Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: VKDwBnHQWElashLlqpsSgw0nChQy+NNjNbobJ5boH7Q=
Subject key identifier: 72:E5:81:E2:0F:3B:82:66:2F:53:AC:35:3B:27:55:FF:7F:4C:CF:FA
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 019073884C12680FAAD31C9F3DED1DD544B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 11F0
Signing time: Tue 02 Jul 2024 13:00:30 +0000
Manifest this update: Tue 02 Jul 2024 13:00:30 +0000
Manifest next update: Wed 03 Jul 2024 13:00:30 +0000
Files and hashes: 1: bHoUUoLktNBreBkhTf5WvMROPac.roa (hash: geXaciA/Jp+yn/c12UutXZir9of+PbDFpnoo55JlJJg=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: jRoi9HRE1+6C4JdkjgAtR/qX760/lVOXMEFS0Z0b1q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:73:88:4c:12:68:0f:aa:d3:1c:9f:3d:ed:1d:d5:44:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Jul 2 13:00:30 2024 GMT
Not After : Jul 3 13:00:30 2024 GMT
Subject: CN=72e581e20f3b82662f53ac353b2755ff7f4ccffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4a:bf:1a:a0:b0:94:f4:3a:96:ea:d8:33:3a:
74:b9:6b:16:66:bb:a2:3e:fa:bf:13:59:5a:ac:32:
68:f4:f0:63:0e:98:34:83:09:cc:93:9e:11:16:f3:
71:40:32:35:2a:be:5a:6d:2b:5f:57:3a:26:ea:86:
c7:4d:80:cd:c3:1e:c6:d5:d0:33:53:c6:3a:da:eb:
5c:67:06:d8:14:27:5e:ca:09:ae:7d:88:ce:05:d3:
9a:fe:0c:89:e6:fe:6e:95:4d:57:2c:67:a9:68:e5:
f0:b4:ba:f5:bb:96:f9:9c:63:12:8b:0f:12:18:27:
79:dd:4b:27:3a:18:88:30:fc:c9:52:0a:64:7d:2d:
84:b4:02:9f:36:1a:68:8b:b8:df:03:cc:29:40:a7:
f0:b7:2d:56:7b:f0:92:2d:98:73:32:8b:1f:3f:cd:
78:72:75:7c:16:ed:c6:4f:cf:cd:f9:1b:70:ef:c9:
c5:a6:9f:33:1c:78:5b:e1:13:2b:9d:4d:c0:ac:51:
86:9c:40:d7:e0:a4:d3:d3:e7:4a:4e:56:ba:16:15:
3a:a7:78:e0:f0:32:89:e3:9b:5e:1e:b6:b9:42:de:
e5:ce:3f:18:e6:bd:4a:88:5e:33:61:41:7f:95:c4:
e9:dd:4d:bd:8b:7e:62:a6:e7:4b:2f:6c:f5:69:4b:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E5:81:E2:0F:3B:82:66:2F:53:AC:35:3B:27:55:FF:7F:4C:CF:FA
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a8:bf:7f:dd:c4:14:3f:ee:ce:21:7e:ee:c2:d1:a8:76:8a:
f9:3a:cb:38:02:5d:e9:e8:7f:8e:4b:d7:82:dd:7d:b7:2e:27:
d5:cc:7d:76:c8:69:98:60:b5:31:14:c4:24:e9:15:11:be:9f:
c2:73:9c:81:8a:17:f5:f5:4a:f4:20:eb:cc:20:f3:76:ed:4e:
65:ce:bc:30:18:dd:c9:a0:f3:60:73:6b:f7:7e:95:61:43:e4:
4d:8f:2d:b2:a9:b3:17:03:b1:ea:9e:03:6e:83:29:eb:7e:8a:
cf:c4:d7:66:02:af:86:3b:42:4e:42:85:fa:19:d3:65:2e:0f:
4c:a6:ce:dc:bd:3d:f9:5c:44:91:4b:c4:8e:2b:01:ba:f5:b2:
dd:e1:28:eb:0f:b0:70:e3:e2:0b:5e:ac:d0:a4:35:71:0a:2e:
3f:61:27:20:37:24:ea:47:57:e9:b7:79:60:29:c5:33:72:45:
0c:e7:39:78:2f:0e:6e:38:6c:a7:83:09:51:72:0d:a2:e9:b1:
d5:88:61:86:5e:1f:08:cf:c9:63:8f:fc:91:ba:58:e6:e4:1b:
ec:ec:50:6d:b3:72:da:38:e2:78:42:fb:42:66:d3:43:91:c3:
9a:f9:b1:c6:d6:51:b9:b3:47:ce:cb:8d:87:39:9c:2f:55:7f:
3c:9d:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 16:10:06 2024 by rpki-client on console-fra.rpki-client.org