Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: P0efyY9HcIATjgTxHt5FtKP5V0rG1fl8WbQ8lTBDkKk=
Subject key identifier: 2A:A7:B1:9F:36:1C:17:9C:79:C6:81:2F:3E:85:6F:29:8F:70:31:A0
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 0194BB6038B620D8F062D7D4C2D64C7CAF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 08:00:32 +0000
Manifest this update: Fri 31 Jan 2025 08:00:32 +0000
Manifest next update: Sat 01 Feb 2025 08:00:32 +0000
Files and hashes: 1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: WkRPo9/TglOVvwgD/5A8/CvFk57l8cRHFfo68+cXPSM=)
2: eNFG-PCCE4y-AFcmWiHx3RyG7nQ.roa (hash: UjvYsBltNXDFlhfaOzku1vtdcH3iWC+A6hFXawcbjCc=)
3: hRJ0dFuJTo0f67z5A3zupA3p9Eg.roa (hash: DEPtmvNaAFnv4bw8oxA9ykREwTuLcaBuOAc2e9nbKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:38:b6:20:d8:f0:62:d7:d4:c2:d6:4c:7c:af:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: Jan 31 08:00:32 2025 GMT
Not After : Feb 1 08:00:32 2025 GMT
Subject: CN=2aa7b19f361c179c79c6812f3e856f298f7031a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:54:16:3e:b6:fc:a6:80:20:94:75:d7:5e:
c7:8b:2f:8d:7f:80:02:ff:fb:d6:f4:3b:54:ff:14:
14:2d:62:07:f5:77:82:91:b5:19:d6:a3:35:c2:92:
b2:29:18:24:c8:78:e1:9e:fa:d8:ae:4d:5b:f5:41:
07:36:d5:24:b2:7d:f0:e6:c7:79:50:e8:0d:18:26:
de:44:73:02:3f:ad:79:d4:43:ca:fe:74:13:eb:a8:
fe:54:b1:b4:dc:06:0d:0d:f4:47:e5:4e:22:4c:e5:
5b:39:be:45:20:ba:7f:04:9a:19:41:a7:b3:2c:0d:
00:31:19:55:36:af:09:5a:7f:e4:54:0c:a8:ee:f4:
97:77:ab:57:5a:35:4d:c7:5b:42:cb:9b:d9:e1:d3:
04:83:73:50:ce:a2:87:85:84:cf:cb:d6:55:77:2e:
35:08:84:32:a4:a3:1b:37:8a:63:57:4d:b4:95:fb:
dc:2f:55:c3:0b:29:6e:67:8f:e1:25:d8:23:2a:86:
01:b8:bf:03:37:5b:95:42:07:ba:45:91:45:1f:29:
57:c1:18:4c:c3:9f:43:f5:86:ed:63:15:37:51:2f:
0f:bb:9f:05:f9:36:3b:a4:e2:00:c2:34:88:53:4d:
66:a7:ca:89:11:f7:56:af:76:d0:a7:e5:2d:4a:c1:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A7:B1:9F:36:1C:17:9C:79:C6:81:2F:3E:85:6F:29:8F:70:31:A0
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:85:24:6b:1e:7b:b6:9d:a7:b1:d3:b7:a4:b3:a7:e7:29:f6:
44:09:c8:53:ce:9e:98:1a:41:a4:81:c7:26:55:29:80:8e:cd:
8e:30:a1:69:59:52:46:09:37:f9:d5:90:6c:02:ef:0d:24:03:
03:89:9f:52:01:52:26:c9:db:68:ac:79:aa:f0:43:b1:e8:82:
72:95:60:b2:94:0c:67:18:e8:2f:ed:cc:d3:c7:e3:a7:b1:0f:
e3:c0:c5:5a:d6:d8:f9:de:d1:e6:aa:ca:e0:65:d2:bb:9d:c3:
23:f8:4f:f0:a9:3a:48:16:b1:1b:ec:30:34:f8:8b:f7:9c:27:
80:a8:d1:80:ba:2d:74:c2:be:c7:32:9f:bd:d8:21:9b:a9:1f:
82:79:e5:c3:3c:82:21:44:ab:15:68:3a:aa:1f:09:05:87:4b:
44:cc:29:4b:04:50:78:2d:14:3d:2b:af:46:15:db:03:0d:01:
7e:fc:1a:14:b8:0e:16:79:5b:10:c6:f2:3d:85:4e:f7:89:51:
70:76:e6:8b:ef:a7:55:d1:36:9c:64:1f:86:25:37:fc:08:87:
3d:43:df:49:79:f2:de:76:90:fe:c9:43:c4:82:dd:f1:81:e4:
b1:c3:80:30:41:bb:aa:df:32:95:d4:8d:14:ad:2c:a8:d0:ac:
5f:95:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:28:31 2025 by rpki-client on console-fra.rpki-client.org