Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
File: hHi3bGnJkVKU_cORNeINrHN2IiU.mft (raw, json)
Hash identifier: MaYiTIl6nWoxBZtyjGdcdvoYfS5l8BOvStptgOSzwMQ=
Subject key identifier: B5:F3:EE:1C:31:0B:71:66:7D:91:23:E7:B0:BA:1E:36:A9:6D:2C:A3
Authority key identifier: 84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
Certificate issuer: /CN=8478b76c69c9915294fdc39135e20dac73762225
Certificate serial: 0194C4D1488267C1FBEFDA1825B00A9B1E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
Manifest number: 13C7
Signing time: Sun 02 Feb 2025 04:00:37 +0000
Manifest this update: Sun 02 Feb 2025 04:00:37 +0000
Manifest next update: Mon 03 Feb 2025 04:00:37 +0000
Files and hashes: 1: hHi3bGnJkVKU_cORNeINrHN2IiU.crl (hash: b/k2P/muFMM3DYuPAp5ugyo+DcQGt1w8R1ks4/YDOlw=)
2: kclE4AGa3IQ3ANoqx8hNmFyyOPc.roa (hash: era/rLdikRzOubIlTwlZQUllh2OgF4bxbh9GfJNQo5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:d1:48:82:67:c1:fb:ef:da:18:25:b0:0a:9b:1e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8478b76c69c9915294fdc39135e20dac73762225
Validity
Not Before: Feb 2 04:00:37 2025 GMT
Not After : Feb 3 04:00:37 2025 GMT
Subject: CN=b5f3ee1c310b71667d9123e7b0ba1e36a96d2ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:30:d5:ed:af:39:2f:5b:56:13:ba:04:05:
ae:0d:33:4d:0b:c7:9e:fa:0a:60:ed:52:82:4c:e3:
cb:f8:f2:0d:19:98:e5:35:30:56:27:9c:08:f1:1e:
3a:53:10:69:6e:7d:b9:f0:d5:4d:bb:c3:30:db:7d:
04:7c:c1:ac:ea:00:4f:56:76:b8:35:aa:00:be:ef:
fd:81:8f:4f:85:96:de:80:09:8c:b6:b3:df:33:93:
c7:c4:d7:db:2e:18:4a:65:b6:42:1f:7d:05:2b:6f:
a4:6d:49:05:57:37:79:09:79:a3:21:39:37:69:0e:
da:84:c8:da:e9:4f:9c:b8:68:5b:51:63:64:e2:8a:
08:3f:59:c0:de:e0:7f:f0:ed:dd:5f:c2:62:e7:1f:
db:98:1f:3f:dd:8d:87:23:35:4b:33:bd:bb:b9:f9:
9d:c3:cc:38:8b:ef:b8:7a:2a:0c:1b:73:53:c8:b2:
5c:68:89:e6:f9:cb:f1:be:71:e6:b5:47:d6:f3:59:
d5:9d:ed:77:c6:a3:cb:42:37:68:a9:32:fc:03:cc:
b3:21:23:1c:3f:df:23:1b:8c:20:01:7d:a2:ab:3e:
7f:12:88:8e:eb:5e:e5:e7:f8:45:48:18:22:a6:f7:
64:b6:f0:aa:f3:b4:6d:0f:16:82:c6:6b:98:2b:83:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F3:EE:1C:31:0B:71:66:7D:91:23:E7:B0:BA:1E:36:A9:6D:2C:A3
X509v3 Authority Key Identifier:
keyid:84:78:B7:6C:69:C9:91:52:94:FD:C3:91:35:E2:0D:AC:73:76:22:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hHi3bGnJkVKU_cORNeINrHN2IiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/289606-9f5b-4d34-aacf-2fd650cefd21/1/hHi3bGnJkVKU_cORNeINrHN2IiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:63:5a:e6:9e:9a:d2:81:2a:5e:00:ab:40:73:2e:17:24:d7:
45:55:fd:fe:07:ce:c3:bc:bf:52:b4:e7:ee:c7:d7:9e:fa:92:
8f:21:7a:cb:73:b1:28:42:3d:e0:9b:12:48:4c:6f:7c:03:60:
98:80:01:03:15:b5:70:5d:07:29:70:3c:05:83:60:7c:3a:38:
67:ce:19:e5:9f:79:27:f1:8f:11:ec:df:68:90:94:72:22:0d:
74:a9:f7:92:88:2f:cb:b3:f6:ac:b9:6d:6a:bc:00:dc:57:d7:
50:31:ce:79:e1:3a:c8:17:41:a2:ed:7e:22:04:cb:58:07:96:
2b:cd:5a:06:ad:0a:d1:33:f3:09:42:1b:17:4b:51:f1:29:c1:
fb:32:dd:eb:88:6f:76:0e:3d:2e:55:d2:f2:df:35:a6:82:a5:
52:7d:0c:61:91:62:e7:22:73:45:63:7f:f1:11:24:5c:65:bc:
e0:ce:6f:d8:40:c4:b5:f2:6c:b7:02:8e:99:f5:8f:a6:83:1e:
96:89:70:38:8c:ab:ee:20:bb:6a:8d:94:dc:b4:1b:db:f7:a3:
f0:69:ac:85:ec:69:82:43:9e:7f:88:6d:04:49:39:b6:ff:99:
4c:fd:46:72:32:b7:86:9e:79:cf:e2:29:6b:0b:de:83:06:b3:
cc:7b:c1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:31 2025 by rpki-client