Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
File: HCQvLpRcanLuKPjIDoDUiEM-N6M.mft (raw, json)
Hash identifier: MLFKO6v7dqMqcnDMPmRwl3Fcy2v/X6pZlSDDpXHei8g=
Subject key identifier: CA:64:AB:8E:DD:C4:30:CE:0B:7B:A7:A6:85:4D:4A:14:17:A5:51:FB
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 0193640F65AB5445EF14CA51FDCE6BF0CB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
Manifest number: 06BB
Signing time: Mon 25 Nov 2024 16:02:30 +0000
Manifest this update: Mon 25 Nov 2024 16:02:30 +0000
Manifest next update: Tue 26 Nov 2024 16:02:30 +0000
Files and hashes: 1: HCQvLpRcanLuKPjIDoDUiEM-N6M.crl (hash: 260ESG2cU6x/3SXMAa+EWlgH4YaDwzOX+cxXF9uKLV0=)
2: K-BOLRLXc3oanZNjqjbC-_eHxcA.roa (hash: lzDvAtQgJsi8f1NIK0t0NHYJNBa+Jio6zPqCt+rkgTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0f:65:ab:54:45:ef:14:ca:51:fd:ce:6b:f0:cb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Nov 25 16:02:30 2024 GMT
Not After : Nov 26 16:02:30 2024 GMT
Subject: CN=ca64ab8eddc430ce0b7ba7a6854d4a1417a551fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:bd:20:1f:9a:47:2f:ef:7f:39:e3:d2:59:
18:9f:19:b3:7a:3a:3b:33:5e:81:20:d5:38:17:a4:
09:a6:66:42:7b:87:f2:00:98:e3:3b:3a:d5:30:ed:
65:09:cd:b7:91:8f:63:8b:b0:65:7f:8f:24:1b:50:
76:7f:65:d7:7a:2e:92:7f:a6:80:77:69:18:4d:38:
53:80:34:4c:73:67:f1:2f:7e:17:ec:ba:96:dd:91:
e5:de:2e:df:e0:f3:79:27:27:e9:e3:cd:7b:39:51:
66:a7:bd:03:90:76:79:56:23:75:c2:38:53:fa:18:
98:44:f3:e7:4f:3d:3c:cd:6b:9d:57:1d:f5:34:8e:
84:86:e4:cd:bd:39:79:41:80:53:19:30:dc:24:30:
ec:9a:ba:61:90:9a:0c:89:b9:25:36:5b:9d:b6:0a:
d4:25:12:1c:df:61:08:5c:8f:82:bc:76:24:23:73:
b1:7e:3b:20:4a:18:9c:a3:08:d8:54:ed:70:68:44:
a3:03:f7:70:07:c0:27:79:a0:65:6c:12:88:58:5c:
01:0d:7a:b4:55:3d:d6:c8:84:c1:c8:c8:22:f1:fd:
5d:90:ba:36:46:48:42:55:cb:c3:58:13:35:7e:85:
17:a2:33:62:a9:b5:6e:d7:98:f0:f3:5b:85:e0:e0:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:64:AB:8E:DD:C4:30:CE:0B:7B:A7:A6:85:4D:4A:14:17:A5:51:FB
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0d:46:14:a2:57:d1:76:c9:d8:7d:9e:2d:cf:21:07:cc:1e:
78:41:de:5e:33:31:b3:3c:43:c2:60:fe:2c:95:b2:f6:62:33:
f7:53:fa:f3:06:1a:e4:75:12:fb:04:f4:57:3c:a8:66:a5:60:
eb:2b:1c:0f:52:eb:f4:7c:bf:a7:1d:3a:dd:56:25:86:65:d5:
55:1a:ac:e6:dc:8b:7f:d6:e3:ce:fe:b5:2f:8e:19:54:b4:92:
41:8d:25:38:c0:66:f3:98:02:cf:9e:86:88:2b:87:3a:8f:9a:
59:7c:47:d4:b4:53:11:18:e7:da:dd:9b:3b:c0:fa:8c:89:ab:
87:d5:83:d5:a6:5e:fe:5a:d1:ea:8b:99:c0:6f:84:8c:68:d3:
44:02:e6:d4:e4:10:a9:e0:3d:72:a3:0f:47:d6:6a:15:47:96:
e5:8d:c5:7a:b1:81:53:f9:76:cc:58:8e:51:4a:14:7d:f6:47:
0c:34:3c:82:88:ab:17:f2:da:1e:bb:0f:f6:34:3f:90:d1:74:
c6:43:58:04:1c:ee:5d:49:eb:2a:2e:3c:d8:97:e1:e2:04:96:
0e:9a:6b:14:ad:5d:4c:91:80:37:32:44:bb:64:25:32:c7:d6:
2d:41:59:f8:17:be:48:c0:a9:d6:57:76:79:db:31:bd:1d:bf:
f9:ce:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:50:43 2024 by rpki-client on console-ams.rpki-client.org