Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
File: hto1bCqGENEdNM24pH0rkFGfvTU.mft (raw, json)
Hash identifier: 2dq3toODMK6qdi0gV0iYnqYSh8XPQl2yFHRJD8q84/8=
Subject key identifier: 5E:7C:23:00:E3:D7:97:AC:F6:16:06:77:A6:60:50:CA:22:32:0E:30
Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Certificate serial: 0194C3F5EBADAAE967A75F6CF0B629279448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
Manifest number: 1135
Signing time: Sun 02 Feb 2025 00:01:01 +0000
Manifest this update: Sun 02 Feb 2025 00:01:01 +0000
Manifest next update: Mon 03 Feb 2025 00:01:01 +0000
Files and hashes: 1: e2SQSmJ5Uij4VeGzNgyMcf8tHqM.roa (hash: /jn7jwBSYHJhjR+sZRgi9zex0zsrMd1Ejp9Gj9O6Ons=)
2: hto1bCqGENEdNM24pH0rkFGfvTU.crl (hash: pgf24ob53I8FZTMddDcCeWCgiGuEJxI3c4tQzjYJRHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:eb:ad:aa:e9:67:a7:5f:6c:f0:b6:29:27:94:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Validity
Not Before: Feb 2 00:01:01 2025 GMT
Not After : Feb 3 00:01:01 2025 GMT
Subject: CN=5e7c2300e3d797acf6160677a66050ca22320e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2b:9b:5e:87:36:db:f5:0d:a3:bf:87:e1:42:
68:7d:f6:68:20:ab:bd:45:d4:37:29:1a:ce:95:28:
84:8b:9a:24:a1:6c:ae:72:98:58:69:9f:a3:0f:92:
e4:66:48:30:ae:f2:e6:c7:3e:e8:ac:cf:53:72:c6:
e2:76:aa:8c:e2:50:48:26:8b:30:75:14:a2:ab:64:
37:e3:59:31:9f:05:76:4f:4d:07:b0:1b:e3:70:e2:
3b:7c:eb:e9:c5:61:12:2e:85:c6:d9:fb:6f:71:3c:
56:36:c6:f7:62:d7:30:84:67:7b:57:dd:0e:c7:b7:
04:ec:f8:70:57:35:32:34:ed:ac:1c:d2:e3:11:55:
c6:b8:20:d7:46:e6:2c:dc:d0:75:49:2f:3a:9d:c9:
9f:98:88:1d:93:82:93:85:50:d9:b9:67:16:c3:18:
28:57:3b:6b:2a:9d:91:01:9e:4a:04:b8:e7:89:8c:
c9:01:db:30:34:79:d2:ff:60:f8:fd:8c:43:2c:7a:
7d:b6:93:b8:f2:cc:f4:e2:eb:e0:74:fd:77:89:8a:
cb:0b:1c:49:8e:c9:43:46:94:3d:26:01:1f:81:2d:
68:e6:18:7d:3b:77:5a:8f:a2:eb:aa:67:57:86:43:
0d:a5:cc:60:93:54:29:29:85:f0:43:15:a6:ca:da:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7C:23:00:E3:D7:97:AC:F6:16:06:77:A6:60:50:CA:22:32:0E:30
X509v3 Authority Key Identifier:
keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:24:fb:fe:e6:31:97:f7:53:c5:fd:d2:91:9a:d1:38:21:69:
c1:fc:fc:78:7f:1e:ce:cd:d4:83:a3:99:56:2c:07:2a:8d:b7:
49:1d:66:dd:16:6e:44:8c:7e:2d:56:cf:d8:b2:38:46:6b:2e:
1c:8d:a5:8f:a4:04:c7:f9:65:20:f6:68:45:53:e4:12:15:d9:
c9:12:12:3f:77:f5:61:66:07:4f:f1:5f:fb:dd:2c:ee:5d:fc:
e6:28:91:bc:d3:68:3e:4b:66:3d:2c:e4:a7:ae:77:42:a3:5b:
6d:d0:e5:5b:47:43:aa:67:30:33:00:d3:af:76:71:57:23:4a:
56:db:ce:3f:1d:46:91:42:72:b3:29:a7:91:b7:e1:70:dd:15:
12:ac:ae:a5:4f:32:fa:48:d6:a9:e3:03:a2:e8:72:5e:f3:db:
73:f7:ca:a7:4d:4f:36:f0:3e:84:59:25:1e:9a:9f:3b:37:77:
ca:ec:c4:66:f9:e6:7c:ec:70:73:2c:18:34:70:48:70:99:bb:
8d:9c:53:87:d0:52:28:29:7b:bf:17:9a:14:df:28:05:92:1c:
d1:8d:6d:f2:6a:f3:1f:6a:1b:99:7e:0f:09:bf:63:02:89:d1:
d8:4a:d4:7f:4d:79:0e:6d:cc:70:9a:ad:4f:d3:8a:89:af:47:
6c:22:b8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:43:18 2025 by rpki-client