Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json)
Hash identifier: YHolrBritNJNBnqmuBExYBHXDwMZP9ygzRUXAi/AkWg=
Subject key identifier: 9E:01:C9:72:87:48:D1:F8:F0:EA:79:28:95:30:7E:BB:B5:11:EC:CC
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 0194C4D102211A3C6999C09EEDD8EAD578D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
Manifest number: 09F2
Signing time: Sun 02 Feb 2025 04:00:19 +0000
Manifest this update: Sun 02 Feb 2025 04:00:19 +0000
Manifest next update: Mon 03 Feb 2025 04:00:19 +0000
Files and hashes: 1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=)
2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: OJ1krpvZ6WEU6ekvzUhcEXWhSWouphZ1gEeW8d7lMUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:02:21:1a:3c:69:99:c0:9e:ed:d8:ea:d5:78:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Feb 2 04:00:19 2025 GMT
Not After : Feb 3 04:00:19 2025 GMT
Subject: CN=9e01c9728748d1f8f0ea792895307ebbb511eccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f3:a6:5b:f4:83:58:2d:97:9e:be:0d:10:a0:
3f:18:ff:5c:cd:b8:70:7d:eb:38:a8:df:07:97:b6:
44:14:5c:93:df:5c:fc:c3:66:d1:92:55:4c:33:d7:
09:95:f9:b9:00:13:1e:62:5b:6c:a1:96:6f:b2:47:
81:58:5f:c3:a0:8d:42:26:26:f8:59:38:4f:3f:06:
9e:45:42:0b:de:09:ad:c2:87:e4:99:6a:64:20:42:
c1:f1:d0:6e:1b:2e:0e:40:08:d0:64:29:9f:1e:1c:
b5:5d:2f:1e:7c:64:53:32:39:54:56:7e:da:08:85:
ab:3a:f4:ae:83:7b:1d:63:6a:fc:f3:0c:5b:ac:e7:
a9:12:0b:c3:b3:d9:79:93:5e:03:3b:a5:2c:f1:6d:
e7:80:bc:ee:44:ec:56:b0:ff:e7:bd:66:dd:f0:cf:
80:d3:05:28:a9:78:e1:05:10:66:10:e0:dd:6a:88:
21:23:8a:b0:6b:c2:4d:f6:06:1f:aa:5a:93:12:07:
a4:7a:2c:dd:7b:90:ca:a9:9c:ef:a7:b1:7b:4b:c9:
8d:32:33:28:cc:c2:81:13:30:76:85:91:05:1c:34:
37:bc:f4:0a:11:84:5e:99:85:ea:e8:90:28:75:8d:
ee:9f:63:57:4c:a7:29:96:90:ef:50:71:d0:28:b4:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:01:C9:72:87:48:D1:F8:F0:EA:79:28:95:30:7E:BB:B5:11:EC:CC
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:de:7e:af:3b:6a:55:48:90:d3:bc:87:f0:e4:e5:15:a8:e6:
77:86:b7:97:b3:1e:ff:f4:75:c0:4b:cb:19:bf:c5:eb:6b:85:
f2:68:38:82:14:67:bd:e0:49:76:ce:67:40:3d:54:bc:44:2e:
17:8f:89:fa:eb:50:aa:03:e8:c1:77:e1:01:6a:9d:88:bd:95:
28:cf:a1:cf:ad:a4:a1:75:bb:40:6a:77:82:e1:bb:78:29:1d:
2e:8a:37:d5:24:56:e6:99:63:69:86:6b:5e:9a:99:22:7f:94:
fa:64:9d:a0:b6:fd:17:64:80:0c:a4:b3:85:91:27:f1:eb:00:
5d:ac:e8:18:57:30:51:54:fe:d7:bd:ce:f2:47:30:5d:39:00:
b2:61:f8:fe:45:17:d3:1a:0d:a7:05:63:54:49:2a:5f:0a:5c:
2e:28:c6:bc:a5:91:a1:5b:36:b6:36:8d:7c:81:d3:1c:1b:e0:
4b:9a:da:e4:83:99:55:49:3e:13:db:d4:d8:13:49:c6:fe:bf:
8b:12:83:4a:fa:4e:bb:2b:ea:0b:e4:78:b2:3a:9d:27:88:7a:
e1:d1:05:dd:69:44:52:08:4e:ff:99:99:6f:6f:49:a3:62:13:
ad:55:ff:aa:f2:ce:76:7f:cd:23:5b:00:17:64:dc:be:a9:d4:
8b:1d:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:29 2025 by rpki-client