Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
File: hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft (raw, json)
Hash identifier: kbaEiIeyQ7Rpd15X2OkCPFyFQA+gK5QxxttJKRHoz1U=
Subject key identifier: B8:0D:9A:2E:12:16:0A:50:72:09:E1:9A:91:F0:B7:42:70:2C:F0:EA
Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Certificate serial: 0194C3F5A570F21C14BB581A217BBC83DCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
Manifest number: 1009
Signing time: Sun 02 Feb 2025 00:00:43 +0000
Manifest this update: Sun 02 Feb 2025 00:00:43 +0000
Manifest next update: Mon 03 Feb 2025 00:00:43 +0000
Files and hashes: 1: hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl (hash: 8XpxDxNgraerDGdwEJ24Mf/2ysnPFcXQonFmBvOjmZg=)
2: pNHLiZosFPLwAP2_39dVXVedoA8.roa (hash: 21Dk8gbrcOnUWwtpjgoXFZDgkCZkwg2MK05wmg5NEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:a5:70:f2:1c:14:bb:58:1a:21:7b:bc:83:dc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Validity
Not Before: Feb 2 00:00:43 2025 GMT
Not After : Feb 3 00:00:43 2025 GMT
Subject: CN=b80d9a2e12160a507209e19a91f0b742702cf0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:ee:d9:24:49:55:0e:08:ef:21:e8:62:a3:
17:d8:7b:87:72:ad:df:a1:37:21:35:e7:90:1f:37:
b6:64:48:b0:fa:cc:f2:de:18:ac:73:2b:18:17:b1:
67:6b:58:ea:b2:54:0a:8d:94:a9:71:2c:7a:4e:72:
d0:62:23:ee:23:a0:6a:5d:d7:b3:f5:5e:ff:02:b7:
b0:f4:af:18:00:03:83:98:d6:b5:bc:8b:e6:35:97:
9c:15:96:1c:8b:2f:14:40:36:a2:51:68:4c:3a:0d:
b2:1f:aa:fc:38:e1:99:07:b9:2a:dc:64:8a:5d:b2:
dd:28:19:7b:8d:a2:52:d0:fe:2a:24:e7:97:cb:59:
13:1c:12:8c:8b:4c:2f:7b:f8:0a:d2:09:9e:50:b2:
d9:72:7e:a0:c5:fb:0a:c8:49:53:2d:09:7c:ae:ac:
ed:3f:80:ee:6b:c2:cd:b1:53:db:71:3b:15:b9:87:
cd:9f:ae:3e:5c:7f:0b:c2:e1:3c:e5:00:24:a8:47:
d8:37:ec:d6:a0:b1:b5:63:33:0b:09:2d:f7:26:d1:
e9:be:b9:80:1b:a3:53:a3:5e:db:1d:29:01:bb:de:
62:c4:00:e6:e3:e5:0e:50:64:f9:5e:64:83:d3:a6:
7d:b7:db:e0:a7:13:36:b0:c7:71:aa:74:90:80:d3:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0D:9A:2E:12:16:0A:50:72:09:E1:9A:91:F0:B7:42:70:2C:F0:EA
X509v3 Authority Key Identifier:
keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d1:9f:51:e3:d6:78:14:5c:03:7d:be:0b:90:02:71:bf:34:
54:b0:2e:da:94:e8:01:2b:95:f8:03:9a:36:98:69:85:d1:8d:
89:18:38:be:0c:61:2d:ce:53:70:cf:aa:45:e8:a0:bd:f8:22:
0b:24:b9:2d:27:85:a2:f1:6c:ff:c6:53:93:dc:4f:3e:c5:17:
1e:28:e5:6e:5c:9e:0a:75:aa:39:10:e2:1a:5c:a4:05:14:f7:
0d:36:a2:f0:16:ac:53:f0:16:a7:d0:7d:aa:ed:c4:9c:be:f9:
f3:a2:e2:bb:9e:ee:79:6c:f2:47:4f:8f:18:85:9a:f8:08:aa:
3a:d5:6c:08:31:04:63:2f:6f:43:69:61:0f:82:36:8c:fd:bd:
bf:bc:35:cb:ed:6a:5b:9c:28:ce:c6:17:65:5f:d7:e1:3b:30:
e5:23:ec:c6:49:68:ed:26:b3:1c:7e:51:a8:0d:d1:ee:c4:61:
1b:43:8b:55:56:c5:6f:77:ce:29:89:97:19:22:b9:6e:9c:94:
9d:c8:b9:93:a4:24:d2:63:99:08:5a:8a:2b:df:3f:f8:1b:0f:
74:3b:b3:15:6e:ae:0d:4b:58:c6:91:2c:3f:d7:f1:e4:2a:e2:
71:b9:cb:98:c0:e5:24:7f:d5:da:42:11:c1:84:1d:87:77:be:
95:7a:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:54:00 2025 by rpki-client