Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: hA8Pda6w8qVgXVPkgpVJd0NBb4MczmXTG5oyUdrIuF4=
Subject key identifier: 25:2E:FA:E1:41:2C:0E:38:CA:7A:D0:12:EE:AA:6C:79:EC:4A:7F:5F
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 01901DEC733C8B8F6BD52FC84048F9D4E26D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0167
Signing time: Sat 15 Jun 2024 22:02:33 +0000
Manifest this update: Sat 15 Jun 2024 22:02:33 +0000
Manifest next update: Sun 16 Jun 2024 22:02:33 +0000
Files and hashes: 1: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: za9iQmuaPeegrcUhAGPAUNHVmLGZf6Zrw4spa/PvDYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:73:3c:8b:8f:6b:d5:2f:c8:40:48:f9:d4:e2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Jun 15 22:02:33 2024 GMT
Not After : Jun 16 22:02:33 2024 GMT
Subject: CN=252efae1412c0e38ca7ad012eeaa6c79ec4a7f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:f8:cc:26:28:ef:3d:51:0f:ab:5c:6a:56:
06:34:ce:0b:5a:aa:d1:41:a1:a0:89:4b:5a:25:ca:
e0:73:8e:10:9c:05:c3:06:5b:46:4b:9f:a9:b9:36:
04:a4:7d:e5:3d:36:1d:fc:d5:e2:bd:cc:5d:18:85:
8c:2f:4b:26:8e:30:ca:3b:4f:be:99:25:f9:ac:82:
af:a6:bf:61:78:79:2d:0e:43:ca:8e:cc:3a:34:eb:
9a:a6:a2:3d:4e:99:1b:9f:72:d6:91:bb:ad:e3:05:
c4:35:c0:29:f5:e0:df:70:5e:72:62:96:5e:ce:8a:
1e:4a:47:5a:75:ee:72:9b:b6:5c:49:c7:68:b6:69:
8a:40:43:bf:7f:2f:da:aa:4b:71:4c:a7:dd:e2:5d:
36:e8:f2:7a:cf:5d:c5:a3:f3:1e:a3:7a:b1:22:7e:
40:b9:40:e1:7e:9b:d1:17:51:68:65:83:b0:d5:85:
bb:bf:7c:ac:a8:08:7a:e2:07:54:66:d6:55:6a:74:
e2:fa:5d:aa:db:83:c7:9c:73:62:12:a7:3f:23:83:
5a:a3:98:1e:e8:46:1a:32:9b:4f:e1:5d:b0:a8:c1:
2c:8f:b0:b1:a5:cc:63:75:d1:ae:bd:27:50:89:87:
25:01:3d:cb:73:98:e5:0d:16:e8:26:d6:c4:3b:a1:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:FA:E1:41:2C:0E:38:CA:7A:D0:12:EE:AA:6C:79:EC:4A:7F:5F
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3a:e9:c5:00:27:b0:00:a5:e1:f9:72:17:b1:e3:bf:47:e7:
36:de:a6:d3:19:5c:1e:ee:98:cf:3d:58:8c:b5:36:f4:48:87:
cf:c4:3e:dd:38:78:e3:c5:51:9c:ed:56:62:29:5d:cd:dc:5d:
0f:81:58:89:c1:d8:56:9f:e5:db:df:9f:b1:c9:ef:20:58:25:
d7:54:9a:42:07:09:ae:48:ed:b1:0d:08:b8:a4:bc:52:07:5a:
94:77:a2:2a:31:14:c3:a4:63:9b:a8:fb:3e:da:92:e2:0e:16:
bd:bb:51:66:25:e4:5a:63:22:19:35:1e:9b:65:36:43:23:d2:
aa:19:9d:7b:56:8f:d6:c6:56:36:92:29:65:ff:7c:04:b0:e0:
64:b2:bc:9c:f9:3c:9e:05:12:81:81:ec:e2:70:c8:3a:0a:23:
eb:7e:ba:46:95:47:20:da:23:1b:98:c6:ad:16:59:80:d8:f2:
32:33:02:d2:59:e9:9c:58:99:dd:83:d5:ab:c5:f5:3e:bd:0a:
99:76:5b:a2:95:d7:fb:45:7d:bf:bc:65:b9:04:b8:71:54:7b:
1d:59:11:8d:1d:f5:6a:3b:4b:a1:03:03:f6:91:c7:1a:6f:d4:
e8:09:f6:2a:3a:87:ef:b8:91:a9:32:e5:bd:12:47:30:83:8a:
b7:55:1f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:10:21 2024 by rpki-client on console-ams.rpki-client.org