Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
File: HmXt47aq50dcNUsem4TWp4MrB3s.mft (raw, json)
Hash identifier: vckoz9PvZpaY1E++a5cF2bQlY9xx4Cw/q1Nv6LLlr/Q=
Subject key identifier: E1:03:81:04:05:08:EF:EA:6C:2C:A4:6C:76:BE:94:38:CD:55:B5:53
Authority key identifier: 1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
Certificate issuer: /CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Certificate serial: 0193553F99A99AC664157BCE7055D5517799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
Manifest number: 1287
Signing time: Fri 22 Nov 2024 19:00:51 +0000
Manifest this update: Fri 22 Nov 2024 19:00:51 +0000
Manifest next update: Sat 23 Nov 2024 19:00:51 +0000
Files and hashes: 1: HmXt47aq50dcNUsem4TWp4MrB3s.crl (hash: Ne3M2KkUuCMKh8QJhLVTK55padRxgvMgeHO/AhfrVvU=)
2: jST4G8U5T2nuYRuh7a87izWqaHk.roa (hash: JGboW1aHV2Dgx/IXrSluk7A/dTvPu3DBgLskG8KPAjQ=)
3: ljV-KSzeT_fFae-RhEwCLRgiw3k.roa (hash: W5OCtWOpUFp49NNJfuL4QZvqxBS3H/UtxcdgREEuXNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:99:a9:9a:c6:64:15:7b:ce:70:55:d5:51:77:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e65ede3b6aae7475c354b1e9b84d6a7832b077b
Validity
Not Before: Nov 22 19:00:51 2024 GMT
Not After : Nov 23 19:00:51 2024 GMT
Subject: CN=e10381040508efea6c2ca46c76be9438cd55b553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:0e:21:35:36:4a:09:de:2c:c4:d9:a4:fd:
4d:f6:6c:92:b2:dd:b6:3a:69:2a:cf:e9:e5:7b:a8:
cf:98:bb:0a:31:4f:85:1d:b7:04:c0:47:9e:a8:97:
87:39:ad:b6:df:9d:04:c6:71:c8:a3:4a:33:b5:62:
26:9c:2b:bd:41:38:c9:a7:f1:e1:76:8b:f2:11:ed:
de:fd:5f:17:0d:ab:59:5c:7c:26:77:f1:61:48:06:
1e:50:02:d6:cd:66:56:ba:42:9f:ce:ca:ee:76:3a:
e8:35:10:ea:5f:11:44:cf:07:5e:54:e2:80:ec:f6:
91:cd:48:9f:4c:f0:8f:4a:16:60:82:58:9a:42:13:
ac:c0:81:d3:1a:e5:0d:3a:ae:a8:28:97:c3:8b:f5:
35:06:11:40:81:31:d1:30:50:8a:d4:23:15:56:10:
93:cf:af:01:3d:7a:48:64:34:62:af:53:58:f1:c0:
2a:fc:2b:f2:9f:c9:bb:3a:6d:1f:b6:95:41:f3:6e:
a4:19:0b:3b:a8:19:0c:97:95:f3:50:65:1b:05:89:
5d:0a:13:b1:8b:16:a6:c4:42:30:d2:72:cf:f1:7b:
fe:63:40:d3:1d:ea:34:9a:7f:72:15:b7:dd:52:36:
e1:7f:2c:45:a9:48:e0:fb:98:85:67:7b:a2:03:cd:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:03:81:04:05:08:EF:EA:6C:2C:A4:6C:76:BE:94:38:CD:55:B5:53
X509v3 Authority Key Identifier:
keyid:1E:65:ED:E3:B6:AA:E7:47:5C:35:4B:1E:9B:84:D6:A7:83:2B:07:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HmXt47aq50dcNUsem4TWp4MrB3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c991ef-84b4-496f-a856-5ce4d8dbd159/1/HmXt47aq50dcNUsem4TWp4MrB3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:42:89:c0:86:fb:05:f6:6e:4b:d8:39:18:01:66:3b:e6:2f:
13:1a:07:39:bf:a2:73:5f:d8:40:e8:d4:f3:16:bc:17:09:09:
b3:94:1e:36:14:27:27:9d:b1:8d:9f:e8:d7:0f:ca:01:88:ea:
5b:40:6f:96:b5:60:db:c9:7e:10:ef:09:bc:98:56:7d:a0:c5:
08:79:be:2c:d9:5a:52:9c:6f:d8:d5:96:44:26:6d:d0:90:89:
59:a2:5f:ce:c2:6f:f8:3d:8a:1d:22:bf:3a:61:91:89:0b:78:
ef:16:cb:ff:90:09:48:13:8a:6b:19:90:7d:85:2c:9a:b4:07:
8d:cd:4e:ce:e6:0c:95:26:9d:ba:d9:1d:52:8b:8e:96:85:8f:
36:03:49:0b:46:b7:8a:4f:55:76:53:be:9f:b5:0e:fe:a5:5c:
c4:ad:8d:9a:bb:ea:d7:49:47:88:1e:e7:3e:0b:83:73:db:17:
84:ba:af:d5:03:75:9f:de:34:29:46:64:1c:af:d1:9c:a7:34:
90:e3:11:ba:8e:72:7b:1f:20:77:33:1a:a0:77:7e:82:4a:f6:
6a:26:64:d6:4f:04:bd:01:ff:f2:85:b4:fe:80:ab:65:26:b0:
2c:ab:22:df:40:6b:a6:36:2e:ce:65:37:d4:64:8e:97:73:db:
ed:25:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:43 2024 by rpki-client on console-fra.rpki-client.org