Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
File: HQ2zVo5FXz2isidKnVJcrAkxx9U.mft (raw, json)
Hash identifier: AntOyXMOU3xm2DaCM8J+KMlSmv3vdQJ/1SNZ0Uqw4RM=
Subject key identifier: AB:35:8F:0E:E5:73:7F:68:86:86:59:A0:4C:7C:1A:1B:92:8A:CF:7C
Authority key identifier: 1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
Certificate issuer: /CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Certificate serial: 0191F9A2C8B9F85E347683D18DF65BB7FFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
Manifest number: F5
Signing time: Mon 16 Sep 2024 07:01:20 +0000
Manifest this update: Mon 16 Sep 2024 07:01:20 +0000
Manifest next update: Tue 17 Sep 2024 07:01:20 +0000
Files and hashes: 1: 6zB-9-w2yIQVWm5-Xu5wStCfkGw.roa (hash: bOGwMCEeTN2qYvkmOVTxhr7pyGbI0CNLswoQSfaCR64=)
2: HQ2zVo5FXz2isidKnVJcrAkxx9U.crl (hash: qbz/s2OKPpLf5YpgOxXhLK0YNRiuwuLC3xzwaCICoxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:a2:c8:b9:f8:5e:34:76:83:d1:8d:f6:5b:b7:ff:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0db3568e455f3da2b2274a9d525cac0931c7d5
Validity
Not Before: Sep 16 07:01:20 2024 GMT
Not After : Sep 17 07:01:20 2024 GMT
Subject: CN=ab358f0ee5737f68868659a04c7c1a1b928acf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:a0:21:58:93:71:ad:f0:eb:01:01:90:5e:
18:a1:c6:f4:e4:70:67:00:fd:b5:ff:42:f7:6e:9a:
8c:a2:52:64:06:16:fc:31:bd:05:e1:33:95:d4:1a:
94:9d:30:65:fa:c5:f2:1f:50:a6:3d:73:00:e8:7c:
17:1c:30:02:72:ff:29:2b:6b:28:ff:5f:dd:a1:d6:
d8:b8:1c:59:a8:2f:17:b7:ed:e3:c2:5e:30:e7:6e:
75:23:15:70:33:4c:3f:b3:01:23:39:e0:08:12:1a:
83:33:2a:1b:db:76:fe:f0:a2:a5:34:19:48:19:2a:
7a:8e:77:cb:18:99:26:5a:48:93:fa:24:4c:65:13:
96:00:ca:e3:f8:4a:62:94:ac:a3:1e:b3:d6:b1:91:
9d:65:9a:b1:1b:d8:ee:7d:63:b4:96:98:25:cd:e4:
0a:bf:56:00:d8:1f:13:77:72:e4:ba:24:93:82:85:
78:c0:c2:1a:ee:3b:3f:ae:6b:83:ab:dd:7a:1f:f8:
b1:3c:1d:0a:5e:00:99:f6:9d:bd:3b:9e:64:5c:71:
6d:bc:2a:90:e6:29:ae:fa:90:8c:66:38:d3:4e:ff:
f2:e4:13:b6:d9:c0:53:a4:b1:40:eb:cc:45:61:10:
2d:74:44:20:52:d8:e5:3d:65:23:29:27:44:6b:d9:
b6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:35:8F:0E:E5:73:7F:68:86:86:59:A0:4C:7C:1A:1B:92:8A:CF:7C
X509v3 Authority Key Identifier:
keyid:1D:0D:B3:56:8E:45:5F:3D:A2:B2:27:4A:9D:52:5C:AC:09:31:C7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQ2zVo5FXz2isidKnVJcrAkxx9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bcf09a-7c8e-4e20-8450-e088aa0aa8dd/1/HQ2zVo5FXz2isidKnVJcrAkxx9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b8:21:4a:a2:7a:a9:bd:b0:c9:bc:41:50:14:91:27:4e:de:
5a:98:33:ad:d4:61:7f:d5:ba:d7:f7:88:f3:17:bf:90:57:e5:
73:19:f3:8d:2c:0b:c7:38:40:3b:34:fd:1f:9b:65:16:ec:73:
87:98:0d:6e:00:4c:fc:33:ed:e7:43:65:0f:c9:be:5b:2a:8e:
e2:e3:45:a4:9d:43:64:10:e8:2e:1c:9e:4f:2e:79:9b:4a:2a:
54:6d:24:99:b9:79:c0:87:fa:05:48:bc:e6:60:33:ef:db:84:
d9:f6:33:09:18:a8:1a:7a:a0:a4:eb:66:a0:3f:4f:39:8d:0d:
33:fe:52:f9:73:fc:d4:46:4c:68:6a:ca:bb:09:0a:75:36:09:
e5:6f:12:9d:f6:6a:94:fc:b1:9a:09:bb:22:f8:db:be:3d:51:
40:ca:b7:07:fe:7d:00:04:54:2e:5f:56:36:fc:3b:92:d1:64:
66:a6:ea:0b:38:52:a2:0b:f4:19:37:b8:1f:d8:be:4f:a7:92:
15:a0:54:44:2f:be:a9:bd:4a:34:f0:1b:8e:fa:7b:a1:65:a2:
2f:6a:24:d3:b2:0a:21:0f:26:af:49:d4:33:d3:b7:cf:99:ed:
c1:f6:4d:87:0e:ac:4f:f8:04:9d:31:7c:20:d7:be:4c:59:dd:
7e:ee:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:13:07 2024 by rpki-client on console-fra.rpki-client.org