5cHC+tU2+TgtrgoY=
Subject key identifier: AC:5D:A7:B8:4D:6E:AC:7D:69:80:51:A8:4D:DE:7E:D6:2D:7C:77:87
Authority key identifier: 1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
Certificate issuer: /CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Certificate serial: 019511A2BB4403BE3A3B7D91C46CEFC11001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 02:00:32 +0000
Manifest this update: Mon 17 Feb 2025 02:00:32 +0000
Manifest next update: Tue 18 Feb 2025 02:00:32 +0000
Files and hashes: 1: HyyzW4dHgMuT3EQhC5151u2U_l4.crl (hash: 4kw9qnMQ7uGKoxD+z6fGXx/uXrcvJ0KR4aMmKOk9ZEs=)
2: UyByoYW1eGUazMnJ8I-2ncOK0hs.roa (hash: 2RQW6HeC6UJWl0PyhVUJ1Au2Gjg5MsY0s3xBfwIHAaw=)
3: vRyA1sBnGbBdfcd9RnV3r6TFptk.roa (hash: +l9+gT14Y8WjAyCtiqhfE/NWwkGANddHeME8IP4u0y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:bb:44:03:be:3a:3b:7d:91:c4:6c:ef:c1:10:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f2cb35b874780cb93dc44210b9d79d6ed94fe5e
Validity
Not Before: Feb 17 02:00:32 2025 GMT
Not After : Feb 18 02:00:32 2025 GMT
Subject: CN=ac5da7b84d6eac7d698051a84dde7ed62d7c7787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:1d:42:b7:6d:b4:84:ab:4f:a8:2d:f0:0a:
92:da:9c:ba:c6:ad:f3:ac:69:f8:11:4a:1f:9d:14:
a8:db:4b:80:ac:b4:5d:e0:32:c9:d6:44:58:1c:f5:
b1:e6:18:64:fb:09:4a:67:6d:05:89:95:5c:04:14:
05:13:74:54:c6:81:6b:65:2a:a9:36:6c:b1:59:26:
a2:ad:72:39:81:d6:c1:09:d8:90:df:31:f9:d7:21:
cf:24:1a:c2:b6:7a:77:c3:ef:0a:28:6c:f1:41:1c:
85:06:09:3a:4c:4a:3b:d4:e8:45:9c:e4:0f:76:2b:
a0:26:6f:c1:a6:bc:83:9b:08:8f:5c:05:4c:96:f4:
a9:c6:c3:de:66:8c:54:ba:3c:1d:f3:60:c9:95:1d:
f2:09:58:86:46:7d:5f:76:3c:fd:64:ad:77:25:79:
5a:6b:d2:df:ea:de:a6:5b:69:af:58:6e:32:46:ab:
18:55:21:12:08:5b:2b:34:8d:24:5d:2b:d4:39:ee:
af:fd:73:d3:1e:d4:21:a0:ea:e0:3f:c4:c3:ab:0a:
67:9a:14:bf:e8:cf:63:aa:f6:c0:a1:d8:ea:05:b8:
f0:ac:64:41:d2:41:4c:a9:ad:06:6a:cb:79:7e:34:
7b:df:89:4b:28:52:9d:26:fc:2c:14:89:ac:7f:f7:
7d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5D:A7:B8:4D:6E:AC:7D:69:80:51:A8:4D:DE:7E:D6:2D:7C:77:87
X509v3 Authority Key Identifier:
keyid:1F:2C:B3:5B:87:47:80:CB:93:DC:44:21:0B:9D:79:D6:ED:94:FE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyyzW4dHgMuT3EQhC5151u2U_l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f0372a-c332-485f-b293-a6d2684a9425/1/HyyzW4dHgMuT3EQhC5151u2U_l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:8f:82:f6:92:82:fa:ab:ee:ff:87:b7:1c:66:0b:7a:40:22:
b8:b5:7e:83:9e:56:fd:b0:08:18:30:16:d3:2a:3e:15:80:bf:
25:01:61:14:74:9f:d9:8b:1d:d8:20:0c:30:8b:d2:80:cc:01:
68:cf:b4:88:50:ad:b4:6f:7d:db:03:fe:15:0c:97:67:71:19:
32:4f:06:13:f9:ef:d1:45:fd:0a:05:c9:dd:2a:ee:d9:f8:01:
b5:f2:92:d0:b4:ab:80:53:84:f2:ed:1a:c0:35:78:b0:6e:56:
74:4b:2e:ab:53:a2:ee:93:39:3f:ad:f3:ba:2a:63:7c:9c:28:
36:be:d9:13:80:4d:37:05:aa:35:e7:1f:82:59:f3:69:6e:0b:
0c:88:be:80:35:13:e1:77:53:dc:33:29:25:d1:e9:32:e6:1b:
30:d1:e4:29:d5:3a:27:9c:85:9d:79:5a:64:df:0b:bb:98:e5:
c0:48:1c:fb:ea:e0:45:d8:dd:d7:3c:c9:73:16:08:b6:f9:24:
45:42:0c:f0:b1:fe:ac:c3:88:4a:49:0c:32:88:2c:c6:6e:9b:
d3:d2:e3:ac:5e:d5:2d:ab:c7:2a:69:05:67:6a:99:65:cb:00:
98:8c:2f:25:5c:24:1b:3f:d0:54:86:a5:d4:76:5a:94:54:16:
e0:25:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:54 2025 by rpki-client