Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: mfNoX6lH78UYFJ+5FkkxfoiIRNAi9t3B5SELP0eDiII=
Subject key identifier: B5:BB:C6:52:AF:60:C5:9D:7C:90:8D:CC:F1:09:00:1F:F0:E3:6B:64
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 01936B22BFE6B6FF95B20737B33EB7A1CEB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 134A
Signing time: Wed 27 Nov 2024 01:00:59 +0000
Manifest this update: Wed 27 Nov 2024 01:00:59 +0000
Manifest next update: Thu 28 Nov 2024 01:00:59 +0000
Files and hashes: 1: cZ1U3KVI3FmDVNwyu0VE8FUehmQ.roa (hash: eKBBNnsalQEcZYUUZLrsVLG/GIDZJ0S0NSFkhiLb3cI=)
2: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: e+gY4PblSNO33Igusx9+4yXyId8AWrWFjC80em4IW+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:bf:e6:b6:ff:95:b2:07:37:b3:3e:b7:a1:ce:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: Nov 27 01:00:59 2024 GMT
Not After : Nov 28 01:00:59 2024 GMT
Subject: CN=b5bbc652af60c59d7c908dccf109001ff0e36b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:7d:e7:0f:cb:40:b6:b0:d8:ab:ab:65:9d:
53:36:10:89:df:66:82:d3:3c:92:28:4a:28:cc:53:
6c:c0:19:cd:28:d5:3e:0a:08:4c:6c:53:93:20:6b:
4d:d3:5b:ca:f8:79:33:1e:98:9e:4b:d9:c4:78:83:
51:23:d9:6e:a8:78:44:d2:4d:6f:ea:45:d1:7d:f4:
f1:3e:f7:10:67:58:02:3f:b7:83:73:54:cb:fc:e5:
64:a3:e3:14:1a:4f:5d:76:46:38:ba:51:d1:53:6c:
e9:93:46:ec:c9:a9:11:60:34:44:5f:9c:ba:c9:51:
61:c2:77:f8:cf:2b:e6:6e:57:90:63:dc:47:03:b0:
b2:31:65:a4:f9:f6:62:98:18:dd:d0:20:c0:a6:4e:
02:da:eb:e2:14:91:2c:c0:e2:73:2f:a6:ac:8b:3f:
48:39:69:f8:07:ce:98:27:f8:f7:43:24:73:e9:7b:
b0:cf:b3:42:53:13:05:b3:17:f5:0b:30:ec:bf:a1:
2b:a8:12:ed:15:19:78:50:ba:bc:10:72:f3:42:1c:
08:65:9f:73:3a:24:f8:3c:f4:3a:ae:e5:b4:49:65:
aa:58:16:fe:ae:41:a4:97:5c:c6:04:a3:4f:a5:4a:
8d:bb:47:73:1e:3b:da:a6:c4:24:4a:87:a1:45:88:
2e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BB:C6:52:AF:60:C5:9D:7C:90:8D:CC:F1:09:00:1F:F0:E3:6B:64
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c2:46:8b:62:58:6a:b3:8c:c0:74:0a:59:d7:d3:bf:11:bd:
0d:fe:55:54:6f:34:ae:e4:51:e8:7f:d7:7d:55:ba:67:85:68:
1c:03:16:de:41:39:e1:04:db:d9:0d:a2:58:c1:dd:96:db:ef:
88:76:43:68:67:49:ed:0d:69:47:a0:b5:41:e2:14:b9:c6:bf:
40:1c:27:5b:a6:e6:80:4b:ce:7f:d5:dd:c6:ac:98:a6:e2:c6:
4d:c5:45:da:e6:72:08:43:d4:ea:ce:f6:88:3c:e9:36:2d:41:
4d:df:ff:b8:2e:20:f2:b8:69:04:ae:15:cd:98:41:52:20:f0:
f9:dc:64:d9:7c:32:05:00:c3:f4:2d:76:bb:dc:a8:9d:b4:28:
45:6a:ea:d3:a6:33:9d:ac:d6:dd:f0:f8:42:07:6c:48:3d:5c:
14:31:e3:c9:0f:22:20:f3:ed:21:1d:d8:85:e5:f4:f0:c9:3a:
e0:56:77:5a:6b:b0:ab:ba:cd:68:a6:26:cc:5a:42:8e:ba:67:
7f:1b:53:09:1d:e6:c9:85:fd:b7:f5:a2:b9:89:c0:cf:ea:7a:
c1:e9:d8:23:c3:13:83:0a:1e:86:3e:58:62:64:ea:64:bd:14:
7c:6b:a5:b7:d8:6e:95:1e:81:7c:90:60:62:7c:4b:0a:a5:98:
db:d7:6e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:31:15 2024 by rpki-client on console-ams.rpki-client.org