Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
File: HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft (raw, json)
Hash identifier: gc7WDYxhNZb8acmJTm0iQj7Atgi8NO8gKFRf/fiM6uU=
Subject key identifier: AC:4F:30:17:E1:71:CB:3F:77:D5:DC:F3:8F:3A:E7:35:D2:22:93:D3
Authority key identifier: 1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
Certificate issuer: /CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Certificate serial: 0194BBCE46FBB32C3A2514F0159E4C229B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl (hash: pFMCQIALXLFTx1a3tJFPw7DyzN5KaUtFPwus/V5hPlw=)
2: oaiKe9BUmU6ux91XLaQvZC7XqN0.roa (hash: uC3IsodMVYaUiVMHtDRZahUGbsjXFHZTUvnA/e2zbi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:46:fb:b3:2c:3a:25:14:f0:15:9e:4c:22:9b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e0436dd698eba3eab5a92db1d64f2f314ed3116
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=ac4f3017e171cb3f77d5dcf38f3ae735d22293d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:4d:6d:12:2d:3b:9c:e9:9a:76:98:14:02:
87:bd:0b:d2:f1:f7:9d:5b:55:e9:f1:d3:f0:bd:3a:
6b:94:ac:ca:ec:f1:5e:49:b6:47:bb:3b:6b:33:b4:
7f:e6:ba:e3:b7:38:34:4c:ee:84:58:71:23:06:f5:
7e:7a:ca:e1:6d:a7:97:78:73:05:04:60:bd:93:07:
e2:b8:34:5f:d0:63:a1:5a:ef:47:3c:a1:60:d8:1c:
e9:bc:c5:98:da:0a:02:f1:6a:ed:f7:ec:02:a8:d3:
5a:dd:43:0d:39:69:90:5a:5b:f8:1c:6c:01:78:21:
9c:08:10:93:2c:44:00:a2:a7:31:68:53:7c:b8:47:
88:1e:37:95:96:1e:01:e7:fc:24:fc:af:2b:d7:01:
06:df:2b:21:26:cc:b2:55:41:9d:60:c2:07:e4:76:
83:9e:f6:76:c2:c0:52:2d:88:51:16:43:ea:7c:23:
b8:25:e8:89:18:7e:c1:33:13:a9:47:c1:b1:b7:61:
14:cc:47:4c:5c:6a:21:77:8d:46:24:5b:25:f1:10:
4a:c5:e5:b8:b4:6f:ea:90:51:11:db:59:86:3b:d4:
24:63:df:56:12:9c:ab:7d:9c:bd:0d:fd:2a:33:35:
c0:09:00:81:d9:fe:3c:e8:5f:34:2d:b8:cd:6a:25:
3d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4F:30:17:E1:71:CB:3F:77:D5:DC:F3:8F:3A:E7:35:D2:22:93:D3
X509v3 Authority Key Identifier:
keyid:1E:04:36:DD:69:8E:BA:3E:AB:5A:92:DB:1D:64:F2:F3:14:ED:31:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgQ23WmOuj6rWpLbHWTy8xTtMRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/3ce047-d858-4e7f-a070-d4319d13c775/1/HgQ23WmOuj6rWpLbHWTy8xTtMRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:91:f4:b9:61:47:fa:e1:b9:46:c5:cc:f9:1b:43:ee:e1:37:
e0:eb:36:c7:89:fb:66:1d:c8:56:59:9f:5d:b7:d9:40:9f:2f:
e9:0d:6d:62:b6:75:f7:b2:09:d9:ae:2e:c6:21:95:ec:08:11:
15:97:89:54:c2:8d:35:82:23:8f:cb:b6:dd:ab:93:7b:5c:33:
e5:ad:da:5f:a1:22:bb:7e:b3:71:46:c5:26:12:b4:d7:23:3a:
d0:b0:b7:79:7a:16:b2:53:d6:a2:00:50:a8:c1:59:86:04:a7:
a1:1c:72:c3:ef:8a:f2:bd:62:4b:9f:85:7c:ad:c0:68:96:61:
92:a9:ac:79:ea:91:22:3b:dd:fb:fa:85:28:d4:e2:63:88:17:
a4:b5:81:bd:b6:6b:4e:a6:57:6b:24:79:e5:e5:17:0c:ab:f0:
c8:1f:9f:23:50:43:33:5d:09:40:6b:fa:24:b4:5e:d3:62:f1:
7a:db:c5:ff:4b:9c:af:cb:06:00:7e:3c:6c:93:18:35:11:b6:
4d:20:56:67:26:09:51:83:bd:d6:1d:59:3c:af:87:60:73:7a:
d4:c9:ec:5c:99:9f:8d:b9:e7:64:de:de:83:b2:79:f8:d5:3f:
3f:a9:13:06:65:72:d8:98:0b:b1:d6:22:83:a4:0b:f4:c0:8e:
02:5a:ed:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:34:33 2025 by rpki-client on console-fra.rpki-client.org