Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: GmmUKFakMbX9qp+3PxtEv8EBRIokPeumyZDPPrm1yU0=
Subject key identifier: CD:2F:B4:21:39:C2:CB:38:3D:3C:EE:3F:98:6E:D7:5F:70:F3:15:F1
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 019511D968219459A0DE4EE9E8334C586BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 1457
Signing time: Mon 17 Feb 2025 03:00:15 +0000
Manifest this update: Mon 17 Feb 2025 03:00:15 +0000
Manifest next update: Tue 18 Feb 2025 03:00:15 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: H+RcrDUSp/N1K1S83WrrFfqYruZu3SZ7qqyTYEPV07U=)
2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:68:21:94:59:a0:de:4e:e9:e8:33:4c:58:6b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Feb 17 03:00:15 2025 GMT
Not After : Feb 18 03:00:15 2025 GMT
Subject: CN=cd2fb42139c2cb383d3cee3f986ed75f70f315f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:b2:9a:30:31:53:6e:03:52:f6:d2:63:df:
f5:f6:b7:d2:9d:68:cd:96:c8:0f:88:f8:6d:2c:bb:
d8:03:08:0e:fd:f7:4a:f0:4d:a1:be:26:22:74:2f:
d9:13:e0:0c:34:77:6f:13:ff:17:4b:1a:b6:ff:93:
35:61:7c:8e:1a:fe:bf:8c:ff:6d:ff:36:f9:13:c3:
ea:bb:97:87:52:e8:e2:04:86:8a:b0:f0:cd:8b:ba:
36:81:9a:1a:33:df:a0:6e:9f:84:f0:4e:38:7d:82:
4b:99:6b:30:e3:00:5c:9c:f1:49:94:db:17:df:65:
23:20:e3:25:78:ae:17:3b:11:28:8e:98:cd:8d:99:
85:de:e2:9f:5d:db:b2:5f:a9:8f:05:57:4b:96:e2:
8a:2e:63:a5:b4:cd:f0:5c:f1:39:14:e5:0f:24:54:
fc:87:20:6d:b8:18:2e:1a:f5:1b:7f:f6:5e:bd:e6:
1a:06:84:8b:b1:a3:00:3e:a5:e9:cc:7c:6c:3d:4b:
1a:22:e6:80:91:28:1c:2d:5e:86:b0:47:89:0d:8a:
b8:41:5f:a5:6a:78:81:ed:21:26:27:05:28:f0:23:
8a:0e:6b:9d:08:2d:f6:c9:fd:f5:60:b7:60:5d:11:
a3:26:ab:c1:d4:4d:bb:8b:52:d0:67:4b:f9:86:08:
ba:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2F:B4:21:39:C2:CB:38:3D:3C:EE:3F:98:6E:D7:5F:70:F3:15:F1
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:76:a3:5e:af:74:95:fc:be:f0:18:d1:7c:b5:3c:97:16:45:
2b:b4:d8:75:c7:78:1f:12:d4:1a:6c:dc:3e:a1:f8:14:dc:85:
c7:87:80:41:92:08:2b:6f:ff:0e:6d:31:97:89:78:7d:7f:fc:
8a:a4:8b:13:b3:fa:93:9d:f6:53:20:58:b5:60:43:dc:16:74:
3a:69:d7:68:21:b4:1b:a6:f7:bd:c1:b1:84:08:b4:66:ba:a3:
ef:b6:98:bb:20:a4:63:bc:57:d3:ab:33:c8:fa:78:ef:8b:57:
80:76:a3:95:2f:18:d5:2e:01:9e:cf:57:70:78:d8:66:70:de:
9b:b0:5c:c4:b8:74:fe:44:ff:15:2e:69:c7:ad:7f:22:39:4f:
a1:8d:bd:f5:f5:14:99:85:1a:7f:6c:58:3b:3e:79:71:5c:e2:
64:2a:6d:ac:5b:ff:2b:db:de:a0:15:de:05:98:f2:f7:45:13:
0f:5d:08:f4:02:18:5b:7d:a8:5d:01:4b:11:36:a1:a7:84:92:
43:3f:e7:f2:6c:30:71:df:2c:e4:50:28:77:53:2f:72:82:10:
5c:71:70:07:f3:4b:21:c4:ff:94:ad:15:7d:c5:e1:54:b2:fe:
a0:36:05:b0:39:1a:99:5c:d9:29:a0:0f:76:e3:b3:c5:00:d7:
9a:43:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:36 2025 by rpki-client