Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: 3M/lvlg9AQcQKV4BKgGkz18T+jBdSsWjh6vW0SoSn5Q=
Subject key identifier: 6D:3F:ED:98:86:30:DA:5D:0F:B4:30:4F:F7:4E:BC:15:F5:D7:A5:7F
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 01902983A372D3DE964935A1D9FC3E4583C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 11CD
Signing time: Tue 18 Jun 2024 04:03:31 +0000
Manifest this update: Tue 18 Jun 2024 04:03:31 +0000
Manifest next update: Wed 19 Jun 2024 04:03:31 +0000
Files and hashes: 1: XzLrchhC5D2vVJP3YAIaxOjvAJw.roa (hash: ZueqqSrkLOat2+SoDPmzQ/x+ylW1XC+IkGLKHtCwFV8=)
2: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: +D1WEmNErUJdtT69AqbAum3759axh4+4KGQmLfgw+z0=)
3: kBqLhuQHXJVP4kkMrf6PkJBAhiA.roa (hash: IVamx3Qk21Y5jrmwbuOFqSYDjLvc/tLLYlvXVgT1SmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 04:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:29:83:a3:72:d3:de:96:49:35:a1:d9:fc:3e:45:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Jun 18 04:03:31 2024 GMT
Not After : Jun 19 04:03:31 2024 GMT
Subject: CN=6d3fed988630da5d0fb4304ff74ebc15f5d7a57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:cb:08:96:08:2a:0a:0a:f4:7a:6e:59:3b:
6b:38:af:88:17:93:14:5b:54:dd:f1:2d:4c:15:e7:
8d:82:8a:92:6a:74:48:c6:48:03:f7:5f:5b:74:26:
63:62:91:e5:17:ec:16:e5:ad:9f:b0:1d:ef:e2:d4:
aa:5b:57:33:8c:f0:65:84:ff:5d:4a:46:78:67:63:
e3:d5:54:32:e6:f0:59:e6:ba:23:8d:43:98:d6:32:
88:5b:08:fb:7b:05:47:d1:74:9f:02:1c:4a:a0:e2:
6b:b2:b0:ed:98:c7:56:11:d8:da:94:4e:3d:92:5b:
a5:e3:fa:0f:eb:d3:be:83:9e:89:f4:0c:5f:5a:4e:
f5:81:9c:72:91:41:27:df:b3:45:50:8d:fb:f8:c0:
f0:2a:67:07:e4:81:23:a4:c3:95:93:35:0f:83:68:
81:91:0d:26:d7:0a:b6:41:93:7b:2e:1e:db:dc:12:
46:de:07:84:b7:5f:45:f3:be:06:a0:05:79:06:e4:
b9:e5:63:62:98:38:9d:43:64:eb:e2:4c:17:46:66:
11:47:a7:de:05:bc:3c:2c:5e:9e:d6:be:34:60:a8:
c8:d7:7f:5a:b1:d1:ae:58:14:a5:86:fb:0a:d9:a7:
37:b4:48:42:cb:97:76:7b:1e:e2:eb:06:fc:8f:fd:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3F:ED:98:86:30:DA:5D:0F:B4:30:4F:F7:4E:BC:15:F5:D7:A5:7F
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1e:d3:4e:f0:9d:05:19:08:db:cb:3d:f3:3c:aa:a2:60:57:
ef:c9:c6:1b:f0:ef:37:cc:e2:34:5a:0f:cd:1d:ba:f2:5c:80:
df:5b:05:dc:43:b3:12:ea:af:0b:21:a2:33:b4:a3:e2:c5:42:
50:ed:11:53:47:37:0d:a8:ec:0f:37:55:22:78:d8:e6:5c:55:
8a:83:30:6d:62:ec:b2:eb:3d:19:bc:43:f8:a5:85:ff:b9:49:
93:9b:66:fd:9e:83:76:1b:ca:1b:45:2b:a9:64:c8:7c:e1:15:
ca:ff:01:24:f3:18:c1:28:e7:fc:90:d7:01:33:1b:57:58:84:
b8:23:ec:9e:dd:4d:fa:7f:02:50:ef:2f:a9:b8:7d:63:03:e0:
54:8b:49:b4:f3:c5:c5:c6:33:1c:4b:1d:56:5f:e8:89:c0:8b:
18:43:61:61:93:b5:2e:24:7f:1c:b6:90:9e:b1:e3:0f:0f:53:
44:f1:7e:e6:37:b0:96:58:9d:2b:7b:9e:31:38:0f:23:54:88:
46:45:9f:19:2e:7a:c6:0a:d6:00:ea:d8:7b:d6:39:49:63:da:
29:9e:2a:92:60:be:9e:d2:8c:e4:67:82:bd:29:5e:41:e7:12:
89:ef:df:43:9d:6d:98:29:d9:6c:16:0f:3e:08:9e:a4:30:f8:
45:88:f3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 11:08:33 2024 by rpki-client on console-ams.rpki-client.org