Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
File: CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft (raw, json)
Hash identifier: 9BrJWKH2RZ7+XjETgB+Ezk9ZD6o7dRmG9as6xKqagAs=
Subject key identifier: 8C:E3:78:ED:92:59:3B:E0:E3:69:67:F1:F3:95:75:7C:5F:DD:F8:52
Authority key identifier: 08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
Certificate issuer: /CN=087aac674e4e57960201a34c2c0424861a7fb077
Certificate serial: 0194BA8484DC1CD6229ED2007FF2142F8E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
Manifest number: 0291
Signing time: Fri 31 Jan 2025 04:00:34 +0000
Manifest this update: Fri 31 Jan 2025 04:00:34 +0000
Manifest next update: Sat 01 Feb 2025 04:00:34 +0000
Files and hashes: 1: CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl (hash: rR0vK/e37+7kgmquskihkSiCArchNqCRwwW+zs4XMsI=)
2: z81aD-MDwzkjF_KOvhdaxj86KX4.roa (hash: E1FgG/yobviIZfsUKtsw9yD/n1PK8j1TNBK/5+kRW/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:84:84:dc:1c:d6:22:9e:d2:00:7f:f2:14:2f:8e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=087aac674e4e57960201a34c2c0424861a7fb077
Validity
Not Before: Jan 31 04:00:34 2025 GMT
Not After : Feb 1 04:00:34 2025 GMT
Subject: CN=8ce378ed92593be0e36967f1f395757c5fddf852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:29:13:1a:5e:c7:34:89:96:2f:53:38:a5:e1:
2b:7a:58:dc:98:99:4b:2e:ed:9e:7d:15:8a:53:12:
52:0a:c0:77:89:aa:d4:db:27:b4:46:a4:0d:ee:20:
a2:04:33:db:1f:f1:d8:f3:21:e4:fa:86:a0:9f:15:
e3:6d:77:0d:e9:07:3b:8a:d8:96:f7:44:22:43:cc:
93:d4:07:60:83:b8:68:e0:ec:28:25:7d:9e:7f:87:
d4:45:e5:0d:da:b7:4c:57:21:8f:6f:3f:c2:32:9b:
8f:c8:e9:c4:86:f1:8a:bd:5d:e4:fb:cd:40:29:6b:
25:d0:78:9a:27:4e:f4:65:e1:ed:72:bf:90:ab:10:
22:5d:7f:79:44:99:c8:19:0d:cd:a3:1a:63:6b:23:
4f:1f:bf:23:35:2a:00:66:72:96:60:09:9a:72:8a:
3a:9f:0d:ec:64:e9:df:fd:0d:a5:23:57:dd:df:da:
8b:f8:0a:99:43:7b:c7:6c:cd:29:35:08:c6:dd:6b:
92:ff:91:48:24:2c:3b:94:93:6f:94:6f:ab:ac:ff:
01:2c:d8:4c:a7:d4:03:22:dc:62:42:e7:34:e0:23:
bb:4a:e2:be:84:cd:c4:66:90:e6:12:1b:44:87:53:
83:73:88:06:51:31:dd:19:a7:fe:1a:81:91:cb:3a:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E3:78:ED:92:59:3B:E0:E3:69:67:F1:F3:95:75:7C:5F:DD:F8:52
X509v3 Authority Key Identifier:
keyid:08:7A:AC:67:4E:4E:57:96:02:01:A3:4C:2C:04:24:86:1A:7F:B0:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHqsZ05OV5YCAaNMLAQkhhp_sHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1582e8-0698-4baf-9028-df02b13e2e4a/1/CHqsZ05OV5YCAaNMLAQkhhp_sHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b2:5c:08:fd:cc:5a:65:63:48:67:fa:67:bf:b0:af:5f:33:
19:50:a9:7a:83:c8:25:aa:19:2f:34:0c:7e:d0:89:0d:df:07:
3d:51:16:b5:54:c8:aa:54:f5:ed:ee:3e:95:e8:b8:78:03:12:
c6:91:ce:40:46:17:d3:fb:51:26:46:7d:09:19:f8:b1:49:06:
80:09:66:01:1e:b5:87:22:01:3a:ad:9f:7e:26:36:c8:20:e4:
f1:f5:d3:fb:f4:4c:02:df:b1:02:23:2a:13:48:22:e4:5f:e3:
5c:61:4f:ef:ab:84:7e:29:61:94:35:be:a9:8c:b1:d0:ce:69:
c4:90:c9:f9:50:bc:70:c4:de:2f:c7:8f:aa:73:cc:11:b8:62:
7e:fe:81:6d:c0:33:5c:e4:f4:de:de:9d:e2:78:82:db:70:d3:
29:f6:73:e4:17:5c:c9:dc:f9:e6:a4:94:df:ad:1d:46:1d:57:
ce:25:b5:7f:4b:5f:a2:1c:70:f1:75:ad:c0:65:0c:db:50:0d:
3b:de:92:05:f9:de:7a:e5:e3:31:89:8a:53:4a:13:93:a8:c9:
d6:5a:23:c9:5d:57:14:2c:c5:d5:d3:1d:47:68:ae:cc:a8:69:
fd:df:3d:db:81:f2:55:3d:11:11:51:14:cc:2c:64:d1:80:af:
85:a8:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:54 2025 by rpki-client on console-fra.rpki-client.org