Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: 462SrWBZgRb6iKAqYL2anc/qzGYUYpTHjZbNwOKzfCw=
Subject key identifier: 89:96:8E:F3:75:A9:3E:FF:CE:A8:37:98:49:84:46:A0:21:EF:7E:F8
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 0190448B9B434185AC1EA26ACFA18EAAF919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 11DD
Signing time: Sun 23 Jun 2024 10:01:58 +0000
Manifest this update: Sun 23 Jun 2024 10:01:58 +0000
Manifest next update: Mon 24 Jun 2024 10:01:58 +0000
Files and hashes: 1: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: w9xD6UHZ870TkmKtYciJV02TMSCgQx8KPn5ZM94fzQo=)
2: jS1KXp6KDCcP5aowe16csA4o6JY.roa (hash: Qqmwt0cVGbVQ7tN8Mg4b5a/3Vv7MXv71+r2LgFH333s=)
3: vHc3Y36sa-MDDBCBnNFiQCpChO4.roa (hash: s7NERvn3SN67IkbsbH9FzorwxJj08vzk/JZfBV4jjH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8b:9b:43:41:85:ac:1e:a2:6a:cf:a1:8e:aa:f9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Jun 23 10:01:58 2024 GMT
Not After : Jun 24 10:01:58 2024 GMT
Subject: CN=89968ef375a93effcea83798498446a021ef7ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:10:3b:40:c6:c2:f0:f0:8a:19:fd:09:f8:
e7:b1:97:cb:c5:60:12:4c:31:ce:2f:85:a3:a2:ce:
e3:67:66:3b:ec:47:4f:9b:ff:f7:b2:43:36:c5:43:
bd:13:b0:23:f2:72:4c:04:9a:14:c0:17:05:f4:b4:
7c:e1:c7:42:cf:97:1f:20:bc:be:dc:a4:98:7f:dd:
cd:37:1d:b3:56:00:f4:8e:50:6b:72:5a:4f:44:27:
59:a4:6d:61:05:d8:5b:ef:18:26:b6:65:b8:0e:e5:
71:9f:e0:58:ad:27:66:20:39:21:01:9f:f8:ba:02:
d3:08:54:2e:21:11:7e:9b:01:ec:ed:0a:23:37:6b:
d5:93:1b:9a:68:c1:bb:a1:ea:14:93:65:9d:b5:d0:
82:97:fc:86:72:ca:ea:37:34:0c:d4:48:b2:e0:1e:
51:06:45:7d:52:4d:76:7c:4b:38:21:ef:0e:a6:4a:
91:27:04:93:4a:26:ae:59:be:ff:50:fa:a0:7f:d2:
ed:50:b7:dd:ac:97:ae:de:f6:59:2b:1c:ca:3c:fa:
bf:e2:5f:32:c0:d8:3c:52:62:88:c3:b5:98:cf:ed:
a0:ff:04:c6:6e:ba:d5:a0:51:c1:d9:b0:8d:2c:b8:
51:2e:98:df:ee:4f:09:eb:84:12:16:dd:44:6e:20:
6a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:96:8E:F3:75:A9:3E:FF:CE:A8:37:98:49:84:46:A0:21:EF:7E:F8
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:70:d5:f1:0b:4e:ba:06:cc:2f:79:8f:06:af:2f:f7:cd:0f:
94:5a:04:1a:a7:44:5a:d2:8f:8a:2a:fa:4e:6a:bd:4d:b1:09:
74:98:ac:ff:be:44:11:a7:df:3c:e5:42:b0:7f:6a:29:91:0e:
a0:44:9f:0b:f9:d0:0a:1f:0d:e0:6d:8d:ee:21:12:b8:84:72:
25:36:90:1e:fa:4b:01:e4:e4:c2:45:35:f0:2c:60:f1:d6:92:
c6:ab:ef:4f:bb:f4:99:ec:db:d6:1b:73:a5:86:ed:d2:83:e6:
e3:09:02:e3:7c:98:0b:ba:64:f2:66:4b:3f:32:d9:de:59:d6:
72:7f:58:f1:32:4d:0f:5f:ae:29:6d:9a:cc:5a:46:70:69:b0:
bf:2a:b6:57:2f:6d:02:41:c7:fc:4f:ed:88:b9:a8:2b:a4:af:
54:7f:86:56:ec:a6:90:9d:7e:d1:fd:a8:57:2a:60:48:98:f2:
a8:eb:11:3c:27:41:a3:49:9f:5a:f8:fd:fe:31:5c:35:24:05:
3e:fc:7e:f0:aa:19:7f:f1:aa:f8:76:27:ae:3a:a1:9a:8d:cf:
00:2a:a9:9e:af:be:4d:a8:21:38:8f:2f:ce:7d:c0:3f:4c:69:
11:65:c5:e7:12:11:08:da:05:11:fe:ca:29:5e:a2:ba:63:c7:
b9:64:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:38:27 2024 by rpki-client on console-ams.rpki-client.org