Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
File: hpA1wxdzT2Ybv4XCGEFVofNhat0.mft (raw, json)
Hash identifier: QVLT0SgMRZmAFSZby+k7+YA4eAs6kDC2AZLCveP7LKQ=
Subject key identifier: 04:82:B3:F0:FF:6C:42:90:16:4D:7A:53:CC:EF:4B:A9:65:44:24:BA
Authority key identifier: 86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
Certificate issuer: /CN=869035c317734f661bbf85c2184155a1f3616add
Certificate serial: 01904869EFABC7E691B3CDBD27EF53A04E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
Manifest number: 0D62
Signing time: Mon 24 Jun 2024 04:03:40 +0000
Manifest this update: Mon 24 Jun 2024 04:03:40 +0000
Manifest next update: Tue 25 Jun 2024 04:03:40 +0000
Files and hashes: 1: 7GmN22H1fQJ0qV-smZS7xh35BF0.roa (hash: UhdcptFBTuyVsKLwrO2rnwU3/Qtr9pJL4cUOsvLPi6Y=)
2: hpA1wxdzT2Ybv4XCGEFVofNhat0.crl (hash: BtDwEPAQMEsZodkFkN3T40U1an+S0X/Q5w3dprS0cZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:69:ef:ab:c7:e6:91:b3:cd:bd:27:ef:53:a0:4e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869035c317734f661bbf85c2184155a1f3616add
Validity
Not Before: Jun 24 04:03:40 2024 GMT
Not After : Jun 25 04:03:40 2024 GMT
Subject: CN=0482b3f0ff6c4290164d7a53ccef4ba9654424ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:12:c5:82:0e:ac:be:d9:fd:53:85:27:06:
a5:71:4c:1c:a0:a4:bb:ef:da:91:4d:2c:2d:09:23:
5a:a4:63:9e:79:f8:92:c5:a9:39:bf:8a:28:33:82:
fb:fd:79:63:3b:f1:4a:61:19:58:b8:33:7a:7d:5f:
47:14:4d:64:fe:8e:d9:2b:f1:ba:6c:2d:0a:8c:1d:
76:e3:84:40:03:c0:29:b7:62:01:01:11:b2:48:48:
17:a4:4a:97:9a:f2:7d:d1:b4:e9:ae:df:a5:08:9f:
37:98:21:03:62:97:46:3e:f6:92:fe:1c:f9:f3:30:
be:12:4c:72:18:14:d7:f2:c9:eb:63:38:21:b8:40:
cb:c4:bd:73:6a:f9:63:9a:be:51:a1:53:15:1a:60:
8a:9f:50:8d:62:57:97:32:fe:7a:96:2d:ed:2e:ac:
07:12:bf:7f:00:5f:ab:9d:4f:73:b4:47:40:ba:1f:
6b:c1:27:c1:bb:ac:b9:20:dc:87:31:59:3e:38:8b:
bc:9f:5d:43:c2:0e:56:7a:91:47:75:25:2d:da:57:
48:30:c8:1f:fa:dc:13:97:f5:f5:bd:4a:9a:34:75:
bb:21:db:5a:ee:db:8d:a2:9f:56:2a:2a:ed:4e:fc:
6d:11:04:48:e1:a4:c9:7d:3a:eb:cb:71:03:09:3e:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:82:B3:F0:FF:6C:42:90:16:4D:7A:53:CC:EF:4B:A9:65:44:24:BA
X509v3 Authority Key Identifier:
keyid:86:90:35:C3:17:73:4F:66:1B:BF:85:C2:18:41:55:A1:F3:61:6A:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpA1wxdzT2Ybv4XCGEFVofNhat0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3fd774-3d79-44b1-878a-6028c2654940/1/hpA1wxdzT2Ybv4XCGEFVofNhat0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:13:d6:0f:33:47:ba:34:24:f2:fa:6f:a5:c2:89:e3:59:0e:
a8:d3:b5:f5:6e:c2:64:db:4c:19:d3:8e:11:73:63:34:b7:7b:
a1:1c:7a:8d:00:03:b7:a7:f7:ef:5e:d5:72:7e:bb:72:09:da:
7b:f3:c0:f4:b4:ab:a4:d9:1b:6a:fc:43:67:67:de:35:23:c1:
04:3b:61:a9:05:bf:2c:0f:cd:06:47:de:18:c7:dc:71:be:f7:
8e:f5:1a:da:da:f0:a9:e2:3d:0d:b7:bd:be:9c:38:47:de:fe:
21:c0:e3:c2:d7:39:40:96:ac:05:26:d7:6c:0b:73:8b:b6:e5:
81:b0:3d:21:53:1a:62:b0:e1:64:9c:00:24:7b:ed:07:91:05:
15:a1:3f:e9:75:2f:ad:f9:b6:2c:3b:0a:e8:3f:82:6a:cf:e1:
f6:32:45:91:ba:6d:39:80:a5:f2:bc:38:32:74:07:98:f0:c1:
eb:54:ac:c5:90:87:f3:d8:bd:95:c2:40:7b:e4:42:14:d9:53:
6f:9a:ca:3f:7a:f0:bc:d8:66:e7:26:f5:c8:0f:2b:49:49:14:
87:f6:09:54:cd:7b:b7:af:c4:97:3c:5f:c1:ed:ec:85:8a:de:
cd:4b:fb:78:23:b5:8a:3a:78:3e:fa:dc:d5:c0:3f:0a:5d:77:
dd:85:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:36:46 2024 by rpki-client on console-fra.rpki-client.org