Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json)
Hash identifier: cht0aC1K3swr/HdCOaKShuHLiYpYx8bzHqsOTBSd+Lk=
Subject key identifier: 0A:78:C2:4D:9A:75:86:DF:9A:1D:5F:05:C3:14:A3:88:62:3F:67:6B
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 0190448B04CA9373D5743AFF6A8A6AB1C1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
Manifest number: 11DB
Signing time: Sun 23 Jun 2024 10:01:19 +0000
Manifest this update: Sun 23 Jun 2024 10:01:19 +0000
Manifest next update: Mon 24 Jun 2024 10:01:19 +0000
Files and hashes: 1: 1-2WZU3fbhWcuNeWH1w1_U26ixEw.roa (hash: 60Jn8ofi9AncaegXM55YgiP31eQA55X662iACKZgITQ=)
2: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: DQuTVXBTf1ONQTjt+D9ETuB0fG4u9iAsmb06claqqMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8b:04:ca:93:73:d5:74:3a:ff:6a:8a:6a:b1:c1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Jun 23 10:01:19 2024 GMT
Not After : Jun 24 10:01:19 2024 GMT
Subject: CN=0a78c24d9a7586df9a1d5f05c314a388623f676b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:e0:4c:3d:3e:90:64:11:68:ae:59:9f:c0:
38:06:3c:08:46:36:7c:59:5d:31:34:9e:46:4f:81:
5c:7b:2e:e1:31:c8:a0:37:b1:3b:19:83:fe:95:06:
13:76:f2:d1:d8:f4:fa:f7:b8:00:fe:52:3c:d6:c9:
ce:20:64:3b:81:0d:0c:04:70:af:d5:64:5a:1d:62:
e7:d9:69:c3:b5:68:23:6a:d8:1f:97:46:74:22:56:
42:31:ec:10:8f:d7:89:3e:4f:b5:92:17:a9:01:99:
e3:d6:67:4d:c1:61:30:63:db:d9:23:67:94:c4:60:
3f:ee:77:c5:7c:58:4d:a0:be:8a:75:77:ad:6c:7a:
6b:2b:a6:09:40:71:3b:3e:22:84:3c:0d:1a:4b:3e:
2a:da:41:e5:4e:b0:f5:ed:8a:cb:45:c4:e0:57:9f:
22:03:19:7b:4d:b6:b7:02:65:13:fd:86:da:25:0d:
5c:6d:76:5e:fe:5b:7c:7c:a0:54:25:12:c7:50:10:
65:7e:2a:4c:29:4e:9b:41:3a:c8:13:56:a9:7a:06:
99:bd:f7:3f:56:12:e6:f1:85:d0:e1:f3:84:1c:7f:
f4:16:4c:d2:db:27:fc:87:b6:d6:2f:dc:41:cc:d0:
af:c5:dd:ee:3f:8e:c8:b6:58:75:e6:8c:62:bd:24:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:C2:4D:9A:75:86:DF:9A:1D:5F:05:C3:14:A3:88:62:3F:67:6B
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:38:3b:ee:4c:09:40:5d:45:42:5f:19:38:0c:16:aa:89:ff:
d6:00:00:8e:24:76:a4:ce:52:3d:1a:85:ec:45:0b:a9:05:d6:
5a:1f:64:7d:b1:37:5f:d3:4a:a1:72:8a:c9:25:14:84:af:43:
46:3e:f7:df:aa:ba:53:5d:1f:a0:11:1a:42:0c:70:92:59:79:
df:a0:ea:62:ba:44:31:c2:67:75:b4:ac:af:9e:bb:82:b6:41:
8c:62:98:0f:98:1b:fb:72:c6:a9:bd:3b:90:a6:56:75:89:88:
59:d3:93:7f:7f:1f:43:84:dd:7f:d7:47:b4:28:41:35:05:a6:
42:e3:e6:5a:b6:00:3b:a7:e6:30:f8:5a:ed:45:fb:5a:5f:60:
3d:1e:ca:0d:aa:aa:38:4d:61:f4:87:3e:d0:57:dc:56:02:0d:
10:38:dd:ed:d7:a9:35:35:48:68:a5:09:53:b0:da:05:61:72:
1e:bc:54:39:8c:67:2c:37:08:21:d9:d6:3e:58:02:c2:65:58:
17:e7:39:fe:52:fa:19:16:22:48:26:1b:79:2b:63:4d:bc:e0:
e9:87:0e:88:6e:2c:31:e9:2a:93:93:2f:6f:ff:9a:6a:2a:ea:
9d:b2:7e:b8:f6:e6:3b:64:9a:4d:fd:3f:28:80:96:01:4c:fe:
e4:9b:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:23:22 2024 by rpki-client on console-fra.rpki-client.org