Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
File: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft (raw, json)
Hash identifier: QZ7REDJyB9BcLdNsuybhwa8RR+9ysWrpf/mLAU5V0H0=
Subject key identifier: 01:D5:36:94:D1:EF:7E:99:F4:90:8E:8E:FC:20:6F:56:06:B8:DF:8F
Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
Certificate issuer: /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Certificate serial: 0194C42C7A12B09ED15E096F109B6006C9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
Manifest number: 0495
Signing time: Sun 02 Feb 2025 01:00:36 +0000
Manifest this update: Sun 02 Feb 2025 01:00:36 +0000
Manifest next update: Mon 03 Feb 2025 01:00:36 +0000
Files and hashes: 1: gBy9cD3j_tP--kqjiHxj-BEz2w8.roa (hash: GWls9v+X93Qb6tijazZ0OBt3/3oq/+caZQ2/zTy7cZA=)
2: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl (hash: xWKITBqLm9q/pq7TcUlE/W9q8gpXXgotIO9i+RVfFuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:2c:7a:12:b0:9e:d1:5e:09:6f:10:9b:60:06:c9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Validity
Not Before: Feb 2 01:00:36 2025 GMT
Not After : Feb 3 01:00:36 2025 GMT
Subject: CN=01d53694d1ef7e99f4908e8efc206f5606b8df8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:c7:28:22:59:4a:fb:20:10:23:1f:82:18:
13:9f:ed:ce:68:f3:83:2a:ee:cc:67:70:70:ac:9e:
9c:78:79:c5:1c:0e:18:d3:34:a6:09:c0:69:57:0a:
91:e6:e0:c5:e8:d6:40:80:12:2a:47:c2:b8:1c:48:
34:8a:ab:40:00:b5:a3:bc:cf:9d:e8:a3:5a:0c:ae:
2b:f2:3b:b2:5d:f3:6f:b5:f8:c0:63:82:73:73:7c:
87:d6:e8:e3:f8:8d:07:f9:84:80:48:29:7a:33:7f:
d9:c4:22:c9:93:9f:f1:17:58:ee:b3:be:7d:a2:a4:
f2:a6:43:dc:d2:2d:8b:9b:69:3c:4f:b0:a6:7d:ec:
6c:9b:d3:c8:8d:10:9f:d1:26:96:cf:bf:21:eb:4e:
d1:31:dd:03:29:9b:81:56:79:cb:3d:42:21:cb:ed:
72:4f:32:32:1c:65:75:6a:60:67:95:4a:be:75:b2:
a2:5c:52:cc:2b:81:64:7f:bd:71:17:45:bf:aa:a6:
56:16:c7:b5:de:09:20:91:c3:e2:36:64:8b:f1:f6:
b1:5a:1a:5b:91:57:87:c9:9d:6d:d4:7c:e5:f0:d4:
e6:ce:91:62:12:40:23:e4:71:28:ff:aa:02:4d:59:
4f:72:27:e3:b6:61:17:bf:8f:f3:73:eb:78:0f:05:
52:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D5:36:94:D1:EF:7E:99:F4:90:8E:8E:FC:20:6F:56:06:B8:DF:8F
X509v3 Authority Key Identifier:
keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:e0:48:a0:80:72:28:90:53:7b:35:a2:c7:72:fc:9e:59:
c9:a7:a8:fc:a1:ed:0b:68:bf:23:2f:f0:d3:6d:e3:76:74:e4:
89:7d:a6:7a:b7:1c:57:9d:bb:6f:2c:b3:ef:ce:d3:dc:10:12:
35:bc:bf:41:b5:68:73:35:61:e3:75:03:7f:16:88:4b:4a:a3:
d4:5b:a9:19:db:ca:0d:4e:fa:90:81:56:4b:f9:f2:ce:b8:d9:
36:cf:bf:51:a8:41:ec:e5:08:db:15:39:ab:53:cc:0d:7a:5f:
04:97:d1:ef:67:e8:9f:12:a4:d4:60:20:a1:7f:dd:ef:d2:25:
94:64:79:fb:02:f2:7c:ff:16:4f:0c:47:e8:0a:d6:36:2d:bc:
70:ef:a1:29:bb:cd:e9:20:d0:c2:95:3c:e6:b2:93:f7:d4:5b:
91:ff:19:31:c9:19:48:5f:e2:ae:44:08:66:de:b0:ba:a1:b5:
4e:ba:44:8a:71:dc:af:e4:73:3c:19:6e:0c:57:74:c2:0a:5a:
39:6f:81:38:2c:d3:78:34:71:cd:e8:de:62:c8:3c:e1:a1:16:
ec:25:f5:ec:e8:4e:0e:9a:af:d8:82:8d:f3:16:08:b9:a7:2c:
e6:82:64:b2:0b:43:e1:d4:72:22:bf:46:8a:71:41:09:cc:36:
ff:8f:2f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:45:22 2025 by rpki-client