Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json)
Hash identifier: MJAkjisVxBss8Nb9J7RItcWukLJjAa1HySaQZhm8X5Y=
Subject key identifier: 0B:1B:F5:8E:D5:71:4E:EC:66:18:6E:7A:04:72:9A:87:7A:52:DA:C6
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 0194BA844C48E2E70BC1BDAC5A0E7F6A6BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 04:00:19 +0000
Manifest this update: Fri 31 Jan 2025 04:00:19 +0000
Manifest next update: Sat 01 Feb 2025 04:00:19 +0000
Files and hashes: 1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=)
2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: D+dRUnZsytDTuZHJHnr59ivp3lMAytu8aTEl8BTUsDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:4c:48:e2:e7:0b:c1:bd:ac:5a:0e:7f:6a:6b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Jan 31 04:00:19 2025 GMT
Not After : Feb 1 04:00:19 2025 GMT
Subject: CN=0b1bf58ed5714eec66186e7a04729a877a52dac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:e4:e0:c0:9b:22:da:28:3b:d8:df:c1:a1:
0a:ae:6e:8b:82:3b:37:2a:ba:f8:52:5b:d4:05:fc:
82:6e:36:42:63:b2:91:b4:d2:aa:a0:f2:26:ab:b7:
00:d0:f9:1f:58:ee:fd:71:63:73:82:4d:ce:84:ce:
05:20:03:38:54:da:08:9c:0d:fa:bc:5c:8b:5f:58:
4a:0d:13:52:9e:4c:cf:9c:00:66:e9:6a:3a:aa:19:
43:a3:70:d7:e9:b0:6d:f3:26:9d:49:c8:75:fa:d4:
a4:47:d3:c6:42:2b:a3:cc:fd:77:af:89:54:3e:45:
d1:e4:80:65:c0:02:7f:3d:1b:40:6a:8b:4a:d8:0f:
f1:ac:ab:1c:fb:d1:bc:69:b2:31:41:7d:ab:da:47:
1e:6c:3e:7a:98:62:1d:94:3d:78:f0:f4:8c:9f:4e:
be:fc:b6:cb:91:3d:39:57:54:98:ea:aa:81:40:3d:
94:e7:ee:7d:64:48:ed:59:85:22:c3:3c:2f:78:56:
86:29:32:74:92:9a:70:36:01:54:d1:4b:bd:a4:99:
5e:3f:74:f3:be:21:62:a9:c5:16:c9:6c:8d:61:8a:
f1:a7:01:24:94:d4:bc:42:2a:e5:8f:93:02:2f:93:
75:12:5d:ce:c5:02:ba:8b:5a:9e:d3:af:30:ef:df:
95:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:F5:8E:D5:71:4E:EC:66:18:6E:7A:04:72:9A:87:7A:52:DA:C6
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ee:79:d5:0b:bd:0b:09:ba:2f:b4:0a:ab:a7:b7:1b:1b:9c:
4f:63:8f:8b:6f:b3:2f:4d:23:72:70:25:fb:58:54:1f:b8:cb:
ed:76:e6:58:ba:83:99:b4:b0:57:e7:2e:4c:d8:e6:83:64:41:
9d:48:e9:50:6e:5e:d0:d4:fc:49:b3:d2:c6:b4:03:77:44:e3:
a0:08:64:2c:6f:80:7c:40:31:f2:52:84:4c:7a:d2:84:e4:73:
aa:a4:2e:a2:f5:74:b3:53:25:5d:09:e5:7b:f0:68:90:f1:aa:
58:66:3e:9a:a8:ba:a6:75:c9:87:4f:63:d4:93:23:b4:c9:2c:
79:bd:07:53:07:42:2e:69:43:22:10:3f:e5:5d:a8:06:9a:89:
db:38:32:65:1a:4e:f7:b8:99:c4:6a:be:3c:18:49:0b:8d:fd:
23:42:4a:eb:1e:11:fb:58:1e:49:a9:5e:d1:cd:60:d2:4e:3d:
48:ef:7f:6d:9e:cd:d1:5c:b6:91:4e:df:c3:f5:57:3d:69:98:
31:c8:69:21:4f:43:85:6f:51:73:8e:c6:dc:90:d1:19:78:08:
da:eb:3a:d1:3d:7d:c4:15:3b:83:e5:2b:b3:b2:a1:92:47:fe:
c5:20:d6:57:15:8b:bf:7e:8c:06:2c:ff:8e:00:fb:e9:ed:b3:
a9:cf:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:56 2025 by rpki-client on console-fra.rpki-client.org