Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File: hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier: oVDjFD1dvoBp0HL1uc2WkUB3IdAPXhUZ8RM8QlTExro=
Subject key identifier: E5:8C:47:27:FC:2F:C3:4B:66:55:A3:89:15:FD:9E:DA:9A:59:ED:F6
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 0194C350E5AE27D0CCC99B340B96957A9B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number: 142E
Signing time: Sat 01 Feb 2025 21:00:46 +0000
Manifest this update: Sat 01 Feb 2025 21:00:46 +0000
Manifest next update: Sun 02 Feb 2025 21:00:46 +0000
Files and hashes: 1: P7kra4ub5VF3YEJjz3ym8CwbAXA.roa (hash: AJEYR0xnzVy6utllNh8R4LIoanjGY6stnMXm+hMmUEo=)
2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: kiQMsirNytf8MmC2UdlNMp0eesR0PIXiWoedJRav3mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:e5:ae:27:d0:cc:c9:9b:34:0b:96:95:7a:9b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Feb 1 21:00:46 2025 GMT
Not After : Feb 2 21:00:46 2025 GMT
Subject: CN=e58c4727fc2fc34b6655a38915fd9eda9a59edf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:e5:66:d9:c2:4b:c2:38:ba:d5:99:39:60:
93:a8:9b:02:bf:6c:04:20:7d:7b:0f:c8:ec:6e:ef:
a8:2a:0a:42:94:4c:23:2e:8f:df:a6:74:4c:ea:9f:
e6:e9:94:87:da:17:20:14:27:3b:99:c3:45:da:8a:
e3:91:32:49:c5:8b:be:14:72:fa:1f:d8:37:e2:f9:
af:af:e8:43:df:85:e7:25:5f:22:69:9f:2f:c8:d1:
28:ef:f1:e8:84:6c:91:27:6c:5f:d1:55:46:70:d8:
ce:9f:89:78:54:b3:6e:83:6a:b2:e2:a3:7a:45:3e:
a7:65:72:e6:b7:a3:ca:07:41:df:c6:b3:e2:13:bc:
97:32:57:ba:53:86:c1:51:05:b7:60:4e:b1:3b:ea:
d0:fb:21:6b:9a:8f:4a:83:f1:e4:32:63:35:70:e1:
c0:dc:46:fe:0a:09:36:c3:6b:c4:6e:b8:92:07:b4:
7d:ba:11:41:3e:71:7f:da:c9:2b:a3:42:28:70:06:
f1:27:09:7d:29:54:2a:d6:fb:0d:4f:c6:0b:8b:30:
ea:2f:94:d8:93:b3:a1:57:f9:6c:b4:0d:3a:59:12:
db:e8:bf:45:8a:47:5c:b8:27:73:3f:3b:16:e8:96:
4a:d4:d7:b8:0d:b8:b4:78:b6:86:34:14:42:35:75:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8C:47:27:FC:2F:C3:4B:66:55:A3:89:15:FD:9E:DA:9A:59:ED:F6
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:cf:0e:be:83:50:66:de:a0:0a:e8:5c:90:81:fc:09:6f:6f:
17:c5:a3:5b:ef:ee:3f:0d:87:aa:fd:aa:aa:dd:ca:27:1b:c6:
cc:29:b2:78:99:ba:a6:d1:54:7a:ab:fd:d1:52:c8:d9:1d:28:
c9:1e:0c:da:a3:ff:1e:51:f2:10:15:2b:0b:66:bd:96:35:60:
3c:d6:14:a0:73:78:0c:f1:cc:34:f7:52:13:a1:08:f4:79:d1:
bf:cf:bb:df:a3:ca:b3:66:a8:9b:43:7b:13:ff:1e:44:8e:d2:
41:46:49:ea:c3:2b:26:a4:ce:0d:22:05:58:56:65:5b:f6:52:
dd:d1:b5:aa:6e:65:37:f8:6a:13:a7:1f:30:ee:9c:c2:b0:22:
86:62:6e:8e:09:37:00:7f:e0:94:45:37:a9:23:9c:7d:b7:39:
17:8d:57:d8:eb:f5:30:57:a6:51:70:1c:8c:74:24:81:a4:0d:
12:e5:55:bf:82:26:cd:fd:2d:11:b6:97:8b:ab:32:0a:73:9d:
81:b6:0c:13:01:03:1a:2f:b5:4e:0d:d0:c8:fa:10:cf:78:81:
11:2b:a3:8c:d1:0f:ba:ee:3c:18:d5:fd:b7:3c:10:2e:b2:11:
3f:a4:58:e7:13:db:13:63:24:48:04:64:ac:cd:e5:94:fb:71:
d0:bd:df:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:57:30 2025 by rpki-client