Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier: P1h5gqXf3Ga2wVdemVLKQVoC5hk672r6tktT3kZeuVA=
Subject key identifier: DA:18:1C:85:58:15:DA:94:ED:31:E1:31:1A:FD:26:C3:E8:6C:E8:D0
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 0194BABBC6CACB44B8DBAFBCCA259D3E6B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number: 100C
Signing time: Fri 31 Jan 2025 05:00:55 +0000
Manifest this update: Fri 31 Jan 2025 05:00:55 +0000
Manifest next update: Sat 01 Feb 2025 05:00:55 +0000
Files and hashes: 1: F1oKspcJIA5CxkgGbXIBC4yC3wU.roa (hash: AKm+230ZJqvJyVXgtMkmTb/sN72RWRXH+8ONP+ImAwA=)
2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: tN6Xmdv+HZow3NV8XB/2intKvHslAYlhEHXbGY8WLuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:c6:ca:cb:44:b8:db:af:bc:ca:25:9d:3e:6b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Jan 31 05:00:55 2025 GMT
Not After : Feb 1 05:00:55 2025 GMT
Subject: CN=da181c855815da94ed31e1311afd26c3e86ce8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:52:2c:99:25:6c:49:45:84:c4:d5:9d:7a:
8c:2d:31:95:c2:0a:66:50:85:66:8b:9d:70:a5:e9:
eb:fd:fb:db:b8:f0:43:f7:84:eb:f8:12:b1:fc:18:
c4:ec:be:32:40:78:e0:6b:58:d8:b8:25:b9:d6:12:
0c:c3:f4:c8:0e:5b:fc:f7:97:df:49:f1:c8:34:40:
f9:99:a3:98:bb:c8:fa:b0:c7:0a:be:c9:12:db:38:
05:32:ca:1f:10:3a:1f:c6:0b:13:fa:50:92:c2:5a:
a5:0e:10:b6:f5:bb:41:72:44:a2:0e:22:81:04:89:
65:b1:9c:e6:4e:11:68:00:29:7f:b1:df:cc:50:63:
e6:49:66:76:55:0b:69:b3:3b:38:f2:ae:14:11:a0:
e3:98:1b:e2:5d:ae:d6:c5:34:9f:87:a5:65:fa:c5:
6b:ab:e2:77:0d:21:e1:40:c7:c6:e1:02:77:76:cb:
36:bb:78:28:81:f1:b9:d4:dc:0b:0c:31:79:96:46:
d4:1c:29:99:b3:68:a0:6c:c3:4d:cd:03:6b:f9:4f:
6d:ef:e1:2e:fa:55:d3:9b:8f:d0:e5:2b:75:49:b3:
05:6d:48:d8:68:2c:48:86:0f:fc:db:14:62:f1:f7:
4d:d7:d6:3f:df:87:af:d9:09:fa:0a:87:8d:17:e9:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:18:1C:85:58:15:DA:94:ED:31:E1:31:1A:FD:26:C3:E8:6C:E8:D0
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:bb:e9:fc:6c:c4:e7:e3:93:dc:ff:86:b2:c5:f6:4a:0f:
fd:22:24:55:d9:c3:44:1b:20:de:c7:15:e2:aa:b6:7a:ee:0f:
26:e5:dc:30:3d:07:95:42:d9:6e:97:e9:09:97:c3:af:f8:9f:
aa:41:1d:53:4e:7a:4a:b3:84:f9:d0:b1:97:ba:44:fb:9b:38:
17:24:3f:26:d6:fe:d6:74:1e:e7:6c:8b:80:e4:f1:f0:5c:4f:
22:04:2b:36:ce:aa:9c:dc:ec:b0:48:ed:90:d1:ba:2f:f7:c9:
bd:b0:a8:98:09:f7:b0:ed:d0:1e:f6:9b:56:99:cd:54:af:13:
2e:ff:43:ac:23:9c:ae:2c:7f:50:6f:93:cb:65:0c:85:5a:b4:
d8:b9:9e:59:30:79:c2:b9:4a:1b:0e:fe:14:22:94:1b:13:a8:
ee:6e:7d:ff:c6:4c:ea:be:87:e1:84:f8:d6:23:9e:09:a6:f8:
10:79:74:89:c7:1d:51:cd:53:96:e0:b9:6f:4b:d0:5c:78:42:
d9:eb:f6:85:05:30:3f:8a:0d:a0:62:0b:6d:b4:db:5d:d7:5d:
22:3d:79:e4:85:a1:44:ba:3c:ab:16:4d:38:7f:0d:af:7b:8c:
5a:98:5e:dd:8e:fe:c3:08:43:37:b5:0f:67:47:3e:db:a7:f9:
2b:3c:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:24 2025 by rpki-client on console-fra.rpki-client.org