Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier: xDOstFr2/juPdKXxk1sbmXTtTF2wlkWsplZJ/avdtUE=
Subject key identifier: F0:99:BB:18:FA:A3:AC:1E:57:BD:A6:39:88:D2:12:43:55:90:E2:E5
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 0194BAF25C28D8CB571FB7DD907D83F86B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number: 04F1
Signing time: Fri 31 Jan 2025 06:00:32 +0000
Manifest this update: Fri 31 Jan 2025 06:00:32 +0000
Manifest next update: Sat 01 Feb 2025 06:00:32 +0000
Files and hashes: 1: EKLQu7iYylRaZbkh51ntRdvQ1sc.roa (hash: RK+Kru3PnFxl9Ll91ljugGNNYfjxqJD6II7naH011aw=)
2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: 13Qdz/MklTOTxFmQjkV62y4CXmFMWIBA30nbFs73WDw=)
3: lO9lnjMKShKR1lmHSBZdeXnPEkY.roa (hash: c7CjjG3dW9IskX6aNGKT3OeAaVeTmT4gSZizwrVUurs=)
4: maJ8CmpVji7iExXaEzUUxHgibH8.roa (hash: JObe+le+P4uoJGOeOZ+4H+wfXfvsZKVWkXVTp6TQq5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:f2:5c:28:d8:cb:57:1f:b7:dd:90:7d:83:f8:6b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Jan 31 06:00:32 2025 GMT
Not After : Feb 1 06:00:32 2025 GMT
Subject: CN=f099bb18faa3ac1e57bda63988d212435590e2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:c8:67:2d:22:b1:0e:1f:73:bc:ff:e8:eb:
17:78:e7:85:1e:59:c4:8f:96:0b:58:5f:fe:bf:75:
7b:78:e8:9b:74:90:bb:b8:75:c4:44:b0:74:83:7a:
c5:77:bd:b5:97:ff:46:35:00:cf:8e:fe:66:ea:e2:
e1:b8:ba:f4:1d:dc:39:5d:76:9d:94:dc:fb:2d:ac:
5c:f2:ea:49:96:81:63:e9:7f:00:47:ea:c3:d6:c1:
8e:c3:16:8b:5b:aa:82:fc:ab:01:6a:61:15:03:87:
de:f8:9f:f6:17:91:f9:b6:19:46:f5:37:7f:d3:27:
08:40:f7:32:1b:b4:16:79:7c:6e:5a:43:55:9d:1b:
21:f9:e2:b4:2b:20:ee:70:33:05:d4:b5:74:fc:e1:
ac:4d:45:c8:77:38:7b:dc:65:1a:b6:da:64:da:f2:
aa:e9:39:58:fe:0c:14:e5:d6:d3:f2:61:ff:e5:fc:
51:e6:bb:eb:7a:cb:ff:b5:12:95:2f:75:18:56:a7:
ad:06:15:1f:98:5c:c0:47:cc:6d:09:57:80:e3:49:
71:e3:05:95:9a:30:12:94:1b:6a:43:ee:eb:77:e2:
a5:9d:2b:c7:a9:3d:a9:ba:92:85:9c:d4:af:56:4f:
8b:21:14:97:b2:c8:15:a9:4f:6e:42:ca:6a:49:09:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:99:BB:18:FA:A3:AC:1E:57:BD:A6:39:88:D2:12:43:55:90:E2:E5
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5d:31:41:75:dd:ea:1f:a6:b9:71:65:f7:66:4a:30:79:e2:
56:20:93:3d:7b:51:b8:02:ac:06:b8:88:5d:16:2b:2d:b0:fc:
75:ec:68:a9:31:a2:65:50:61:b3:cf:47:ac:a9:b6:dd:c4:92:
65:fc:84:f4:37:2e:e4:55:9c:3d:98:b7:e2:de:51:4c:8c:8e:
25:41:4b:59:42:3a:57:15:b2:d0:26:81:3d:ee:e3:d5:49:90:
e1:85:db:41:65:ef:d5:14:af:84:c9:36:e2:77:64:1d:a7:ba:
be:2d:12:3a:60:01:b7:fb:3c:94:bd:5e:02:63:b4:20:86:66:
d0:2b:70:e9:8f:6d:d1:b4:00:18:0c:6f:14:29:ef:c9:f3:6a:
b5:bd:89:8d:be:bb:96:b6:65:eb:6b:17:d2:4c:61:cd:8b:c2:
74:19:06:e8:10:7f:d6:6a:1b:f9:9f:fc:10:7d:5c:10:50:de:
06:8d:12:d2:0f:cb:aa:05:7e:a8:2a:85:2c:c4:ae:bb:6c:f5:
c8:65:24:80:de:6b:d4:d1:7f:92:75:73:3d:78:56:9e:9f:90:
6e:12:b4:06:e7:a2:03:3c:33:ae:0a:41:81:5a:76:f5:a9:b8:
68:ef:d7:d4:33:48:cc:c1:14:ad:53:b3:20:58:54:ab:9e:e4:
95:39:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:30:13 2025 by rpki-client on console-fra.rpki-client.org