Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
File: hTq7t9e8xKXFbpEu76wbC7BFUCE.mft (raw, json)
Hash identifier: N0jU9rUz/vXgBqRLYM288QWpaVs2SnlIgDzxEgaRa40=
Subject key identifier: E5:FC:68:33:02:8E:E3:3E:8C:D6:20:AB:C8:42:86:2B:0F:6C:8A:01
Authority key identifier: 85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21
Certificate issuer: /CN=853abbb7d7bcc4a5c56e912eefac1b0bb0455021
Certificate serial: 0190459D5EFF9D43D80E3B39C569FBC1E1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
Manifest number: 0126
Signing time: Sun 23 Jun 2024 15:00:59 +0000
Manifest this update: Sun 23 Jun 2024 15:00:59 +0000
Manifest next update: Mon 24 Jun 2024 15:00:59 +0000
Files and hashes: 1: hTq7t9e8xKXFbpEu76wbC7BFUCE.crl (hash: IMJN37rwYEc3PKVpdJPc5KNbmYAqnbkShRYD/Biz5rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:9d:5e:ff:9d:43:d8:0e:3b:39:c5:69:fb:c1:e1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853abbb7d7bcc4a5c56e912eefac1b0bb0455021
Validity
Not Before: Jun 23 15:00:59 2024 GMT
Not After : Jun 24 15:00:59 2024 GMT
Subject: CN=e5fc6833028ee33e8cd620abc842862b0f6c8a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:86:e2:58:b8:33:94:2d:63:ca:2f:ec:b9:88:
92:77:95:a5:75:8b:04:ef:55:ab:5c:2b:4c:fd:2d:
b2:e1:70:4c:32:58:fe:f3:10:4d:c9:a7:1d:80:35:
87:fe:96:fc:38:69:36:8e:e6:33:60:16:36:2a:54:
8a:39:35:5e:f7:2f:df:25:f3:11:d0:a8:e4:d8:37:
26:a7:2a:06:5d:d3:08:61:48:ff:62:cb:d7:51:46:
22:ac:e6:71:1b:1e:ce:55:d9:3e:ad:6e:f6:89:02:
d1:83:1c:44:c4:34:27:27:5e:40:79:3b:60:72:83:
9e:82:ab:37:2d:67:e7:13:0a:6e:59:f4:e8:b1:d7:
93:6c:09:e5:b0:a8:fd:86:11:5e:8d:6a:12:35:9e:
9b:f0:57:79:b6:29:ef:16:84:f1:7f:92:d8:e7:1b:
23:72:62:a0:c5:45:69:fb:98:22:d6:78:4c:77:da:
c8:51:4a:fb:e9:be:46:65:21:62:df:ff:ca:04:a3:
53:d9:6c:cb:8e:3c:3b:d1:a5:27:72:60:f2:d4:3e:
b4:2a:56:9a:6d:e6:0d:db:1c:08:d7:b0:2e:f6:ad:
c2:b2:f0:34:cd:73:f4:28:65:98:1d:4f:a5:10:ed:
47:c5:98:ff:73:5c:3f:a1:6c:f6:7d:75:45:1c:99:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FC:68:33:02:8E:E3:3E:8C:D6:20:AB:C8:42:86:2B:0F:6C:8A:01
X509v3 Authority Key Identifier:
keyid:85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:12:91:ae:89:19:97:d9:a5:f8:84:b6:2e:93:7e:e3:68:53:
4b:cf:9d:d9:86:28:d6:53:f4:47:f0:27:26:00:22:db:df:1f:
1a:69:81:55:f4:4d:ee:ba:16:51:2a:7d:27:21:b1:58:6f:41:
f0:e7:eb:10:fd:27:80:99:4a:7e:5c:b5:ab:70:42:41:c8:44:
54:a2:8d:cc:3c:22:70:57:1b:3f:c8:1f:c1:49:61:2f:b1:97:
37:18:1e:91:9a:9d:9d:c6:02:a5:ca:9b:ae:1d:aa:99:28:7b:
8c:05:23:e2:76:14:86:13:9b:8e:2e:31:8f:98:f8:89:01:0e:
fc:02:22:47:1b:21:3c:5a:19:e9:41:e5:98:0d:8f:d6:22:4c:
98:a2:0b:c3:60:45:14:7e:7b:77:66:00:a2:ee:d3:de:3e:c2:
15:54:ba:4e:71:7b:75:f0:67:d4:5b:e1:bc:68:5e:23:03:57:
70:55:96:b4:e3:3f:f6:3c:35:f1:c3:30:44:bd:ab:3b:79:e9:
e5:3f:eb:82:ed:3c:a2:c7:9d:8a:63:a7:7c:ee:cd:8d:13:96:
76:19:05:fe:a0:16:31:ce:f0:7f:90:37:77:b5:95:f8:71:66:
cc:89:fa:c3:3b:6c:11:f0:75:a9:aa:1e:05:e4:4d:74:75:3e:
ed:24:a2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:04:21 2024 by rpki-client on console-fra.rpki-client.org