Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
File: HpKJoBWvREH4-d9MjFXpiykogc8.mft (raw, json)
Hash identifier: WyVwMMZlPed4+VRmldGk89WX8ywnDuey030/xOmkU08=
Subject key identifier: 30:26:27:32:2F:CA:40:D2:3D:BC:F1:1C:FD:20:C8:35:C7:72:CF:96
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial: 019510C75A405831557F850DDF3FD92DC7A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
Manifest number: 1455
Signing time: Sun 16 Feb 2025 22:00:54 +0000
Manifest this update: Sun 16 Feb 2025 22:00:54 +0000
Manifest next update: Mon 17 Feb 2025 22:00:54 +0000
Files and hashes: 1: HpKJoBWvREH4-d9MjFXpiykogc8.crl (hash: TQ0vjwNpnIEeX8b8spye3UV4ziAVGzE0gMqvX3KJfzU=)
2: NgTdB5AEPD4DAHaTIZRq0754ZYU.roa (hash: X0ljVmj2cD5On812FnYT4pXdeEcEXod3j6IYZXkhhSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:5a:40:58:31:55:7f:85:0d:df:3f:d9:2d:c7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Validity
Not Before: Feb 16 22:00:54 2025 GMT
Not After : Feb 17 22:00:54 2025 GMT
Subject: CN=302627322fca40d23dbcf11cfd20c835c772cf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:92:8e:7e:46:e1:e4:6c:a6:ad:2e:cb:7c:
f3:63:5f:0b:34:77:60:b8:9d:c4:a6:8e:f7:d3:2f:
58:7f:f9:22:e6:bd:49:91:4c:17:dd:60:f7:32:a6:
81:f9:02:1e:e3:e0:30:fe:36:da:6e:d1:92:eb:f2:
ce:c5:81:49:c3:e9:35:24:b6:0a:59:96:f0:b1:db:
7f:56:03:84:b7:10:1d:e5:2e:52:9d:83:00:a0:bf:
11:f1:cd:f1:69:28:14:41:36:d5:c5:b4:27:7e:e3:
70:d0:b9:b4:07:d4:83:9e:e8:29:44:8e:c2:71:bd:
3e:97:6c:1d:3b:10:df:54:74:2e:30:04:fc:42:4a:
1f:e2:83:2d:45:ee:f0:0b:f2:4b:91:01:3a:bd:16:
bf:78:86:8a:ee:5c:98:cf:58:35:cd:36:63:f6:d7:
ed:27:83:e4:df:c6:c9:d7:84:0e:9a:e2:34:0e:33:
7d:4b:64:0d:ff:b3:81:15:ef:b0:92:ec:1f:95:83:
d1:ba:65:f5:76:9f:36:89:e2:23:3f:85:23:48:58:
d5:ab:3b:fc:3e:07:e8:07:e2:75:71:8e:d0:76:be:
79:f4:dc:64:94:90:3e:91:2c:75:e9:0b:f1:44:15:
95:29:16:15:49:b8:a4:c1:9d:6e:bf:a3:a5:96:e2:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:26:27:32:2F:CA:40:D2:3D:BC:F1:1C:FD:20:C8:35:C7:72:CF:96
X509v3 Authority Key Identifier:
keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ff:cb:e3:ac:fa:87:e1:1e:ff:f9:be:41:f6:bd:c1:e9:d6:
b3:41:a7:06:98:91:28:e3:00:64:61:a0:8d:4a:93:51:0d:81:
e8:1a:68:c9:80:14:be:a8:80:9c:b4:0c:38:69:2c:df:53:63:
5b:cc:be:47:54:10:96:82:7f:50:ee:d0:42:59:c3:5f:6e:bd:
fc:39:9c:aa:76:b2:74:c0:b5:7a:8b:e4:8a:1d:af:43:6b:e7:
11:c3:b1:6e:35:9d:c6:31:da:5d:34:28:7c:2a:fb:2e:ee:48:
79:72:fa:91:ad:e8:4b:24:71:30:3a:c6:67:56:c7:ca:b8:44:
42:16:ea:e4:43:d5:74:1a:dc:5e:70:31:18:51:18:26:bc:e0:
30:f8:7a:54:7d:f2:4a:69:7e:97:57:91:a9:be:9a:0d:a7:b4:
00:ac:ad:e6:5a:7b:d6:a4:ea:66:9f:d7:92:d5:76:50:5d:64:
a1:7c:03:05:39:93:99:6c:bb:51:95:bc:b4:f2:2d:08:95:1b:
1e:c8:7e:39:24:04:c2:c7:76:76:31:da:a2:71:e3:7d:85:97:
45:70:30:85:6d:d4:72:b1:b2:5d:fa:75:8e:f5:b8:2b:75:24:
65:ba:15:3b:d4:5b:37:22:0f:c4:3e:1c:b7:31:59:a1:c9:f2:
e2:31:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:34 2025 by rpki-client