Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
File: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft (raw, json)
Hash identifier: xR9pP01RtC6fnFzMZuI8rH/oeEVb3FGXVcYdV4hSva4=
Subject key identifier: D1:5E:E1:FF:B8:C0:44:90:E8:24:4E:2A:70:E3:B6:58:EF:B7:D6:C1
Authority key identifier: 1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
Certificate issuer: /CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Certificate serial: 01951247961E49BD90FC544E764DA4DAD285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
Manifest number: 0DC3
Signing time: Mon 17 Feb 2025 05:00:36 +0000
Manifest this update: Mon 17 Feb 2025 05:00:36 +0000
Manifest next update: Tue 18 Feb 2025 05:00:36 +0000
Files and hashes: 1: HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl (hash: +8xp5RrI9vES6Gksn1fpETqcz6hmpBQU0EfDlzvVBIg=)
2: LjvscEK241_TnXIZYmD9gfa2eq0.roa (hash: 0euqfqSMh1dqgtwiYuyK1jN/xv8/2F/xzn29uxLt1Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:96:1e:49:bd:90:fc:54:4e:76:4d:a4:da:d2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2b2b36fb722509465ed9d948c2bf891160cd0e
Validity
Not Before: Feb 17 05:00:36 2025 GMT
Not After : Feb 18 05:00:36 2025 GMT
Subject: CN=d15ee1ffb8c04490e8244e2a70e3b658efb7d6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:d4:07:9e:a4:f8:63:c6:0a:01:01:f9:bc:
67:3c:6c:66:ad:ff:76:13:26:09:38:77:4b:68:2e:
e4:25:b1:14:79:f3:c7:5f:03:53:26:e5:78:ce:f4:
9f:c9:c2:d5:8f:17:1f:d1:e2:1d:b9:bc:89:1c:bb:
c7:96:57:08:61:95:34:3b:b3:4c:e3:57:d8:ea:a5:
94:09:ed:32:4c:ca:15:4e:84:5d:c7:58:a5:74:c2:
6c:a5:c4:09:40:ba:c0:85:5a:09:17:22:e4:85:8e:
f3:18:08:20:fb:52:e1:c3:6f:98:b6:f4:07:65:1c:
a4:07:bc:f1:3a:bf:80:88:da:e8:6c:1c:bb:ec:18:
31:15:95:79:9f:6f:44:b4:a2:56:0e:17:ff:21:c5:
95:7b:67:36:14:ad:78:90:1f:a5:54:eb:77:2d:a7:
01:8c:2a:3d:26:54:68:49:e6:e9:cf:59:06:62:44:
d4:61:5f:01:70:38:24:3c:9a:b0:a2:bc:47:ff:fb:
ed:d7:6f:04:90:72:f6:34:e9:6b:f9:d2:60:26:b2:
9a:7c:d0:f4:3d:14:ea:c1:9c:1d:87:64:8c:25:55:
5e:8f:32:79:39:87:29:76:8d:cd:5c:9f:cc:30:b3:
d0:b9:c2:3c:78:ab:43:4b:77:10:4a:6c:04:f4:f8:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5E:E1:FF:B8:C0:44:90:E8:24:4E:2A:70:E3:B6:58:EF:B7:D6:C1
X509v3 Authority Key Identifier:
keyid:1C:2B:2B:36:FB:72:25:09:46:5E:D9:D9:48:C2:BF:89:11:60:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9765b7-be44-465c-9755-c202f717d447/1/HCsrNvtyJQlGXtnZSMK_iRFgzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1a:8e:78:4f:dc:4e:36:43:1f:36:41:1c:00:fd:3f:52:07:
c8:00:20:ff:ef:ff:d2:f4:7d:89:ea:56:42:93:04:dc:6e:cc:
f0:b7:e7:e2:ec:a7:b7:c9:a9:77:5b:0e:c2:c7:c5:2e:ef:ca:
74:93:13:77:ca:a0:8b:96:e5:b3:35:c4:3e:2d:00:cc:0b:6f:
32:a7:c2:25:a2:8c:71:ba:c0:95:1b:1b:fd:e6:20:3c:3c:f3:
65:14:73:a3:14:53:83:36:a3:1f:12:65:51:df:39:16:0d:a4:
99:3f:ae:36:c9:fc:ad:62:02:3e:fa:ba:80:d2:1f:d4:ff:c4:
9a:ef:3a:18:52:96:5a:7f:4c:2d:4f:64:c1:92:cb:4e:17:1b:
35:31:b8:0b:7b:0c:1c:eb:96:3f:be:e7:a9:bb:10:94:ab:4e:
83:a6:aa:de:b5:af:c6:38:d5:31:50:a1:1c:23:f9:73:0b:a6:
0a:2a:84:d9:1f:89:79:d4:65:40:50:61:7c:97:51:ac:bd:58:
e7:16:b5:1b:66:f9:79:03:66:e7:ed:d2:d9:c1:47:75:9b:70:
f5:70:55:18:21:be:84:48:07:be:77:77:c6:79:32:91:20:ac:
45:e1:3e:c5:f1:02:35:a1:e2:a2:9f:ba:d7:1c:d4:f9:90:f9:
ed:78:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:53 2025 by rpki-client