Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
File: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft (raw, json)
Hash identifier: RCBgDv+gQpwpO4n8IWhnIzmc8vMR1+bQcDeUr0xtwK0=
Subject key identifier: 43:31:03:09:AC:D4:A6:DD:AB:31:37:C3:EB:A5:69:76:47:37:D3:3C
Authority key identifier: F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
Certificate issuer: /CN=f07be9d1189771b7337efc1ced2c825dc2472a56
Certificate serial: 0194BB60465404BB989D0CC5846CC3D2AF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
Manifest number: 0152
Signing time: Fri 31 Jan 2025 08:00:36 +0000
Manifest this update: Fri 31 Jan 2025 08:00:36 +0000
Manifest next update: Sat 01 Feb 2025 08:00:36 +0000
Files and hashes: 1: 8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl (hash: aXZokMmaxfcMBtg2OPcSNVoRcyMivWxKxSL7G8bGxZw=)
2: J2wzb8YKKVcFBB9aw2nmFsUG6Ac.roa (hash: uNatwiz0kls9jaP1S1snowxFlS7dqcfH880Un/eLhPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:46:54:04:bb:98:9d:0c:c5:84:6c:c3:d2:af:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f07be9d1189771b7337efc1ced2c825dc2472a56
Validity
Not Before: Jan 31 08:00:36 2025 GMT
Not After : Feb 1 08:00:36 2025 GMT
Subject: CN=43310309acd4a6ddab3137c3eba569764737d33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c1:8c:22:1a:f7:92:0e:87:34:bc:8d:1e:21:
fa:ce:cc:11:93:da:2b:6d:ea:e9:a1:da:37:74:bd:
da:ec:2b:3a:e9:ad:5e:a1:fc:46:a7:34:9f:14:ab:
fa:ee:b6:45:b3:2e:d4:7c:2b:37:63:50:76:3b:b9:
cf:7a:df:5d:89:be:88:a8:02:ae:93:58:43:94:74:
24:35:f1:16:52:80:26:a0:ff:4f:2a:1a:3d:73:a2:
81:12:ed:79:03:47:74:72:a1:6e:46:4b:48:46:b1:
ce:ca:73:ad:f6:63:f9:3d:46:fa:9f:2d:91:97:8c:
7d:09:74:40:40:73:98:16:a0:26:1f:c9:7f:b0:8f:
88:d1:8a:fc:f3:d1:ba:1d:5f:72:6e:2b:46:29:0c:
78:c5:fd:fc:ab:02:5f:9d:a6:1e:54:7c:8f:93:ac:
b9:a2:d3:7c:1d:e2:c6:80:4c:56:b1:b4:d8:f7:81:
ea:e1:25:3a:1a:b1:c0:ad:81:59:6c:15:ce:a9:c1:
21:4b:e9:10:0b:12:72:10:8c:22:83:07:d8:9a:33:
34:64:bc:41:36:98:eb:b5:ba:46:93:61:6c:e4:59:
53:ac:cf:31:c7:48:30:b7:81:86:07:0c:90:96:05:
91:1a:29:52:5d:95:8b:23:e7:1b:6f:70:11:ba:69:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:31:03:09:AC:D4:A6:DD:AB:31:37:C3:EB:A5:69:76:47:37:D3:3C
X509v3 Authority Key Identifier:
keyid:F0:7B:E9:D1:18:97:71:B7:33:7E:FC:1C:ED:2C:82:5D:C2:47:2A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Hvp0RiXcbczfvwc7SyCXcJHKlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ec1816-5466-45a6-ae61-3fb0870ea259/1/8Hvp0RiXcbczfvwc7SyCXcJHKlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:66:fb:e6:56:1a:52:3c:d9:28:7a:f5:33:e5:d7:40:26:98:
a4:ed:86:56:6e:50:17:df:49:81:3f:37:6e:5b:3c:03:ec:af:
df:23:89:b0:8d:c8:40:c3:f9:3b:79:3d:1a:8e:c0:a2:1c:4e:
de:c4:f9:68:df:fb:1e:61:e3:89:1a:38:4a:3b:70:42:22:a2:
cc:2c:8a:4c:0c:41:54:fc:fc:80:f2:00:de:20:28:7d:fd:20:
2f:83:1c:98:a1:88:1e:7a:fb:5e:e1:b5:3f:46:82:9b:d4:2e:
e6:d8:a5:fd:21:85:cd:c6:4b:74:a6:f5:69:b6:a6:aa:e3:25:
6c:22:37:f2:58:b9:99:08:1b:22:48:cf:c7:06:76:0b:7c:63:
6a:f1:10:e0:09:a8:70:e0:04:59:d5:cc:1a:ba:4d:0d:f7:cb:
16:b1:80:68:f8:72:34:24:92:a7:bf:2e:d6:77:f8:53:c8:6b:
ac:19:3a:95:79:68:2c:f2:fe:58:57:73:dd:6e:77:e5:00:3d:
30:4c:11:42:b0:d2:6b:aa:c4:e8:9f:ca:90:f7:f2:19:9d:a4:
7d:ba:bb:81:ea:10:af:12:5a:52:94:78:29:1b:1d:66:29:a2:
1a:b8:ef:8c:7d:0b:63:cf:de:03:5e:e3:5e:b3:fc:7e:9e:c0:
0f:4e:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:27:00 2025 by rpki-client on console-fra.rpki-client.org