Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: TjJRoa/orBQoECkjeQI8gPXv/QDTTxWfEf6B3sstTvE=
Subject key identifier: 8F:3F:34:DD:F3:10:09:97:80:08:31:E2:76:05:FA:6B:84:36:D4:85
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 019356F70B2F10B6831ECAA20B72EDE022E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 1302
Signing time: Sat 23 Nov 2024 03:00:51 +0000
Manifest this update: Sat 23 Nov 2024 03:00:51 +0000
Manifest next update: Sun 24 Nov 2024 03:00:51 +0000
Files and hashes: 1: FpdRGfSV84du4JDAtcUzpDnIN7I.roa (hash: FvyiR1cwi/DYU8Kzq8lI6c/3BC59/h5ZmkitLyua3qE=)
2: OHFQl7sWTmgI11p1c9iQqzE-Rtk.roa (hash: ZSjlJkyQ5DnYxoHdU4FnO0kUykltLQkmUCddKN7+eac=)
3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: SsF/4evwObQNhrVqtJ8XShspli83Oj/2phIdH0zUPd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:0b:2f:10:b6:83:1e:ca:a2:0b:72:ed:e0:22:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Nov 23 03:00:51 2024 GMT
Not After : Nov 24 03:00:51 2024 GMT
Subject: CN=8f3f34ddf3100997800831e27605fa6b8436d485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:99:32:1c:61:be:ff:40:4b:26:59:5f:55:
b0:de:bb:10:cf:b6:a9:a7:9c:54:32:8c:ca:c2:34:
18:68:4c:86:d5:58:e2:27:61:34:55:32:d7:9c:4f:
ce:26:7a:09:4f:64:c8:08:6c:75:15:7c:5c:97:61:
81:26:61:c0:cb:9b:9d:93:42:32:4c:71:ce:4d:78:
eb:fc:dd:88:b2:da:dc:79:eb:f9:75:44:e1:9a:e2:
0b:79:fb:59:36:82:e2:6e:f7:34:7a:d4:60:11:ab:
67:ba:26:6c:1a:f8:7d:1a:11:f5:5f:3c:d2:8a:2d:
72:15:40:64:65:21:d5:c2:bf:ba:cd:1a:95:64:a7:
f8:99:20:4d:00:36:29:6a:c4:b6:40:dc:59:85:4a:
01:0e:fb:e0:df:b2:ad:44:c6:7b:b7:c8:c4:25:51:
f0:dd:a6:51:44:71:4c:49:a9:86:88:72:11:00:04:
c8:d3:8c:35:58:00:ed:c3:4b:b4:9b:15:9c:5d:a9:
2a:fd:65:23:07:f0:60:0b:c4:4e:6e:65:f3:7f:75:
3a:a3:47:22:38:5a:8f:c9:7e:3b:4f:51:5d:1f:65:
09:2e:ab:eb:64:58:db:dd:8a:b0:8f:7d:00:6b:63:
3f:df:a0:db:de:50:33:7c:64:e2:f9:65:05:52:2c:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3F:34:DD:F3:10:09:97:80:08:31:E2:76:05:FA:6B:84:36:D4:85
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e4:b1:80:13:7b:31:d5:b3:8b:f9:2d:3b:02:5d:f4:86:62:
93:cb:fd:70:0d:fc:1c:03:52:b2:d2:ca:1c:a3:cc:9a:18:f9:
2b:21:e7:bb:fc:46:31:c5:a8:2a:a7:42:3b:a8:5b:37:3b:5e:
5d:ba:26:5f:51:44:82:50:0a:d1:eb:ad:cf:67:9c:34:d2:6c:
9f:8e:42:bc:f9:5a:4b:6a:77:66:16:bd:de:73:d3:c0:48:8f:
39:79:09:54:63:14:71:89:14:95:5f:92:8d:df:ef:a8:14:cd:
0e:0d:70:f3:ff:ea:fa:b6:7f:0e:91:ba:65:1d:58:c2:12:b8:
39:b6:eb:78:b7:fa:1c:ec:96:5c:8a:66:7c:69:d6:9b:f8:7b:
4c:64:60:84:68:2c:7a:ae:ee:fe:31:65:ca:3b:6a:2f:2e:20:
2a:ac:b9:65:73:e2:85:3f:95:76:fe:2e:d0:06:68:19:84:54:
a0:eb:b4:7a:fd:97:8e:80:d5:a8:79:c3:67:ea:e6:81:01:b8:
0c:ff:ac:7c:cd:69:53:16:82:ad:2c:9a:3e:7f:8a:db:ae:d4:
64:5f:e7:a1:a9:c6:be:68:2c:ff:58:0c:2e:4b:09:08:74:75:
cb:42:ed:36:82:37:36:35:34:eb:a2:2f:8c:3a:fa:38:7d:48:
f0:96:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:56 2024 by rpki-client on console-ams.rpki-client.org