Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: 13bD7lcZ8SGNvDsEGEsAZh+/O1fqFAZvi3BLkAerDt8=
Subject key identifier: 40:92:07:17:31:53:41:19:4D:3D:9F:57:22:BE:D7:B7:43:6E:E0:AA
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 0190723F210D44FCDB9DE8B78BCCCE894485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 50
Signing time: Tue 02 Jul 2024 07:00:58 +0000
Manifest this update: Tue 02 Jul 2024 07:00:58 +0000
Manifest next update: Wed 03 Jul 2024 07:00:58 +0000
Files and hashes: 1: ClDjUWbi2esy2PSgT6kDL1ncJjw.roa (hash: WC+f3Ltvc/wa06FKjC9JzaVW+jYS1GRWTokK+eQCenc=)
2: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: vMIuXXOpyKfOZQnJ35qwg23kaLoG04NUpdj3BssukF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:72:3f:21:0d:44:fc:db:9d:e8:b7:8b:cc:ce:89:44:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Jul 2 07:00:58 2024 GMT
Not After : Jul 3 07:00:58 2024 GMT
Subject: CN=40920717315341194d3d9f5722bed7b7436ee0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:8c:7e:96:ec:64:f8:1e:09:fe:b7:03:cf:
b6:58:35:f4:2f:cc:99:36:c6:62:34:8a:e8:64:20:
6b:a9:e2:b6:b0:8b:9e:4c:dd:09:de:3d:10:2f:30:
76:59:53:ef:77:d0:da:2f:01:25:ad:c7:24:ec:26:
62:1d:ff:6f:45:57:a6:be:6e:cf:18:d0:3a:1d:1f:
c1:bb:4d:8a:70:82:f0:b1:04:7a:bc:50:b1:48:a3:
c5:a4:09:50:8b:60:9d:73:a7:2e:bb:31:9d:e2:68:
b3:41:bf:e3:4d:d2:68:b2:16:ef:9b:d7:ec:3c:a3:
32:42:83:b9:30:92:52:d1:ef:14:c4:08:2e:2d:6b:
a1:c2:61:f6:b1:77:19:67:c7:1f:b2:2c:30:a7:f6:
2d:02:60:fd:a6:75:59:27:3c:93:06:f5:08:23:be:
3a:2c:48:d9:06:af:db:50:b1:18:ef:62:e3:22:59:
b1:96:6d:b4:bd:72:20:d7:de:1f:25:4a:ad:5a:25:
17:e6:b3:8a:93:fe:57:38:c6:35:7f:40:2d:b6:05:
ec:b7:96:47:88:d9:52:6d:5a:51:d0:29:f3:3c:82:
33:f0:c6:ab:5c:19:ef:a8:f6:84:59:30:e9:57:40:
6a:f9:f4:8c:26:f5:0c:3d:05:7c:41:66:1c:62:35:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:07:17:31:53:41:19:4D:3D:9F:57:22:BE:D7:B7:43:6E:E0:AA
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:19:6c:1b:7b:8c:75:17:3e:15:11:9f:37:1a:59:0f:fc:45:
ca:fe:cd:83:1b:92:fb:ae:5a:47:19:5d:81:e8:93:58:f9:c3:
5f:d4:fb:93:3a:fc:84:4c:5e:e0:8c:6c:1b:3b:91:42:25:84:
14:a8:c6:ea:3e:f8:1f:13:c3:4f:d2:f5:f8:af:97:f0:3a:29:
d0:ea:17:05:62:80:7c:d6:6f:3f:99:54:97:b1:2b:e3:1b:22:
10:bb:d4:35:46:7b:5e:66:9d:ac:a1:f7:8c:fc:57:d5:ad:4b:
5f:16:1b:95:ca:ba:d2:83:5b:6b:72:3d:47:cb:00:5b:44:2b:
af:db:c7:bc:bd:96:b6:fa:40:c4:f7:a1:4f:0f:a8:8f:2b:32:
02:ce:b5:a6:b5:e8:2a:70:85:63:91:4e:5a:c7:44:24:d6:89:
41:8c:0e:e2:e3:12:8b:7d:6c:62:e9:1a:91:33:20:05:3d:30:
34:da:42:59:d9:f4:67:88:62:39:0e:06:b4:19:fd:c5:3c:a2:
d2:6e:57:5e:62:19:f1:27:9b:b4:57:34:50:f5:9c:89:0b:30:
1e:14:83:34:79:2a:1c:42:78:47:11:14:96:6c:3b:3a:41:32:
77:50:d7:9b:ae:27:af:b2:f5:49:5f:f6:c6:10:1f:ff:6f:2e:
4b:77:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 16:09:52 2024 by rpki-client on console-fra.rpki-client.org