Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
File: HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft (raw, json)
Hash identifier: vfgZqJKjJXBgbcebT1PYSQ8pRMwqkw4sM6CnltUd5Zw=
Subject key identifier: 5D:96:84:25:E2:DB:6E:AE:81:D3:7C:F0:13:77:B4:68:DE:1B:B7:C2
Authority key identifier: 1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
Certificate issuer: /CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Certificate serial: 0193568A5A0601C815CEC09F1C72E4E344EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
Manifest number: 10B1
Signing time: Sat 23 Nov 2024 01:02:07 +0000
Manifest this update: Sat 23 Nov 2024 01:02:07 +0000
Manifest next update: Sun 24 Nov 2024 01:02:07 +0000
Files and hashes: 1: HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl (hash: 8R+qScZ/gRcfpEux9jZ6umC5gNs8S07zymczLX3U2Zs=)
2: U7YNHO07xInpCt_DXaRXHZH7Wsg.roa (hash: LrgRYxp2B44dbDK9hRzdU9gFuYVlnxGrZy1vhHg7VHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:5a:06:01:c8:15:ce:c0:9f:1c:72:e4:e3:44:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dcac99e7ca15d0c990420ee316d9aab84cc847f
Validity
Not Before: Nov 23 01:02:07 2024 GMT
Not After : Nov 24 01:02:07 2024 GMT
Subject: CN=5d968425e2db6eae81d37cf01377b468de1bb7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:19:ca:f8:82:ff:88:31:e0:35:97:38:11:1c:
d0:f2:32:95:4c:8b:0d:89:41:d8:2b:6a:d0:c4:c5:
90:60:13:44:64:d4:24:69:45:71:41:96:7c:a6:e4:
4c:59:d4:ec:52:c9:f9:b8:70:eb:5c:ef:5d:b0:9c:
c2:54:66:97:f2:35:0b:58:55:36:d7:b6:99:03:18:
7a:92:44:1f:83:36:4f:3c:a5:1b:da:2e:aa:4b:58:
66:2a:f4:3c:74:bf:8b:ba:6b:f3:9c:70:d6:40:21:
6c:d8:e8:95:34:e3:42:be:c2:3e:f5:ce:90:04:a0:
9c:db:ad:00:44:16:af:1a:8f:ce:88:a9:7b:d3:74:
92:94:6e:01:76:f1:be:ab:67:90:24:bb:34:b2:88:
52:d9:08:d1:a2:94:66:20:80:ef:54:99:a5:31:8c:
92:57:21:41:0d:9e:41:2d:cd:24:b9:e0:1f:1e:7e:
5b:d4:eb:ad:d1:f7:21:55:62:a2:c3:d3:d1:9e:40:
0b:db:76:d7:07:f4:e8:c8:03:d7:53:51:97:cf:d7:
90:ce:bf:a3:c4:a5:86:37:ea:6e:1e:e0:0f:07:90:
98:5a:1f:46:f4:c5:15:65:a8:13:6f:36:6c:19:02:
94:5d:f2:56:31:c4:24:6f:06:31:9d:75:e4:67:ff:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:96:84:25:E2:DB:6E:AE:81:D3:7C:F0:13:77:B4:68:DE:1B:B7:C2
X509v3 Authority Key Identifier:
keyid:1D:CA:C9:9E:7C:A1:5D:0C:99:04:20:EE:31:6D:9A:AB:84:CC:84:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcrJnnyhXQyZBCDuMW2aq4TMhH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9a5d4d-162a-4c09-a47a-92b5e25d247b/1/HcrJnnyhXQyZBCDuMW2aq4TMhH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5c:b2:92:45:4c:19:b3:d3:be:00:d6:5a:d8:cc:d7:6b:56:
a5:e0:e7:90:4f:aa:3c:0b:36:39:2b:0d:0e:c0:bf:a2:ab:59:
6a:a5:d3:9b:7c:2f:77:22:47:2c:a2:e0:e7:87:c8:69:c5:5a:
02:c3:c3:1b:f7:bf:4d:d9:e7:89:46:71:cf:9b:4f:e9:6c:26:
dc:58:86:dd:0a:94:b5:63:05:6a:66:cf:30:5e:26:e5:0d:03:
83:fb:c7:d2:55:76:a0:d9:a9:f5:71:71:30:42:79:b5:ae:b2:
d9:dd:f1:f9:5c:83:4d:95:60:da:c0:df:b4:41:5e:c7:92:50:
7c:5e:9e:63:df:41:a0:ee:90:de:84:60:28:9d:5e:3b:12:ff:
55:26:d4:f9:b9:9d:a3:ef:db:4f:b8:76:64:57:ce:e2:6b:01:
66:cd:a7:3b:b7:78:90:8b:82:f0:05:63:bc:46:ec:62:76:a7:
d0:ba:ce:0c:7f:33:60:23:56:29:53:b3:55:8d:39:04:ef:0c:
1f:7a:b6:c3:a2:07:6a:c1:a2:33:af:63:88:2f:cd:fc:24:55:
d8:e2:be:42:3a:46:92:da:00:64:1f:3d:ca:67:98:27:a2:e3:
77:11:97:c7:f2:70:69:b1:89:43:33:10:19:68:9c:39:98:ea:
a9:55:fc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:00 2024 by rpki-client on console-ams.rpki-client.org