Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.mft
File: hRCC0x-v2sqh3oSWhXwMxS1RZrc.mft (raw, json)
Hash identifier: xVTf4i31HaktzGFhgXq/F6+qW89G6CTOf4/3ytyIYRc=
Subject key identifier: C2:71:5E:9A:F7:D1:F1:2E:16:94:23:93:3B:BD:35:00:5A:71:A6:83
Authority key identifier: 85:10:82:D3:1F:AF:DA:CA:A1:DE:84:96:85:7C:0C:C5:2D:51:66:B7
Certificate issuer: /CN=851082d31fafdacaa1de8496857c0cc52d5166b7
Certificate serial: 01901E9000C49A5AD7A26799F3CEE2B40AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRCC0x-v2sqh3oSWhXwMxS1RZrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.mft
Manifest number: 0582
Signing time: Sun 16 Jun 2024 01:01:12 +0000
Manifest this update: Sun 16 Jun 2024 01:01:12 +0000
Manifest next update: Mon 17 Jun 2024 01:01:12 +0000
Files and hashes: 1: hRCC0x-v2sqh3oSWhXwMxS1RZrc.crl (hash: rh8/BQJrhc6OYQhv8tdMzwDbcQfytRjBI27zw7ThZk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRCC0x-v2sqh3oSWhXwMxS1RZrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:90:00:c4:9a:5a:d7:a2:67:99:f3:ce:e2:b4:0a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851082d31fafdacaa1de8496857c0cc52d5166b7
Validity
Not Before: Jun 16 01:01:12 2024 GMT
Not After : Jun 17 01:01:12 2024 GMT
Subject: CN=c2715e9af7d1f12e169423933bbd35005a71a683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:b2:33:ad:78:7a:a5:06:b3:d5:8d:2f:06:
ee:ff:7f:6c:e3:99:c8:d8:82:0d:91:e6:11:fb:3b:
c8:4f:36:bb:25:02:79:41:ab:4b:de:de:22:4f:77:
0d:7b:9a:22:33:64:64:34:1d:47:f5:9d:7d:8a:19:
be:a4:66:01:d6:1a:33:11:5a:cc:9e:0c:8b:cf:ad:
bf:50:e5:c0:db:9d:ce:07:fd:28:02:7a:18:f1:13:
1a:7a:02:00:a4:1d:f2:20:cd:4e:ed:41:66:aa:37:
0d:27:bd:98:1b:1b:aa:b6:31:df:38:42:08:70:73:
17:5b:e1:f5:ae:38:fd:64:9b:e3:4d:93:f8:21:6d:
9e:43:53:88:3b:eb:d8:fb:fa:d9:92:53:44:9e:ec:
f3:ea:c5:cd:4c:e6:24:ce:92:4c:bf:fe:aa:b4:1c:
0c:ea:bf:2e:fb:4d:8a:6f:eb:2b:0f:fe:bb:59:f1:
f8:8b:dd:a6:fd:d0:34:5e:a4:d2:ee:b7:cf:b4:ed:
c9:57:cc:9b:24:12:22:c9:64:e3:30:7b:75:f0:89:
fd:b1:89:ac:0f:20:1c:97:18:8d:11:3d:12:da:83:
d3:34:27:a5:03:ff:bd:87:c1:8b:43:07:26:7d:b4:
35:d2:86:16:cf:66:e9:14:87:94:12:87:43:7a:bc:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:71:5E:9A:F7:D1:F1:2E:16:94:23:93:3B:BD:35:00:5A:71:A6:83
X509v3 Authority Key Identifier:
keyid:85:10:82:D3:1F:AF:DA:CA:A1:DE:84:96:85:7C:0C:C5:2D:51:66:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRCC0x-v2sqh3oSWhXwMxS1RZrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a98852-77b3-4615-90af-5ee29b6fe2bb/1/hRCC0x-v2sqh3oSWhXwMxS1RZrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f1:ca:ed:0d:90:f6:3b:c1:a7:2f:d9:b8:93:72:3f:6f:14:
