Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: GpZX5ieUT1zemYVQp6yp3WQf8lZT5i173AzN2YKLvDA=
Subject key identifier: 66:DE:6F:8F:32:E7:C0:49:B3:44:CF:B3:E9:06:C9:D1:F3:7B:E9:7C
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 0194BABB928C2688EA24721E575FC9FCBFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 0249
Signing time: Fri 31 Jan 2025 05:00:42 +0000
Manifest this update: Fri 31 Jan 2025 05:00:42 +0000
Manifest next update: Sat 01 Feb 2025 05:00:42 +0000
Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=)
2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: 00/6q2aP2Nt5jKekSBPGEWeRtE7kuasR2ScB8N0Op0w=)
3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:92:8c:26:88:ea:24:72:1e:57:5f:c9:fc:bf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: Jan 31 05:00:42 2025 GMT
Not After : Feb 1 05:00:42 2025 GMT
Subject: CN=66de6f8f32e7c049b344cfb3e906c9d1f37be97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:01:3e:f9:b8:a4:57:24:9c:cb:82:dd:c0:
f5:45:07:94:d3:09:81:1f:ab:d0:71:30:3f:7e:4b:
5f:f8:e6:52:71:24:24:5e:98:06:dd:34:31:dd:d3:
48:ee:19:38:08:1b:eb:29:3f:3d:95:6e:03:36:2d:
5d:48:6e:59:a1:fe:af:a0:df:44:13:f2:e2:05:13:
32:11:6f:21:13:ae:3c:91:86:f8:5b:71:5f:3b:e6:
53:c4:1f:48:df:9b:fa:c1:43:21:a8:f3:07:95:74:
b3:50:5a:b8:3f:06:45:e1:38:f0:8c:91:d7:5e:bc:
c6:63:49:57:df:3f:e8:e0:5e:c5:0c:fe:9d:24:2e:
d2:b3:2e:e7:94:a9:ec:a6:77:21:0a:3a:b7:6a:2b:
ad:5c:08:70:d9:78:02:d7:d4:94:66:64:f0:87:2a:
ca:35:be:ec:58:c9:2d:14:3b:6a:6a:3e:db:3b:60:
82:b0:ef:f5:36:1f:c4:a7:af:01:b0:94:21:48:b3:
bd:b8:7d:71:87:13:58:54:f1:ac:78:b3:94:75:0b:
9f:24:29:5c:6e:43:3a:4f:2b:ee:fa:4a:5d:24:4d:
52:00:06:3d:de:a2:0e:1e:8f:78:70:28:2a:0f:b8:
5f:53:f7:a5:47:3a:bd:ab:fa:11:21:b4:c2:03:71:
97:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DE:6F:8F:32:E7:C0:49:B3:44:CF:B3:E9:06:C9:D1:F3:7B:E9:7C
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:27:37:ba:85:9f:95:19:45:6c:df:2f:b1:d4:29:72:12:22:
65:f9:a5:5f:b7:97:37:44:c6:79:fe:a7:f0:1c:aa:ee:4a:1d:
4f:73:b5:27:49:17:74:da:be:b0:a3:a0:18:39:b3:cb:bc:60:
53:72:e2:a3:e2:14:d6:fe:24:ed:61:c3:84:de:65:17:33:d5:
0b:87:88:de:71:ea:60:ee:4f:20:b5:17:5e:7c:ae:f0:2d:38:
a7:5e:78:c6:35:9f:0d:1c:1b:25:f7:17:de:34:3a:a7:30:59:
91:31:f1:17:a5:5f:72:8f:ec:c5:c6:6d:01:5b:09:fa:ea:0e:
6c:e4:f3:53:8b:09:17:45:49:9d:38:29:49:8f:a0:b1:2f:cf:
5f:18:ae:41:6c:53:65:65:dc:2c:e3:c6:ae:a9:1a:b5:7a:6a:
4c:16:ab:65:74:eb:d3:58:7c:87:73:6d:1a:fe:4a:6b:19:1f:
a2:a8:59:0f:0e:4f:90:79:73:df:a1:62:71:13:04:53:74:99:
8f:b6:d8:92:cd:d7:b8:66:bb:db:7f:55:8a:a4:5a:db:68:c0:
cd:46:4e:01:32:05:e0:d2:fa:53:16:df:be:55:ee:8a:f9:22:
31:80:e4:ed:95:8f:49:31:d3:e4:5c:93:d5:55:38:98:80:76:
62:df:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:43 2025 by rpki-client on console-fra.rpki-client.org