Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
File: HUxgeKWUHFyxV9XylXyzFNftG-0.mft (raw, json)
Hash identifier: jYFxFjH59JpedrAY73bybzNQux3Gv4kerEj1seIHGEQ=
Subject key identifier: AA:6A:D7:85:0A:0D:B2:38:D8:00:68:66:00:6C:30:18:D5:70:51:C0
Authority key identifier: 1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
Certificate issuer: /CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Certificate serial: 01940646AFE363F55B9F0D0CE377ADA9D93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
Manifest number: 07CC
Signing time: Fri 27 Dec 2024 04:01:23 +0000
Manifest this update: Fri 27 Dec 2024 04:01:23 +0000
Manifest next update: Sat 28 Dec 2024 04:01:23 +0000
Files and hashes: 1: HUxgeKWUHFyxV9XylXyzFNftG-0.crl (hash: HVJOHUlLtMjdVoyZ98d3GwEVCB5S1Ie4cQ6D0YRdWFU=)
2: fCZNNBul4xUuZELdJPpP8JTnMCU.roa (hash: X/dGuUq/F9EyabwzWLZK7UnfExHfJozbMdWSzW8lKoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:af:e3:63:f5:5b:9f:0d:0c:e3:77:ad:a9:d9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4c6078a5941c5cb157d5f2957cb314d7ed1bed
Validity
Not Before: Dec 27 04:01:23 2024 GMT
Not After : Dec 28 04:01:23 2024 GMT
Subject: CN=aa6ad7850a0db238d8006866006c3018d57051c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:e0:f2:2f:6f:c8:ec:a3:fb:74:af:c4:b2:
c3:54:39:2a:78:84:96:67:f5:e9:a3:c0:f9:91:da:
d6:9c:0a:08:a8:53:cb:de:df:41:22:33:ce:e8:f0:
cf:38:ee:d6:0b:ae:f8:25:43:d4:bc:6a:31:51:7d:
47:0e:40:21:02:93:2f:2b:42:6d:0b:c7:ac:3a:09:
9f:d4:73:73:6c:95:31:f6:a5:d4:51:00:1d:20:c8:
19:2b:fc:d1:b8:e9:45:46:c3:e8:cf:00:14:dc:55:
f4:21:8e:21:6f:7c:4c:38:e4:a1:ba:d4:73:69:97:
a8:31:90:30:3b:8f:b1:94:97:2f:9b:0a:4c:1a:10:
a0:e4:10:01:b8:ae:2b:78:d2:9a:e6:c2:30:f3:dc:
b1:67:fb:34:d2:10:c7:a5:2b:bf:48:57:79:50:bc:
6f:8c:8c:f5:00:be:5a:62:17:b2:f1:9f:f1:1f:00:
1c:cf:1d:c3:b7:17:c9:50:3c:39:24:25:a9:f7:82:
e3:22:04:85:89:d6:d9:da:28:5d:23:dd:2f:bd:3f:
de:8c:9f:9f:1c:7e:fc:0c:41:c8:aa:7c:05:67:a9:
ea:dc:a5:a3:c0:ce:ea:f9:92:12:d5:89:39:1a:d9:
58:a3:c1:5f:f8:61:31:d1:92:71:18:48:15:06:77:
c9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6A:D7:85:0A:0D:B2:38:D8:00:68:66:00:6C:30:18:D5:70:51:C0
X509v3 Authority Key Identifier:
keyid:1D:4C:60:78:A5:94:1C:5C:B1:57:D5:F2:95:7C:B3:14:D7:ED:1B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUxgeKWUHFyxV9XylXyzFNftG-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3ef386-0571-460e-8991-996a623b633e/1/HUxgeKWUHFyxV9XylXyzFNftG-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:02:ef:1b:ec:82:ce:02:76:84:26:5e:74:f1:c1:c0:01:33:
2b:11:f3:4f:31:f9:77:7c:f1:fa:98:41:c9:c3:ca:39:14:19:
44:a5:eb:58:fc:51:7f:54:fd:99:75:2f:75:7f:8d:ee:8d:bb:
78:ba:11:41:12:b5:ed:56:f1:ab:b5:83:0a:4e:fe:c7:96:36:
41:b7:8e:36:d4:61:f1:c7:05:76:93:9d:aa:d8:3b:07:81:66:
4c:05:b4:a5:77:52:ee:22:83:0a:20:93:85:98:04:a6:a9:44:
8b:40:55:14:49:2e:ec:55:5d:0b:69:a1:af:bc:a8:f0:78:a5:
5f:f1:64:4d:4b:73:ad:88:d1:fd:c1:52:ef:ec:eb:0c:ce:e1:
6d:12:0a:d8:78:55:e5:4a:6f:3c:c9:6e:93:9a:ff:8b:de:ae:
db:d6:f7:6d:09:f0:25:61:de:e6:59:ff:b1:e3:ec:23:1e:fd:
ac:c5:33:d9:cb:70:b1:0b:e2:23:16:11:a4:3d:e4:59:f7:0e:
85:44:9d:9e:5d:f9:72:9d:19:72:5a:9e:5f:d4:fa:87:e8:5a:
94:2b:97:66:c0:67:fd:23:8c:53:1c:23:15:34:0f:47:c9:43:
c2:2f:fa:fd:bf:ad:f7:5b:9d:a4:f9:f5:95:01:72:80:f9:3b:
f1:04:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:50:22 2024 by rpki-client on console-fra.rpki-client.org