Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: mQkgwwlfbYzPM7L4wDe9YeepaMikThKjIDMdD+a1oEM=
Subject key identifier: 95:AC:B3:BB:84:07:7D:2D:AC:6C:36:79:18:C4:08:06:BA:95:A4:0E
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 01906371709275C4785DA1088F12EA4DA3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 10E6
Signing time: Sat 29 Jun 2024 10:01:37 +0000
Manifest this update: Sat 29 Jun 2024 10:01:37 +0000
Manifest next update: Sun 30 Jun 2024 10:01:37 +0000
Files and hashes: 1: Gb_s9Qy4mK-7_xR5Gmio0lHfIRE.roa (hash: ckcVB8QwDgSRCnnE7felGsFxmpSHNnaUdEK96ia9BMU=)
2: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: dNwBLthtLxX6HUuTeTtiUxHminmLpe1g7xbO+EJwdLY=)
3: S4vrF7I9DHNgUvtvqbNE6ECj228.roa (hash: EZ99gSIfgOm6ZjYODSZFL7JjM3CmsIg1jhHAiFF21k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:63:71:70:92:75:c4:78:5d:a1:08:8f:12:ea:4d:a3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Jun 29 10:01:37 2024 GMT
Not After : Jun 30 10:01:37 2024 GMT
Subject: CN=95acb3bb84077d2dac6c367918c40806ba95a40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:cf:0e:56:9e:1d:4e:0d:2c:ee:a1:01:d6:
42:72:cd:92:9d:0e:f6:5b:af:44:e7:2d:37:3e:75:
f1:d4:13:f4:be:bd:2b:4e:16:f6:9f:04:72:96:f8:
5e:b5:e9:d8:d7:c9:6c:96:0a:39:31:8f:75:63:f9:
f6:f9:68:01:84:5b:a6:98:72:c4:73:96:8f:a3:72:
c9:bd:fa:81:5c:ee:67:5f:98:04:4f:4b:eb:39:2d:
1a:3e:d1:d9:ba:09:ae:f9:86:df:7f:66:b5:1e:fe:
b9:99:da:25:71:67:8f:85:57:c6:2d:10:5f:db:26:
22:10:2d:59:79:b6:7c:c5:80:13:bb:b5:8e:e3:f5:
39:31:fe:ed:0d:ff:97:87:0a:42:1c:3d:91:c2:62:
13:75:8d:ea:75:88:dc:c1:62:5e:89:cd:01:63:39:
de:bc:87:ed:4c:fd:5b:23:56:51:f2:3b:f6:07:39:
84:a0:65:2f:78:af:ec:7c:91:96:43:ba:82:8b:b4:
0b:c4:5a:ad:65:fa:b8:9d:fc:ca:ed:12:a9:d6:cb:
e3:0a:d4:aa:f6:43:a2:16:70:7c:f2:98:b6:4c:43:
58:d0:5d:b7:20:02:20:19:fe:cd:ef:4a:0d:64:c0:
cc:35:09:8e:eb:45:cb:9a:df:d9:5e:93:2e:64:ea:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:B3:BB:84:07:7D:2D:AC:6C:36:79:18:C4:08:06:BA:95:A4:0E
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a7:9c:8d:5b:59:ba:28:2d:7c:da:96:9c:2c:c7:73:af:dc:
e5:25:5a:1a:8a:8e:96:38:d8:35:44:ba:25:87:5f:be:92:fe:
98:90:ed:e0:a5:29:1a:f3:5d:ea:c7:85:04:83:06:e1:d7:f8:
ae:cf:96:4e:53:f8:4b:8d:31:53:bc:a4:45:7d:e8:67:6f:95:
3c:13:85:34:b4:07:8d:a8:68:e9:3e:be:cb:32:30:2c:fc:7e:
a6:31:93:08:20:6f:02:1d:11:7e:8a:8a:b8:9a:35:74:4f:77:
6a:5d:c9:ef:86:66:0c:ef:2b:3b:4f:78:2d:ee:4e:de:9b:62:
8f:ee:d4:a9:28:9d:c2:7b:b5:cb:98:b3:eb:bd:1a:3d:63:56:
49:7e:5c:d5:ae:83:d4:36:32:1a:6e:6d:31:a2:25:08:9b:dc:
7d:a6:f5:2c:0b:7a:0b:a0:ff:a6:4d:6a:57:4b:90:9d:a1:3d:
5e:d5:70:c7:e4:70:ba:3c:35:a4:d1:50:9c:f2:29:d6:0a:b1:
b3:da:7f:24:ea:9c:62:42:e1:7b:5e:89:ca:5d:b4:14:1e:98:
9d:59:1d:c5:fd:5b:22:76:e2:e3:29:30:c1:9a:ef:9b:66:fd:
8a:ec:b3:8d:af:8a:64:e7:ec:32:ea:b4:69:dc:d0:7e:06:da:
89:ce:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 12:52:41 2024 by rpki-client on console-ams.rpki-client.org