Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier: /DP+5Y9kdtV9lXv7wfZPfFrmx7bEW9sdz6ZDPYA40Tw=
Subject key identifier: 23:82:32:BC:2C:7A:82:1D:AC:AD:3A:A1:29:F4:E6:09:B4:27:65:D5
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 0195124718743A2BA8AAD8C2F0F1822C104B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 05:00:03 +0000
Manifest this update: Mon 17 Feb 2025 05:00:03 +0000
Manifest next update: Tue 18 Feb 2025 05:00:03 +0000
Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: GA0p2bjFppxZ7DE5aWenB/z2MabbwecqeTwl9GrbDHE=)
2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:18:74:3a:2b:a8:aa:d8:c2:f0:f1:82:2c:10:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Feb 17 05:00:03 2025 GMT
Not After : Feb 18 05:00:03 2025 GMT
Subject: CN=238232bc2c7a821dacad3aa129f4e609b42765d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:91:fd:1f:49:5c:7b:9f:3c:e4:64:6a:d9:
47:bc:3f:5a:1b:ba:20:3a:b8:f3:d0:63:1f:dc:a5:
f5:1f:14:89:5d:28:ab:f0:b6:53:3d:64:16:2f:04:
9e:e7:48:41:3e:48:08:ed:db:e6:f7:d7:2a:ef:0f:
7d:23:20:65:67:69:5b:2a:45:1f:14:0c:a7:4c:77:
ab:ba:6d:c6:f5:0e:9b:97:58:a4:10:c3:b4:e4:27:
d6:29:30:68:2b:bb:62:5b:83:48:8e:76:64:ab:71:
3e:f6:fd:ed:0b:58:9f:9f:24:d5:25:a5:7d:a1:10:
33:e8:0b:85:63:9f:1c:4d:1f:7b:85:89:43:7b:03:
e7:54:6c:b8:f6:b5:a5:79:4b:da:13:53:72:93:9b:
46:80:ad:d5:d3:d7:47:45:5e:46:af:13:a7:87:c2:
32:f5:5a:61:51:e3:c9:5e:77:1f:f9:a1:01:ac:88:
54:fe:f6:80:b7:6a:fb:1b:bd:37:fe:1c:8c:24:5a:
a3:18:10:6d:41:b6:e7:a8:06:dd:ec:3a:04:37:ea:
ab:3c:e4:00:5e:e8:cf:f3:c0:df:54:07:bf:30:03:
73:d9:b2:63:ed:70:f4:8d:05:8b:93:41:d9:f0:20:
2a:fc:3e:84:05:c7:a3:a4:28:d4:61:54:fe:57:90:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:82:32:BC:2C:7A:82:1D:AC:AD:3A:A1:29:F4:E6:09:B4:27:65:D5
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8c:04:c6:3c:52:b2:63:fa:67:90:19:93:66:3c:ae:d8:ba:
77:5e:9f:0e:c7:8c:68:bd:18:62:19:79:8a:70:78:b6:21:d8:
25:09:82:03:93:04:70:ae:19:46:9e:46:13:2d:1b:3a:61:bc:
e5:f2:ae:3f:8a:9e:74:7e:60:1f:93:4a:c1:85:71:5a:23:4b:
ac:83:80:61:0c:71:b2:b1:5e:49:8d:bc:4e:d2:53:54:01:9d:
02:fb:0c:e9:1c:b1:eb:65:69:ff:cc:13:e5:48:ce:f2:25:1f:
eb:d1:74:a3:22:3a:13:8c:89:67:7e:e4:ec:66:87:10:19:bc:
bd:b3:aa:40:ad:8d:d3:89:00:5c:42:a0:55:98:2d:fe:07:8a:
91:4c:f2:e1:27:53:e6:d0:69:2c:85:75:cf:1e:5c:6b:f2:ae:
c0:7e:3f:a8:0f:25:11:3c:62:f2:8b:c2:a1:a6:ce:76:e2:be:
3b:3e:d9:78:ce:48:c6:44:72:ec:87:90:60:5b:c4:80:a6:ef:
ea:c9:18:ff:b3:2d:99:5a:c7:5e:51:70:5a:1c:97:87:00:01:
ce:36:b8:cb:bc:9b:63:1b:a1:4b:0a:61:45:d4:e7:b2:dc:13:
92:21:cc:60:40:71:05:1d:59:ae:42:56:91:30:78:02:8a:0f:
25:d6:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:26 2025 by rpki-client