Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft
File: HCTxyq-zII64J6B4JkF7y5STQS8.mft (raw, json)
Hash identifier: aQ+Xet8n/pG0x196f5/69aNGkNPsx4x0h5+q7nRyxoU=
Subject key identifier: 47:98:11:DB:E1:B9:3C:F5:8E:A4:88:79:48:9C:80:61:C1:BD:01:3D
Authority key identifier: 1C:24:F1:CA:AF:B3:20:8E:B8:27:A0:78:26:41:7B:CB:94:93:41:2F
Certificate issuer: /CN=1c24f1caafb3208eb827a07826417bcb9493412f
Certificate serial: 01901C33569FEA17CB7ABCE4C8DE8EA5C7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCTxyq-zII64J6B4JkF7y5STQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft
Manifest number: 013B
Signing time: Sat 15 Jun 2024 14:00:44 +0000
Manifest this update: Sat 15 Jun 2024 14:00:44 +0000
Manifest next update: Sun 16 Jun 2024 14:00:44 +0000
Files and hashes: 1: HCTxyq-zII64J6B4JkF7y5STQS8.crl (hash: u/19wRZ1YNmEh7o/pVb+NUV3vAuVh3F2XXEvSztFke0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCTxyq-zII64J6B4JkF7y5STQS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:33:56:9f:ea:17:cb:7a:bc:e4:c8:de:8e:a5:c7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c24f1caafb3208eb827a07826417bcb9493412f
Validity
Not Before: Jun 15 14:00:44 2024 GMT
Not After : Jun 16 14:00:44 2024 GMT
Subject: CN=479811dbe1b93cf58ea48879489c8061c1bd013d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:18:76:f3:65:3d:e4:60:00:20:d7:0d:9a:
e6:d7:6d:2c:6e:5b:fb:02:52:64:6e:1b:ab:fd:9d:
54:a2:83:b8:b0:e5:ba:37:61:b5:5c:59:fb:bc:73:
9c:70:26:e3:50:77:ba:5d:6f:55:46:04:f3:64:77:
33:b2:e3:aa:2c:36:9c:8f:e5:37:49:b9:59:26:c4:
59:2a:84:1c:33:e8:d1:e4:95:9e:4f:76:b1:4f:91:
ce:a3:ed:f8:92:62:59:ac:1c:0c:53:6e:ab:73:b0:
8d:24:77:ac:d2:fd:9b:c1:1d:d8:96:a6:98:ba:b2:
dd:37:c6:0b:8d:60:26:75:af:06:91:87:ec:ee:a4:
4e:ec:23:f2:26:02:4c:53:54:04:25:96:b1:cd:33:
99:9d:06:30:4b:13:de:f6:a4:4a:cb:4c:08:d6:4e:
65:2d:fe:bd:fe:d4:95:eb:d7:15:1f:4b:83:d8:67:
ac:9b:bc:94:1b:2c:0b:fe:54:ba:90:f2:d0:a3:09:
a2:aa:0d:55:ae:fa:20:8c:b4:ef:11:28:b4:d6:3c:
3a:3e:d4:d3:85:be:0f:8a:07:79:fb:b1:6a:f9:a1:
f5:27:5f:22:38:ad:d5:9a:dc:15:c9:5e:6c:7d:76:
e9:33:47:f7:80:54:f8:ce:a8:1b:3b:96:73:0a:a9:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:11:DB:E1:B9:3C:F5:8E:A4:88:79:48:9C:80:61:C1:BD:01:3D
X509v3 Authority Key Identifier:
keyid:1C:24:F1:CA:AF:B3:20:8E:B8:27:A0:78:26:41:7B:CB:94:93:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCTxyq-zII64J6B4JkF7y5STQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b55fde-2b55-47be-8d64-7dcfffae278c/1/HCTxyq-zII64J6B4JkF7y5STQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fe:d0:cf:11:b5:a2:e8:12:64:c2:77:9a:80:18:8b:eb:16:
30:0a:d3:99:83:95:73:70:e1:96:f2:9c:f0:ee:29:78:38:47:
57:8c:1e:64:d4:a4:ba:88:d2:dd:96:c2:3c:41:9c:1a:99:85:
6e:53:d2:92:3d:88:e5:f2:28:97:96:70:1a:be:82:d9:35:8d:
80:01:36:9d:60:02:0e:f7:3e:6c:ff:b5:c1:cb:1d:bb:e4:53:
88:57:83:27:b8:28:cf:69:1e:41:15:83:42:13:4e:03:54:22:
b4:ee:38:14:23:15:a6:5a:1e:3f:93:72:04:eb:18:af:e9:1f:
4c:cc:a6:ce:46:69:22:b3:64:05:86:e1:88:28:54:f7:d5:0b:
e2:cf:34:87:b5:82:77:e3:ca:d0:50:56:a3:55:4a:bc:be:b5:
b8:28:b3:d3:3d:10:14:18:48:b2:ce:66:1f:96:d1:de:23:05:
e5:e2:df:f4:43:26:08:b6:c5:27:40:75:61:7e:d3:41:27:21:
08:3a:9e:32:a1:db:57:41:2c:4f:3e:11:43:f8:54:73:29:be:
b8:0d:36:b3:aa:db:db:53:3e:ca:be:a9:99:a0:25:86:32:4f:
c5:dc:d6:8f:1d:d4:ff:d5:24:3b:32:73:70:ea:80:42:47:25:
d4:aa:7f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:03:04 2024 by rpki-client on console-ams.rpki-client.org