Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json)
Hash identifier: 7pOyzSfzqWkx4vQxYXfpWsRHHHjICDeM63J42IEzv0g=
Subject key identifier: 0B:78:8D:78:17:00:7E:E0:6C:9A:80:14:A1:85:07:2C:B4:B5:C7:79
Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256
Certificate serial: 01935877B566B29541B58F460CEBBDA10C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
Manifest number: 126E
Signing time: Sat 23 Nov 2024 10:01:00 +0000
Manifest this update: Sat 23 Nov 2024 10:01:00 +0000
Manifest next update: Sun 24 Nov 2024 10:01:00 +0000
Files and hashes: 1: Gb_s9Qy4mK-7_xR5Gmio0lHfIRE.roa (hash: ckcVB8QwDgSRCnnE7felGsFxmpSHNnaUdEK96ia9BMU=)
2: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: 6vLXmwBNs0Pt32897EA0BxShZLBA7RFWe+1SrGlROww=)
3: S4vrF7I9DHNgUvtvqbNE6ECj228.roa (hash: EZ99gSIfgOm6ZjYODSZFL7JjM3CmsIg1jhHAiFF21k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:b5:66:b2:95:41:b5:8f:46:0c:eb:bd:a1:0c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256
Validity
Not Before: Nov 23 10:01:00 2024 GMT
Not After : Nov 24 10:01:00 2024 GMT
Subject: CN=0b788d7817007ee06c9a8014a185072cb4b5c779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:53:65:d2:da:8a:51:97:20:a5:3a:db:d8:
74:20:4b:fa:7c:86:c7:57:38:7e:4b:a6:ed:ca:03:
3d:d4:db:9e:f2:bd:5a:a6:af:d1:af:1c:4a:54:a4:
16:61:5f:0b:60:0c:aa:c6:1b:46:1e:14:7a:59:9a:
38:eb:14:c1:39:42:85:ec:5e:74:1f:3e:4f:66:ce:
68:95:ff:9d:be:7f:f9:bd:36:36:9e:ce:b0:6c:20:
ea:ba:50:b6:7d:08:f7:9c:56:7e:14:3d:cc:3e:5a:
2e:32:d8:23:b9:fc:70:b4:8a:5c:c6:97:08:0f:c8:
5c:50:a3:de:5d:4f:c5:f2:61:d1:ae:56:c2:ca:09:
d5:01:16:5d:f7:0a:46:7c:a4:70:23:c6:3e:a2:05:
01:c4:74:60:a0:ac:d4:6d:d9:22:ab:1d:65:15:3b:
b6:13:f9:7c:c9:25:60:36:3f:50:cd:6e:22:8d:a1:
9d:3a:bf:c0:72:8b:d8:c9:ef:67:f9:8e:e6:f3:a5:
35:ac:09:77:96:a1:bd:98:05:9e:0e:11:32:00:52:
4a:68:2b:5c:88:48:a2:05:93:26:44:ec:53:e9:e7:
1b:87:4c:b7:d8:7d:93:50:eb:b9:49:2d:88:52:7b:
23:0b:7e:74:93:cd:2a:a2:57:d7:fb:0c:ea:81:c8:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:78:8D:78:17:00:7E:E0:6C:9A:80:14:A1:85:07:2C:B4:B5:C7:79
X509v3 Authority Key Identifier:
keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d3:18:72:cd:e4:ce:05:06:ac:c4:aa:37:a9:08:33:c0:e8:
f8:f5:dd:21:b3:bc:37:a8:99:c1:57:4b:6e:7f:36:45:17:fc:
36:57:62:fc:cc:04:ee:36:d8:06:a4:88:42:99:aa:a8:70:3d:
65:3a:e3:d6:76:58:a5:e5:af:3d:50:f4:67:c3:db:6d:a5:f9:
30:19:43:87:5d:f3:0d:e3:70:9f:bb:ef:95:d7:90:0d:62:1c:
57:43:b7:11:84:1a:b1:ac:78:e5:98:83:e1:c3:9d:d3:77:1b:
65:92:25:ee:68:b9:e5:65:40:5d:2c:6a:54:59:69:b3:e0:23:
59:6e:28:60:fa:2a:d9:8a:86:16:6d:8f:b5:dd:b2:d9:6f:2f:
89:40:e6:1d:1f:74:13:d9:cc:1a:d8:e4:a3:c9:9e:de:7e:a8:
9c:e4:17:e8:4a:81:10:29:1d:34:82:43:94:3e:ca:a5:7d:39:
53:2e:c5:92:3f:3a:15:b6:23:2c:56:08:69:e8:a6:58:a0:e6:
5d:ed:78:16:47:50:33:36:05:a6:0d:2a:ee:60:22:36:96:d3:
bb:84:92:47:38:bb:ad:b5:d6:99:2c:50:3c:09:99:75:b1:7b:
eb:b4:1e:60:38:cb:14:6e:64:3a:67:79:da:75:33:70:17:64:
57:09:c1:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYd7VmspVBtY9GDOu9oQw9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkODdmMzAyNzQ5NTFjYWRmYjViNzM3ZTEzMzNjNzNkNjRi
MDQyNTYwHhcNMjQxMTIzMTAwMTAwWhcNMjQxMTI0MTAwMTAwWjAzMTEwLwYDVQQD
EygwYjc4OGQ3ODE3MDA3ZWUwNmM5YTgwMTRhMTg1MDcyY2I0YjVjNzc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTxTZdLailGXIKU629h0IEv6fIbH
Vzh+S6btygM91Nue8r1apq/RrxxKVKQWYV8LYAyqxhtGHhR6WZo46xTBOUKF7F50
Hz5PZs5olf+dvn/5vTY2ns6wbCDqulC2fQj3nFZ+FD3MPlouMtgjufxwtIpcxpcI
D8hcUKPeXU/F8mHRrlbCygnVARZd9wpGfKRwI8Y+ogUBxHRgoKzUbdkiqx1lFTu2
E/l8ySVgNj9QzW4ijaGdOr/AcovYye9n+Y7m86U1rAl3lqG9mAWeDhEyAFJKaCtc
iEiiBZMmROxT6ecbh0y32H2TUOu5SS2IUnsjC350k80qolfX+wzqgcjtTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAt4jXgXAH7gbJqAFKGFByy0tcd5MB8GA1UdIwQY
MBaAFB2H8wJ0lRyt+1tzfhMzxz1ksEJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUt
ZmU0NDAxMTFkODA3LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUtZmU0NDAxMTFkODA3
LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntMYcs3k
zgUGrMSqN6kIM8Do+PXdIbO8N6iZwVdLbn82RRf8Nldi/MwE7jbYBqSIQpmqqHA9
ZTrj1nZYpeWvPVD0Z8PbbaX5MBlDh13zDeNwn7vvldeQDWIcV0O3EYQasax45ZiD
4cOd03cbZZIl7mi55WVAXSxqVFlps+AjWW4oYPoq2YqGFm2Ptd2y2W8viUDmHR90
E9nMGtjko8me3n6onOQX6EqBECkdNIJDlD7KpX05Uy7Fkj86FbYjLFYIaeimWKDm
Xe14FkdQMzYFpg0q7mAiNpbTu4SSRzi7rbXWmSxQPAmZdbF767QeYDjLFG5kOmd5
2nUzcBdkVwnBxQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 19:00:09 2024 by rpki-client on console-fra.rpki-client.org