Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: qISK9pOQh2ba3vX+ZjuDupAZjJMPvQgQktNF7xUdElU=
Subject key identifier: 72:CE:15:C3:CC:E7:F9:E8:E6:52:15:F7:85:6E:B1:50:7B:74:CB:80
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 0190332AA696247B95674C4F7188D44A3C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 0E64
Signing time: Thu 20 Jun 2024 01:02:31 +0000
Manifest this update: Thu 20 Jun 2024 01:02:31 +0000
Manifest next update: Fri 21 Jun 2024 01:02:31 +0000
Files and hashes: 1: HeK6Y2ZRQgNHa7fK_jZ1v_513Ng.roa (hash: tmToq1qvSDOAfGtjx86YOgWhKMzR74lZfHzbSrtDN4A=)
2: URh8uhF1Ii9Id0pKsBg16gFGU-o.roa (hash: bRGvqU0laqSMsudMQbALWO5oqzFGvQZS9et9RS0eO9Q=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: gOo9SAwGSK+H0H61ut/PuoKOMvn7SHJ/Yna/BBvZyf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:33:2a:a6:96:24:7b:95:67:4c:4f:71:88:d4:4a:3c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Jun 20 01:02:31 2024 GMT
Not After : Jun 21 01:02:31 2024 GMT
Subject: CN=72ce15c3cce7f9e8e65215f7856eb1507b74cb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:1c:06:55:c3:10:92:c8:0c:6f:a0:9d:13:
43:bd:07:a6:32:ea:62:89:82:89:6c:9a:84:ea:a7:
0f:ec:e4:48:df:d9:1a:99:23:13:06:33:1d:01:67:
2b:29:24:c4:84:05:b3:3d:d2:02:e0:66:ba:96:36:
c0:3b:8e:aa:4e:3a:61:0e:f6:16:4a:b9:de:7d:89:
5f:e1:55:d0:95:4b:5f:ac:0d:49:2b:15:75:b1:96:
ef:ea:36:25:c3:c7:7f:12:f2:1b:86:c3:f7:95:b0:
46:c8:37:77:27:4b:35:ea:29:f3:bb:27:f6:7f:24:
37:50:7d:f5:9c:cc:05:90:ca:2a:a1:58:16:c2:63:
3b:60:05:49:c6:f9:b7:00:06:17:08:d7:1c:5c:3c:
47:e4:9f:a8:00:ad:34:53:25:5b:36:c8:83:1e:ae:
03:fa:52:c5:c2:5d:5d:36:c2:bd:2d:f8:46:06:51:
7a:2e:20:10:af:d0:eb:62:4f:4d:fc:5c:8c:8e:ad:
08:6d:05:a0:65:c9:14:03:b7:11:44:d4:f5:3e:76:
5f:cd:84:8b:53:45:76:a6:06:76:71:eb:1b:65:e2:
61:a2:da:75:29:4d:0f:20:0f:b9:14:75:8d:9a:1f:
de:12:83:3c:3f:5f:d0:52:22:46:33:ec:87:85:08:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CE:15:C3:CC:E7:F9:E8:E6:52:15:F7:85:6E:B1:50:7B:74:CB:80
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cb:4a:82:3c:02:fc:92:12:b1:02:cb:5e:87:ef:f7:5c:6d:
e8:99:65:2f:3c:59:69:61:63:b6:c8:d5:d4:8e:14:f7:ff:5c:
2b:87:3e:12:7b:5c:17:5c:62:ca:c0:ca:cf:62:5e:6d:82:56:
8f:3b:6b:aa:62:f0:6a:f4:3d:cd:10:34:00:e9:41:ac:7a:31:
bd:ab:d1:0c:2f:53:80:93:fd:ce:17:27:8e:18:cb:bf:3d:8a:
35:df:32:21:1d:26:7b:67:77:7f:b4:fa:29:db:fe:cd:14:a7:
97:b3:f5:d1:7e:42:cd:86:36:b1:34:1a:e1:1a:bf:ea:b6:2c:
02:50:2e:e6:5f:74:38:03:90:73:a3:da:ce:42:1c:da:af:05:
f0:2f:f9:84:fd:88:8a:7c:2d:ec:a1:67:8f:62:60:01:69:d5:
37:c4:4b:74:3d:08:62:d2:29:30:5f:03:eb:b2:4f:8e:a6:aa:
99:40:58:7a:a7:ca:1c:49:fd:b5:78:68:a5:1a:25:b1:b5:1a:
0a:69:c0:02:37:1d:f8:64:9f:6d:75:cc:b7:77:ce:cf:1e:af:
ba:9a:19:1c:c6:ab:29:26:76:cd:ff:e3:d2:25:d7:b0:39:c7:
3f:fe:cf:bc:5b:fd:be:5b:f3:63:b9:58:a6:7e:a9:9f:17:0f:
a2:5e:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:07:19 2024 by rpki-client on console-fra.rpki-client.org