Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: mn76y4QKf0RhxDnUGNxX1nFcFc2Dub8cGMtoLs67zUI=
Subject key identifier: 37:D8:24:39:76:78:06:BF:73:CC:20:55:D4:73:DF:5B:E2:9F:2F:61
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 019040AE3F9AB6CBF84CC651D9E97B0743CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 0EA1
Signing time: Sat 22 Jun 2024 16:01:19 +0000
Manifest this update: Sat 22 Jun 2024 16:01:19 +0000
Manifest next update: Sun 23 Jun 2024 16:01:19 +0000
Files and hashes: 1: 1-eD2pgWcZl-jONWfBsv1p6qYOSY.roa (hash: G7eaL/r6sGsGr8aStEvwIpHUacehcpKDxba2HG5G2gY=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: v/80jbHXyxyBzGDQosuAbG7MxoWgbxL2zZyRRdRGrPM=)
3: qDLq-MfQeEiPhcANKolsbyZmoXo.roa (hash: d7Se2U1FZ+NNN2/PCKRcmbyaVCfHhY0GQ753VuRxISE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:ae:3f:9a:b6:cb:f8:4c:c6:51:d9:e9:7b:07:43:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Jun 22 16:01:19 2024 GMT
Not After : Jun 23 16:01:19 2024 GMT
Subject: CN=37d82439767806bf73cc2055d473df5be29f2f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:97:f3:5d:b9:70:7b:55:65:03:6c:84:94:
80:50:6f:15:c3:6f:0f:b1:a3:ed:e7:51:50:1e:a7:
f3:43:69:9c:a5:bb:2f:09:cf:66:65:16:77:7f:fe:
68:22:f9:04:3b:5e:e6:4c:6e:99:9b:3b:cb:cb:c6:
98:ba:6a:02:4f:f3:81:41:7e:9a:63:8c:3f:e8:62:
5e:9c:bb:c0:72:69:46:17:2f:ff:99:1f:70:78:54:
49:30:12:24:74:5b:19:2a:70:a1:2c:1f:9e:99:0c:
ae:17:56:7c:4c:b7:f2:13:46:44:af:4b:a3:06:16:
e2:82:0c:80:08:ec:47:de:6c:63:36:3f:0a:f4:7c:
85:da:51:42:1f:fe:58:f3:9e:68:c8:eb:37:c5:7d:
d9:34:1f:ac:5c:a2:b2:66:f3:db:03:04:fe:b1:b2:
5f:ed:18:b8:03:fb:0c:b6:ed:50:d4:53:50:9f:e1:
e5:44:e7:fe:94:48:11:a6:2d:32:7d:aa:56:f1:3d:
2b:5f:ba:2c:b5:72:3c:c9:5e:84:db:71:73:9b:73:
09:7f:5b:c9:dd:8a:44:8b:33:de:52:5c:10:66:4d:
fc:68:15:5f:58:19:ec:03:71:00:91:cf:f7:fc:dd:
09:50:5e:b3:48:30:9e:6a:74:53:bb:4e:f8:9c:91:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D8:24:39:76:78:06:BF:73:CC:20:55:D4:73:DF:5B:E2:9F:2F:61
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:92:b9:01:0b:39:2e:d6:1c:a0:42:e3:93:7d:cc:2c:97:4a:
14:bc:ad:b0:3a:18:65:f8:a0:a0:ba:c7:8a:2b:73:d2:e7:9b:
d4:54:66:04:6b:b0:e0:51:4a:8c:16:db:cc:1a:77:db:c5:8d:
6e:47:12:01:63:94:57:4e:20:a2:be:10:c9:14:70:5e:5f:6f:
20:42:8f:c0:93:d6:6a:21:0b:85:41:60:dd:88:20:81:7b:cb:
5a:96:97:2f:ea:5f:38:dd:10:b6:63:b0:5a:54:88:d2:6e:03:
08:8e:01:e3:ec:ab:e4:66:92:4d:aa:79:3f:cf:f1:ac:dd:ff:
6a:15:85:39:db:4d:51:76:b8:cf:32:da:3d:48:6f:95:53:34:
93:1c:25:7e:b7:01:16:16:49:67:25:a3:0a:55:a2:54:90:8b:
c5:f4:d5:16:58:28:0a:c0:b9:8e:a9:bc:56:76:69:e4:0e:02:
1d:0d:d2:40:50:c7:10:ea:80:52:75:fe:65:cb:ff:ed:e7:8c:
ff:b8:0f:2b:04:5b:f1:27:79:f2:8f:5f:54:1c:51:47:be:e1:
5a:80:a3:fc:2a:c2:af:2c:a1:fd:19:67:12:1f:0a:1b:22:5d:
32:35:ad:2b:b8:ee:80:0c:8b:56:45:b2:17:4c:32:7a:c0:c1:
d5:69:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:44:12 2024 by rpki-client on console-fra.rpki-client.org