Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
File: HsBDSlw88jdMo2AzGSaufSSsNFs.mft (raw, json)
Hash identifier: CNall6EOcCjLdl4XTzr/G530EvVeukzzSoPLf9ycHXA=
Subject key identifier: 89:09:9B:A6:E6:98:C1:30:02:3E:8A:BE:31:51:6F:AB:51:9A:E7:FC
Authority key identifier: 1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
Certificate issuer: /CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Certificate serial: 018FA39C21E8057138F1719B7A9F3ADFB198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
Manifest number: 0FEF
Signing time: Thu 23 May 2024 04:01:09 +0000
Manifest this update: Thu 23 May 2024 04:01:09 +0000
Manifest next update: Fri 24 May 2024 04:01:09 +0000
Files and hashes: 1: 86LUIezq1-8nXyeCCPFhTsbnpE4.roa (hash: 5qJC9xEu9Zxg6jOeB/HxaeGKmxNs/vLcGZbdb6ATMJc=)
2: HsBDSlw88jdMo2AzGSaufSSsNFs.crl (hash: xuBvGJ3V0a+gUyYbnuAqDXfeJPJ8B87B60ikWizKCSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a3:9c:21:e8:05:71:38:f1:71:9b:7a:9f:3a:df:b1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ec0434a5c3cf2374ca360331926ae7d24ac345b
Validity
Not Before: May 23 04:01:09 2024 GMT
Not After : May 24 04:01:09 2024 GMT
Subject: CN=89099ba6e698c130023e8abe31516fab519ae7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:67:af:2d:34:c9:ea:96:f3:7b:5d:be:82:6c:
b5:3b:c4:20:f1:fb:9b:d1:1e:c2:f1:4d:8e:64:de:
ea:bb:05:d4:e2:17:df:0a:ca:6a:f0:6f:2c:3b:21:
e9:05:6e:a1:ba:4f:55:b3:45:2f:a9:f2:3c:53:06:
3f:0a:cc:20:fc:a0:2a:4f:6b:a4:cc:21:1d:a2:15:
f3:ae:8f:3c:a7:58:41:2f:14:28:36:44:6c:92:58:
91:24:e5:c3:fb:42:d5:5f:c8:d8:64:30:aa:0b:97:
cf:dc:5e:18:bb:81:7a:36:16:aa:09:8b:3e:50:ff:
24:59:dd:a2:ca:10:e4:a3:da:e8:90:b5:09:65:0b:
ac:ce:bb:ef:60:31:94:a2:08:64:e6:7d:f7:df:87:
ab:60:9e:4b:c4:8a:24:6d:a9:e0:4d:66:ff:43:09:
d7:93:18:f4:44:00:7a:a5:55:5c:a7:ef:dd:01:f7:
71:6b:15:f9:5b:3a:c2:23:94:71:58:22:f6:44:cc:
6a:82:0a:53:f6:f8:b1:a5:5e:8f:b6:5c:5a:4e:8f:
3f:10:2d:b3:d9:e0:e9:f3:c2:4d:17:37:c3:af:6c:
e8:42:02:55:09:f1:d9:13:d1:21:27:5b:f2:cc:91:
8f:f3:c4:29:ec:f4:88:96:bd:6a:02:41:3d:fd:ea:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:09:9B:A6:E6:98:C1:30:02:3E:8A:BE:31:51:6F:AB:51:9A:E7:FC
X509v3 Authority Key Identifier:
keyid:1E:C0:43:4A:5C:3C:F2:37:4C:A3:60:33:19:26:AE:7D:24:AC:34:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsBDSlw88jdMo2AzGSaufSSsNFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5404-5ea4-4776-8cec-aedbbf468028/1/HsBDSlw88jdMo2AzGSaufSSsNFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:20:2c:1d:45:f2:4d:a7:ac:a5:42:d5:b1:d2:24:25:a1:d5:
7e:8a:50:42:d2:41:1c:e0:20:46:79:6a:2d:ea:c3:75:90:09:
27:30:87:f2:4b:db:87:99:95:9a:8e:81:c3:2e:78:d4:80:34:
c8:5c:fc:06:bb:57:59:70:f0:4e:76:be:24:e1:c9:54:13:76:
1a:7f:96:5c:bd:4f:40:e0:ad:43:ca:94:89:93:35:08:e0:7d:
c4:7a:e6:a1:f0:3f:31:f1:29:12:3b:6e:08:27:92:ea:58:ed:
67:61:e8:6e:8d:42:21:bb:c5:aa:d5:55:6d:97:b7:27:03:70:
4a:1f:5d:a5:27:63:9b:29:4c:16:98:4b:3a:56:82:08:a8:31:
85:d5:dd:bd:51:44:3f:bb:99:9f:71:20:32:7c:75:cd:10:91:
38:68:96:37:8a:d6:d9:a3:10:91:70:d9:32:4a:1c:32:e3:a2:
f3:23:3a:80:9e:f9:76:37:3b:01:f2:a8:f8:04:32:8d:9c:9a:
94:07:b9:19:81:e7:1e:a5:b8:63:9a:54:24:de:fa:e7:ba:a8:
2c:76:07:cf:61:e0:81:9b:a9:54:2e:cd:04:ec:20:7b:f4:e4:
cb:18:84:9c:5a:54:eb:6a:d4:46:1a:db:7e:dd:fa:22:3c:7e:
4b:9c:8b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 10:41:12 2024 by rpki-client on console-ams.rpki-client.org