Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: CLfs5OXEoj3+U0TuMhlkuop4PGMD8foYlvWiaDShBdE=
Subject key identifier: EA:9C:A3:4C:FD:C4:31:6A:86:7A:A3:6C:F9:6D:F9:44:FE:33:22:3F
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 01923926B478A3C8B2BC320A1B9AB26DD390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 126E
Signing time: Sat 28 Sep 2024 15:01:30 +0000
Manifest this update: Sat 28 Sep 2024 15:01:30 +0000
Manifest next update: Sun 29 Sep 2024 15:01:30 +0000
Files and hashes: 1: FpdRGfSV84du4JDAtcUzpDnIN7I.roa (hash: FvyiR1cwi/DYU8Kzq8lI6c/3BC59/h5ZmkitLyua3qE=)
2: OHFQl7sWTmgI11p1c9iQqzE-Rtk.roa (hash: ZSjlJkyQ5DnYxoHdU4FnO0kUykltLQkmUCddKN7+eac=)
3: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: 1FWyclklDAzZmKHOPfU6wjQwOEu0LRr/U0rTxR5JJbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:26:b4:78:a3:c8:b2:bc:32:0a:1b:9a:b2:6d:d3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Sep 28 15:01:30 2024 GMT
Not After : Sep 29 15:01:30 2024 GMT
Subject: CN=ea9ca34cfdc4316a867aa36cf96df944fe33223f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d2:06:81:32:c3:71:19:eb:a0:84:37:96:1f:
5e:ed:55:95:55:d5:34:7f:e2:b0:3c:7c:0e:af:33:
03:29:ac:dd:86:d4:a9:17:46:2c:c0:9e:97:40:65:
9a:cb:74:9d:c7:d8:78:83:e6:a1:df:08:77:9b:24:
e4:30:b1:8d:22:e5:3d:96:13:a8:d1:49:69:24:1b:
88:6c:af:11:c0:82:66:80:41:4e:a3:3f:42:a8:34:
5b:8d:38:ef:42:c1:1f:89:1e:50:2b:7c:d2:9e:d6:
7e:74:ec:23:35:bd:06:5d:af:b3:0b:e6:c1:bd:84:
a3:43:1a:be:04:9a:b0:9f:71:29:d4:07:3b:d6:00:
bf:9c:7e:dd:b6:38:01:ac:2f:97:c5:3c:9c:1e:b9:
a6:5c:00:c3:be:35:33:2c:ea:f8:9d:97:c9:f6:24:
5d:b5:75:27:59:dc:d9:64:8d:ae:12:da:f4:16:d1:
52:b7:ed:f4:a4:2b:39:10:af:2f:38:c2:e1:44:d3:
d9:08:25:45:67:38:1f:54:65:d7:be:3c:f8:71:ab:
ed:d0:94:97:2e:2b:5a:fe:8f:ac:90:97:69:21:73:
26:d7:b8:c1:59:97:17:b1:f8:0f:2a:9c:9e:a2:27:
39:df:bf:1f:9e:10:16:4d:81:ec:a7:eb:a0:2b:6f:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9C:A3:4C:FD:C4:31:6A:86:7A:A3:6C:F9:6D:F9:44:FE:33:22:3F
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:37:01:e0:3a:fb:c3:96:f2:fa:39:37:1a:1d:5f:04:4e:43:
d8:a9:95:13:17:2c:45:31:07:dd:44:e0:4d:bb:0c:b0:40:df:
48:88:30:6f:39:8a:4b:cd:f3:94:48:2f:2a:e7:7a:65:32:e0:
b0:5f:0a:ea:fc:f8:e7:a1:fd:f0:69:07:58:10:2a:e0:27:6d:
e6:89:8d:7f:a6:63:96:9c:d0:59:12:63:c1:a1:b8:6a:6e:0c:
f8:22:92:e3:6e:f7:65:3a:2d:8f:28:f7:1c:03:ec:5c:52:4f:
d6:f2:cf:44:03:50:e3:1e:13:8f:b7:d2:bd:c1:20:21:fc:09:
f7:ac:ba:9b:36:4d:56:a2:0b:60:b1:15:fe:7b:27:8f:e4:51:
f5:28:48:db:b5:69:67:06:a3:30:69:95:e1:d1:ba:f5:82:35:
55:42:46:a3:ca:ed:38:8c:3f:9c:14:5e:ea:6d:f1:22:da:dc:
ee:28:c3:f4:1d:20:5a:5a:38:a7:3d:6c:ca:15:3e:c0:a8:8a:
97:c1:fe:3f:84:2c:93:2b:e5:28:74:40:c8:fd:d7:3c:cd:6c:
49:32:ca:a6:97:c0:d9:a6:d2:4f:13:6e:56:ea:52:ae:06:31:
9b:04:4d:93:2f:d1:9d:60:a6:37:ed:3d:a7:fd:6f:55:76:69:
5c:4f:1a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:15:07 2024 by rpki-client on console-ams.rpki-client.org