Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json)
Hash identifier: 8/3YMTm5pPJL4+3OaRtQDndgj1g3CwK3NJWQ7zml97c=
Subject key identifier: 71:D0:DD:18:C6:79:76:6E:16:46:3D:6F:11:23:A6:FC:71:40:FD:08
Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52
Certificate serial: 0194BA844D3066530DE86473572CAEDCE1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
Manifest number: 0FE0
Signing time: Fri 31 Jan 2025 04:00:20 +0000
Manifest this update: Fri 31 Jan 2025 04:00:20 +0000
Manifest next update: Sat 01 Feb 2025 04:00:20 +0000
Files and hashes: 1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=)
2: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: Wtds0BkkMPM+XQgtyHhEKz4UlUqNLrfmhEmrLFxY8mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:4d:30:66:53:0d:e8:64:73:57:2c:ae:dc:e1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52
Validity
Not Before: Jan 31 04:00:20 2025 GMT
Not After : Feb 1 04:00:20 2025 GMT
Subject: CN=71d0dd18c679766e16463d6f1123a6fc7140fd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:ed:f1:24:c0:8f:76:8a:31:cd:4b:68:eb:
86:29:7e:8b:61:5b:46:17:6e:12:b3:82:89:4a:7c:
a7:ab:4d:28:53:52:2b:14:4b:cc:81:05:23:6f:16:
f2:79:a8:0e:d2:3e:70:16:58:4a:cb:70:0c:61:43:
cc:16:1b:26:77:1f:24:58:2a:73:8b:a0:f2:4b:1b:
2d:ff:34:0e:6e:2c:16:48:c9:8c:a5:49:94:cf:17:
f9:cb:c2:3f:de:f7:be:8d:c8:50:46:2d:0b:28:a3:
d9:a8:86:a2:7d:a6:65:66:89:51:80:cf:cc:e5:52:
60:b4:7c:34:c9:d8:f8:c4:f4:1f:35:f8:6a:bf:63:
ba:65:2c:8a:f7:04:f7:63:3b:7d:70:55:5d:fd:43:
36:0d:5c:03:73:77:57:b7:75:98:ba:fe:2e:74:4d:
17:7b:ce:80:7f:a2:ff:87:8b:f2:89:8b:c7:ce:7b:
52:13:09:43:e5:c3:88:3e:80:93:28:3c:d9:21:2a:
d3:b3:62:ee:94:48:4c:89:af:37:f5:ec:82:57:28:
66:c8:3a:7a:c6:00:75:22:b4:00:3c:8b:7e:3b:4c:
8d:26:1f:53:88:9c:63:a0:4c:0f:19:d9:df:a9:8e:
cf:a1:32:40:7f:87:dc:7b:f5:98:20:4c:9c:10:32:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D0:DD:18:C6:79:76:6E:16:46:3D:6F:11:23:A6:FC:71:40:FD:08
X509v3 Authority Key Identifier:
keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:dc:ec:9f:bb:8b:6f:ee:29:e1:50:6d:6a:26:c0:11:3c:20:
e6:d0:2a:f2:a8:80:5b:e6:7a:5f:58:90:8d:d9:a2:5d:4e:af:
06:2d:90:8a:0a:7d:92:f0:4e:f5:0c:93:40:71:83:46:90:1d:
c5:7e:20:d0:8b:52:0d:74:5a:73:52:a4:18:cd:3b:96:28:1c:
1b:d2:e3:d2:39:cf:41:98:ac:61:e6:9f:cc:1c:fb:0d:ad:63:
ff:84:ab:d4:dc:07:e3:d7:93:a4:0f:b6:9f:93:09:e4:20:d8:
f1:e2:c1:b7:9b:1b:37:17:b1:ef:5d:16:dc:a1:ed:95:ac:1a:
18:f9:5e:f6:cc:6f:9f:e0:b3:96:ad:a7:bb:ca:65:87:97:7c:
a9:64:7f:59:30:81:ea:d3:b0:8e:81:d8:3b:bb:9e:d0:6c:d4:
bb:5a:f8:f9:01:0c:90:5a:b4:cb:7d:86:1b:7a:63:66:ea:11:
0b:e8:b2:d6:2c:c2:f6:12:64:12:b4:2e:84:e1:30:69:6d:df:
41:01:ef:44:87:f0:9b:68:d6:51:e5:16:11:3b:86:23:3d:e8:
ca:63:33:e5:28:ae:51:3b:d8:fc:db:10:db:68:a4:ea:73:cf:
58:5a:72:84:f9:ed:d3:7d:c4:0e:8b:76:55:53:f2:a0:94:12:
d6:6d:36:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:26:13 2025 by rpki-client on console-fra.rpki-client.org