Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json)
Hash identifier: UfQVdlh9R/KUfixLlVxjFkaX2FAG5jbRhAo8SJojFBc=
Subject key identifier: 21:1B:6F:23:2C:7D:2F:D9:00:13:8F:E4:AE:E8:44:9F:CD:64:B3:4E
Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954
Certificate serial: 01904453B504CE91F171242CE2C49161F530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
Manifest number: 10EA
Signing time: Sun 23 Jun 2024 09:00:54 +0000
Manifest this update: Sun 23 Jun 2024 09:00:54 +0000
Manifest next update: Mon 24 Jun 2024 09:00:54 +0000
Files and hashes: 1: ZxQ0RyvW-nI8U9row2qR12dtCic.roa (hash: Kat8xi3qlbQXNgZmy/rhrSZmgMuNNTAL6pn7je/37V4=)
2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: 4rtUW0zUaBJ/CF9dPve+k6WzP5eDB6yuRHCzl529guQ=)
3: mePWnRfxtqZL4chi7lUSLQWhU8k.roa (hash: EtEtNOfLqWG/YTt+l2Dx674oeQxo2RpteqTZCu5f3wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:53:b5:04:ce:91:f1:71:24:2c:e2:c4:91:61:f5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954
Validity
Not Before: Jun 23 09:00:54 2024 GMT
Not After : Jun 24 09:00:54 2024 GMT
Subject: CN=211b6f232c7d2fd900138fe4aee8449fcd64b34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:f9:e5:cc:4e:3e:60:18:be:e2:da:f5:3b:
e1:92:65:90:07:23:46:9d:c3:4c:c4:49:62:6a:51:
97:34:2b:a3:dd:49:1c:73:01:69:53:fe:bd:30:67:
d2:5c:53:9d:08:df:ce:36:fd:57:d0:22:aa:40:a9:
39:01:42:20:61:b3:30:86:98:08:ff:f9:5a:db:b7:
a8:91:26:2e:f3:fe:4c:78:01:a5:e7:ac:3b:7e:00:
c6:27:60:dd:e0:91:c0:79:b7:e1:43:7f:92:0c:f1:
e7:65:38:8b:21:f5:56:b1:78:ac:97:d6:0c:ab:83:
e0:55:02:8e:9a:49:d7:25:f1:ea:83:52:e8:26:1d:
ac:f5:c0:9d:2a:54:c3:fa:45:b9:8d:9a:d0:66:55:
7d:85:6c:dc:4e:ed:eb:80:aa:13:9e:c3:3b:99:76:
f1:f2:0c:af:08:91:f2:05:0d:ae:a8:08:95:b8:7e:
b9:ee:cf:45:60:31:45:6a:12:b5:ba:0d:0a:92:2b:
f0:6d:c6:89:af:8f:bd:58:47:65:86:2f:13:b0:ff:
9c:b0:8c:5d:11:cb:2e:ce:42:04:32:8a:70:73:83:
7c:2d:8d:49:81:88:e3:d6:1d:4d:b6:97:ac:8b:68:
47:90:f5:a5:dc:be:74:6c:53:4d:56:50:28:9d:8d:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1B:6F:23:2C:7D:2F:D9:00:13:8F:E4:AE:E8:44:9F:CD:64:B3:4E
X509v3 Authority Key Identifier:
keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:21:ce:b7:1a:04:04:9b:64:75:75:64:bd:ce:1b:33:b3:61:
c6:18:f9:e6:1f:f2:8f:0c:77:52:2a:c4:39:1e:9b:7b:b7:bf:
e6:28:b2:81:1d:c2:b4:65:45:8d:ea:30:5e:87:54:49:2d:e3:
ad:af:8e:56:37:67:6c:3c:11:d0:f2:d5:4e:0c:a0:45:a2:b0:
40:87:e6:6c:9f:2a:e5:23:82:07:0d:bc:12:4a:04:f2:42:e7:
ac:23:82:65:7d:01:6e:ce:f8:c9:dc:14:31:27:4d:51:bc:a6:
a9:e9:30:1c:f8:1e:06:c7:7a:b6:e4:fc:c8:8c:c5:c6:a1:5f:
9c:8d:1c:49:03:88:ec:d1:cf:ec:54:d8:0d:3c:18:4e:b5:0a:
7d:da:04:f2:ff:e8:fa:7f:6f:6a:0e:36:7b:a2:d3:1d:a0:a7:
f1:84:6e:08:7a:cd:5f:9b:02:15:8b:47:56:8a:35:c5:46:5f:
6f:ff:f3:83:6f:0f:f3:9e:bd:0b:12:36:5e:19:71:11:87:9a:
02:18:f2:9f:de:f5:09:c1:27:52:66:3b:36:c1:6f:3e:23:db:
44:48:3e:cb:78:ae:d4:92:76:45:73:7a:25:82:a5:6e:1e:62:
b5:c3:46:76:52:fc:bd:a1:13:22:de:93:2b:95:f0:13:a4:09:
40:11:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:12:15 2024 by rpki-client on console-fra.rpki-client.org