Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
File: hESS25y7Cg62v2nCXIaWH0kYPJs.mft (raw, json)
Hash identifier: GZYRfkJClGxfCufpbHNGDZbmanyvIG4LUi+570MdL/8=
Subject key identifier: 0C:59:5B:04:E0:F4:8F:66:42:E0:BB:F8:21:DB:AC:4B:8A:25:31:31
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 01951247568A5FF8FF21DF7013F239AFE6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
Manifest number: 04D7
Signing time: Mon 17 Feb 2025 05:00:19 +0000
Manifest this update: Mon 17 Feb 2025 05:00:19 +0000
Manifest next update: Tue 18 Feb 2025 05:00:19 +0000
Files and hashes: 1: TYiDdMg7jFYESVHenYkZA0H7wJM.roa (hash: nVrivhjrdRI0cWTmcIVa/wHRsP8sZBjo+02UhnnNCZw=)
2: bAtdqWOn7XIMZb40RJnvw-dOPu0.roa (hash: ajLP5I+MW9lN2Pm4hOADp3bTpGVbkghpKs5apJzZVDw=)
3: hESS25y7Cg62v2nCXIaWH0kYPJs.crl (hash: O0WbxwZ7vRJvfxUD5j0l59B5o82oQWGKMOZLM8rOqOY=)
4: raKsGhTlSRWQMWRm6Wn27tm3Cb4.roa (hash: I4OBFbZZGC0w5I2m/kl44FUeB7dXwpuLeB9e6Z5z4ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:56:8a:5f:f8:ff:21:df:70:13:f2:39:af:e6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Feb 17 05:00:19 2025 GMT
Not After : Feb 18 05:00:19 2025 GMT
Subject: CN=0c595b04e0f48f6642e0bbf821dbac4b8a253131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:bd:2f:2c:f9:82:48:44:7f:93:f7:05:cc:
15:dd:6d:b8:84:64:d7:57:5d:b9:f0:ed:8f:fc:28:
15:6a:53:a8:00:61:0e:8d:1b:c7:7c:08:f6:fb:e5:
ff:b5:66:f1:ab:96:02:28:0e:77:09:70:14:a4:df:
1a:93:1e:c2:9f:a5:75:fa:0b:c6:bf:b0:43:7a:96:
28:d7:13:79:4c:45:24:15:68:b2:d9:f6:79:72:32:
e2:e1:4a:31:72:0c:3c:16:ba:1d:7e:aa:81:d2:c3:
d9:f0:8e:c5:f8:27:9b:0d:c0:66:63:a3:a3:5a:cd:
14:60:e0:d8:c5:90:61:b8:4d:70:fd:29:39:02:0b:
4a:ae:f2:9c:e9:c2:d0:d7:5c:86:61:44:3c:d9:45:
cc:24:05:59:f3:94:6d:c4:a3:81:d7:9d:d7:44:f9:
a0:f1:ef:07:25:59:42:f9:7c:bc:60:5d:5a:d7:ec:
52:13:24:5b:50:a4:dd:b4:b0:ab:14:e7:f9:1e:c4:
f4:5d:87:b8:db:10:27:85:dc:0b:5f:f1:8f:25:2e:
48:a8:e5:d6:0d:1b:61:45:76:b0:8b:1c:c6:96:ee:
14:68:a6:09:8f:6c:cc:fd:79:80:0c:a1:29:80:a6:
3e:33:4a:1c:4f:3f:a9:da:c6:50:74:63:af:92:b7:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:59:5B:04:E0:F4:8F:66:42:E0:BB:F8:21:DB:AC:4B:8A:25:31:31
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:e1:28:8a:71:29:a5:70:a9:ab:1e:6c:89:f0:89:7a:d5:d4:
0c:d6:03:e5:ca:a9:55:79:a8:db:f1:8c:18:b6:5e:ad:dd:fe:
c5:44:9a:1b:6d:52:94:ca:88:4f:41:c3:ea:bb:f6:f6:89:7b:
64:31:20:c1:f7:ba:eb:2c:b8:84:2b:c8:61:05:33:2f:c1:68:
44:74:25:c6:80:eb:44:3e:4f:ad:c8:7c:1e:50:b7:01:ba:e9:
93:84:82:d1:95:e1:3c:f8:20:c4:70:43:b3:e0:c8:d0:5b:60:
a5:73:26:71:0c:29:76:5e:5e:9b:63:46:c5:16:6f:f2:6d:ad:
70:ed:fb:28:e6:6d:ce:9d:74:78:8c:c8:47:45:45:df:6c:1e:
6e:6b:be:8d:97:22:74:77:92:30:5c:b8:89:74:86:e0:5c:db:
76:bf:6d:36:a8:e3:22:f3:43:45:fb:81:2b:76:1e:dc:65:e3:
60:8d:dd:60:cd:7a:a7:d1:1a:6a:c3:33:71:f3:23:13:98:cc:
f1:ee:a8:ec:a3:84:d9:84:bb:19:3c:5d:c9:05:76:df:03:c5:
93:85:96:67:af:ea:81:3d:95:72:5c:aa:ce:99:b5:5a:a9:bf:
23:d9:56:16:58:57:8b:15:e8:85:84:fa:91:08:d7:66:fd:62:
93:ef:39:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:49 2025 by rpki-client