ef:7e:9a:41:f6:21:18:49:e6:f2:c2:42:22:c3:41:0d:f7:8f:
4a:52:04:33:00:a0:aa:95:c2:0b:9b:fb:3c:58:c9:8d:04:65:
8e:a4:70:b4:11:82:2a:6a:83:12:14:df:2d:93:88:4c:ee:32:
9e:59:0b:93:7e:97:c0:96:bc:30:80:e2:0b:0f:e7:6b:7e:49:
00:9f:51:3f:d5:49:0d:78:05:55:94:8f:b3:c2:ec:24:02:97:
d1:11:9e:54:6a:b6:d8:40:e4:fa:6d:b0:91:a5:e6:ad:18:79:
93:5a:26:3a:08:1a:8e:6c:4b:82:32:1c:5a:83:79:26:e0:f5:
09:da:b6:89:49:8e:82:b3:9f:cb:a4:3d:2b:e5:39:a1:37:ef:
4f:ab:05:b5:33:60:91:35:7a:26:79:d5:89:b0:69:65:d8:1b:
be:5b:f5:0b:52:4d:95:82:5a:81:8f:da:5b:a4:23:0b:9e:02:
1e:14:69:af:9f:ab:7c:e1:b2:7c:d6:5f:ec:fb:94:06:1c:30:
d4:59:36:fb:0d:4b:f6:52:ee:dc:e5:69:48:8e:20:cb:a9:62:
2c:19:99:3d:f4:14:e2:21:bd:9d:50:c3:08:54:f1:33:9e:f7:
ad:40:52:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAekADEmlrXomeZ887itAqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MTA4MmQzMWZhZmRhY2FhMWRlODQ5Njg1N2MwY2M1MmQ1
MTY2YjcwHhcNMjQwNjE2MDEwMTEyWhcNMjQwNjE3MDEwMTEyWjAzMTEwLwYDVQQD
EyhjMjcxNWU5YWY3ZDFmMTJlMTY5NDIzOTMzYmJkMzUwMDVhNzFhNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKSyM614eqUGs9WNLwbu/39s45nI
2IINkeYR+zvITza7JQJ5QatL3t4iT3cNe5oiM2RkNB1H9Z19ihm+pGYB1hozEVrM
ngyLz62/UOXA253OB/0oAnoY8RMaegIApB3yIM1O7UFmqjcNJ72YGxuqtjHfOEII
cHMXW+H1rjj9ZJvjTZP4IW2eQ1OIO+vY+/rZklNEnuzz6sXNTOYkzpJMv/6qtBwM
6r8u+02Kb+srD/67WfH4i92m/dA0XqTS7rfPtO3JV8ybJBIiyWTjMHt18In9sYms
DyAclxiNET0S2oPTNCelA/+9h8GLQwcmfbQ10oYWz2bpFIeUEodDeryKewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJxXpr30fEuFpQjkzu9NQBacaaDMB8GA1UdIwQY
MBaAFIUQgtMfr9rKod6EloV8DMUtUWa3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFJDQzB4LXYyc3FoM29TV2hYd014UzFSWnJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOTg4NTItNzdiMy00NjE1LTkwYWYt
NWVlMjliNmZlMmJiLzEvaFJDQzB4LXYyc3FoM29TV2hYd014UzFSWnJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hOTg4NTItNzdiMy00NjE1LTkwYWYtNWVlMjliNmZlMmJi
LzEvaFJDQzB4LXYyc3FoM29TV2hYd014UzFSWnJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfHK7Q2Q
9jvBpy/ZuJNyP28U736aQfYhGEnm8sJCIsNBDfePSlIEMwCgqpXCC5v7PFjJjQRl
jqRwtBGCKmqDEhTfLZOITO4ynlkLk36XwJa8MIDiCw/na35JAJ9RP9VJDXgFVZSP
s8LsJAKX0RGeVGq22EDk+m2wkaXmrRh5k1omOggajmxLgjIcWoN5JuD1Cdq2iUmO
grOfy6Q9K+U5oTfvT6sFtTNgkTV6JnnVibBpZdgbvlv1C1JNlYJagY/aW6QjC54C
HhRpr5+rfOGyfNZf7PuUBhww1Fk2+w1L9lLu3OVpSI4gy6liLBmZPfQU4iG9nVDD
CFTxM573rUBSxw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:14 2024 by rpki-client on console-ams.rpki-client.org