Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
File: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft (raw, json)
Hash identifier: 1yEiVBLfQRTO1tclr22lo+bmwVWIWhdqOQS6HhmcWIE=
Subject key identifier: F1:47:A8:9E:80:7B:91:35:54:A0:32:96:C3:CE:18:C2:3A:C8:5E:C2
Authority key identifier: 1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
Certificate issuer: /CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Certificate serial: 01947E700EC021F1B6E76E775BBD75D45A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
Manifest number: 10DF
Signing time: Sun 19 Jan 2025 12:01:00 +0000
Manifest this update: Sun 19 Jan 2025 12:01:00 +0000
Manifest next update: Mon 20 Jan 2025 12:01:00 +0000
Files and hashes: 1: GW1Klv22yNsE5MYPV75xnmhGv3A.roa (hash: rIJpTjsiYMjtG6CQDpmbKG45pPqHe8TdfekwwQNTL+I=)
2: HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl (hash: mswRSiUDzwtvyklrOCy9boMJUFjHhxeCCqirSKSTqZs=)
3: HJbfnmVXUIzFAaPysffua9sO6bM.roa (hash: s1zYVIXlcjt0c/VAQX6feReeqo382d47NT573+8ERPc=)
4: HiXwFWaPzRWDb6Zauf5Z5EdAs3E.roa (hash: 74lujDzOZ3dVJtH+CV4yLBEU59EeNeO0W4GkJWf9zl0=)
5: QD50oA6RP_BVOObceO0oiFLiDB8.roa (hash: lJjBmyNLuGzVM9wb6fphLebKPplXRktqR4AzJsfUZ28=)
6: YQQKKCuIreEBOajhrbHaE6kCoEA.roa (hash: hYCPYKTMdFl3VS4V4K2NKIMA0dTOlOoNyGrA84B6OGo=)
7: hqa9h0LfE-ODSm6cL7bVXDnCDuU.roa (hash: WKx5lXERuzuyJlW2GtZvrlS+h+sYN+rRqH+hf6H2l+Q=)
8: xKw0dDtDXHesKiPEnWMkqMwKQqU.roa (hash: In0MXbRHMQVNu/IqxrNBQwkaV8+yvAml6NVYh5A2I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jan 2025 05:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7e:70:0e:c0:21:f1:b6:e7:6e:77:5b:bd:75:d4:5a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c06a82bb115d7393e39fd58b73bbf20f6cd0b1f
Validity
Not Before: Jan 19 12:01:00 2025 GMT
Not After : Jan 20 12:01:00 2025 GMT
Subject: CN=f147a89e807b913554a03296c3ce18c23ac85ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:2f:eb:40:ff:d8:ad:32:82:74:98:07:44:
43:00:db:11:61:50:43:98:95:c3:15:f0:de:80:e8:
f0:af:9e:b3:c8:30:b6:e6:51:8b:af:4c:1a:a4:bd:
a7:d8:75:a6:21:5e:ee:44:02:62:1c:6d:4e:56:2d:
23:c3:6f:53:5e:c6:6e:59:89:20:c3:1c:cf:76:09:
06:44:b3:7c:d9:5a:2c:30:18:0f:b3:69:50:65:f0:
05:76:ac:58:a3:24:73:64:2d:3f:2b:25:5f:36:a6:
f9:22:fb:78:c0:e8:21:08:bc:0d:3f:69:6a:e5:d7:
79:b0:90:e3:d1:04:50:bd:5c:0a:76:41:41:42:81:
a6:26:84:f3:be:1a:80:55:11:bf:b7:51:97:81:af:
95:69:12:93:1d:39:b4:1c:17:8e:d1:ef:e9:a1:d9:
ea:e3:46:3b:94:a8:a8:47:cc:a3:d8:35:38:92:62:
c3:4d:a9:15:6c:8c:5f:0b:30:bf:a2:6a:d5:9b:8a:
a2:69:84:68:8a:b7:d8:e2:63:b9:e9:9b:c0:18:d6:
1c:00:1f:dc:e7:77:d2:b9:f9:94:cc:84:06:ed:74:
bd:0e:50:60:d9:d1:74:2b:48:86:67:af:16:d1:17:
13:70:59:f8:89:d5:d4:f6:8e:b0:b5:d7:63:5e:d2:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:47:A8:9E:80:7B:91:35:54:A0:32:96:C3:CE:18:C2:3A:C8:5E:C2
X509v3 Authority Key Identifier:
keyid:1C:06:A8:2B:B1:15:D7:39:3E:39:FD:58:B7:3B:BF:20:F6:CD:0B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/HAaoK7EV1zk-Of1Ytzu_IPbNCx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2e:4e:9a:81:3c:0c:b3:98:2b:2f:09:7d:56:d1:69:45:e0:
c3:a9:96:6f:f9:c6:d9:0e:15:fd:a5:a3:a8:30:98:81:39:b6:
1a:d3:20:38:8b:32:5c:d7:1a:8e:b6:50:17:4d:ea:f1:69:57:
fe:ea:d7:2d:9e:75:24:4d:95:43:c9:1d:81:56:cc:10:0f:5a:
2d:49:ab:2f:e9:84:b6:70:60:be:b6:73:b4:cf:e7:9d:d1:2b:
0c:55:6e:eb:37:49:de:16:27:0d:1c:7a:1f:9f:2c:72:b9:ec:
02:26:f6:83:0d:36:e3:cb:f8:d0:2b:27:e7:91:32:85:2d:ef:
da:04:e7:69:08:e9:ce:63:c4:7e:40:f9:8e:ae:4c:39:1b:5f:
2c:bd:3b:b4:c1:43:1c:05:45:06:10:42:76:24:b4:aa:68:d5:
f6:ba:df:2d:da:d5:65:09:a4:77:ba:24:9d:fb:69:10:fa:8c:
c8:cf:4a:44:cb:ce:b5:53:28:dd:6a:61:e7:12:1a:f4:ef:7b:
20:78:3d:c7:57:c4:fd:07:5b:1a:a4:2c:50:a4:a0:05:39:32:
82:f5:53:24:d5:a9:06:e4:5e:cf:d0:f2:2e:b4:5f:8a:98:44:
5d:e3:9e:b6:78:d4:b0:c0:83:8b:a2:f8:b0:70:a1:89:ea:0b:
fa:f1:5d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 19 14:38:18 2025 by rpki-client on console-fra.rpki-client.org