Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
File: HMRR-9-qEu_DUqWbAHsKiCO45l0.mft (raw, json)
Hash identifier: kKbd49jSIiJfftoLZ6RmCyhbp996u/RFGW0WjaYvfzM=
Subject key identifier: 76:EB:EA:23:2F:D0:9B:60:03:57:4D:16:81:EF:A3:58:44:5E:E4:5A
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial: 019511A2F42FF6F2B9A59D871881064438FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
Manifest number: 1456
Signing time: Mon 17 Feb 2025 02:00:46 +0000
Manifest this update: Mon 17 Feb 2025 02:00:46 +0000
Manifest next update: Tue 18 Feb 2025 02:00:46 +0000
Files and hashes: 1: BM8cXCST8GFLqm-S7JFg89XPJRI.roa (hash: y5HCuHLCc9q2A55wIAeiNZNpqVBjYSYL4TD8A7x1320=)
2: HMRR-9-qEu_DUqWbAHsKiCO45l0.crl (hash: 1Y8i7JWxSstFBsv73xS1injCWtUS7bmgAQQeGOERmts=)
3: cgvwzEGEwvIm6BLp57QUUWZnOgc.roa (hash: vCJFSFQ95kdVcUfRmZQUyshrPebtrGGD4KfGIuEo6nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:f4:2f:f6:f2:b9:a5:9d:87:18:81:06:44:38:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Validity
Not Before: Feb 17 02:00:46 2025 GMT
Not After : Feb 18 02:00:46 2025 GMT
Subject: CN=76ebea232fd09b6003574d1681efa358445ee45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2b:7d:95:41:6e:8f:d1:70:c0:a1:5f:9e:93:
5a:b7:98:23:13:87:84:3b:40:90:5c:8d:e3:e2:c7:
35:e8:8b:6a:92:17:f9:be:e7:df:9c:c2:f3:c0:90:
78:7c:85:08:e8:97:12:68:98:46:36:53:95:01:af:
35:6b:72:a4:f6:98:8f:93:b3:47:98:69:ab:bb:06:
10:1c:91:8b:24:72:7e:8a:e5:4e:51:6c:a5:f3:c7:
d0:a2:fb:4b:db:67:3b:1a:83:a5:02:98:12:b0:ff:
d2:40:dc:32:d7:0a:aa:71:c5:95:36:65:fe:fc:31:
df:90:f4:f7:1e:9e:42:ad:e7:42:f7:33:cb:65:22:
92:97:db:89:c7:1a:db:9a:f5:f2:bd:4f:09:9d:5b:
89:fe:9a:c5:0e:1d:bc:9b:07:a7:e7:30:e3:73:d5:
e1:2e:dc:59:63:b3:02:83:d6:88:59:20:dc:48:86:
50:8e:0e:4a:17:4d:1d:c3:3b:a5:2f:36:f0:f9:bb:
19:b4:97:43:39:81:c5:74:32:e9:71:3d:bf:37:25:
c8:90:18:a7:f1:06:4a:bf:7e:ff:a7:61:01:94:db:
c5:a5:96:21:64:56:78:d4:0a:2e:21:90:28:9f:a7:
91:b4:43:71:f2:76:9b:99:3e:cd:48:5a:fd:71:10:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EB:EA:23:2F:D0:9B:60:03:57:4D:16:81:EF:A3:58:44:5E:E4:5A
X509v3 Authority Key Identifier:
keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:50:b8:18:75:49:46:0f:00:8d:b9:df:f2:c8:eb:91:ab:42:
6a:5b:d5:13:2f:c5:0f:1e:ed:81:b6:e3:6d:f0:8f:14:c1:98:
0a:ef:5b:22:5f:c4:49:58:02:15:10:5c:7b:9a:5b:0e:9e:43:
1d:b0:bd:a4:82:74:dc:1d:14:4c:aa:ff:39:c4:da:83:20:84:
b9:eb:fd:68:3d:27:e7:5c:ab:e6:ea:63:bb:b8:c8:d2:0f:e6:
31:6a:ff:a2:63:88:ec:fe:36:00:b8:c4:71:3f:b3:60:92:4e:
39:7f:5d:f8:03:2b:9d:10:e8:e4:d7:08:3a:5c:5e:99:d6:a1:
b9:6f:34:57:94:57:83:f3:d6:13:9f:f9:20:e4:5c:1e:9e:1d:
41:ff:01:85:c3:2c:ed:65:e8:22:10:38:0b:1c:fc:cf:4a:64:
84:64:af:39:2e:d3:84:5b:9f:b0:64:a9:d4:25:8f:9a:70:c5:
d9:8a:74:e4:cd:43:b8:4e:94:da:e6:50:c0:e7:b4:a2:bb:92:
45:5a:59:e1:38:23:2a:5c:d8:4e:92:9b:2f:b2:b6:ae:d0:68:
2e:2b:02:71:08:86:0d:85:18:af:b1:e1:04:39:dc:85:a6:af:
f0:04:47:b7:3e:d7:b2:58:f9:2d:6f:7b:8c:56:23:be:5a:4b:
90:e1:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:02 2025 by rpki-client