Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: zY3D6HbIIIbdP2n2qMuN38oBhxCUCV2RpnNggbeX8io=
Subject key identifier: 89:FA:D7:B4:D2:39:09:27:E0:BE:56:93:0F:BC:03:EA:A0:46:7A:5E
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 019352E2EABA5C68C327348E83B1182EAAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 0CB3
Signing time: Fri 22 Nov 2024 08:00:23 +0000
Manifest this update: Fri 22 Nov 2024 08:00:23 +0000
Manifest next update: Sat 23 Nov 2024 08:00:23 +0000
Files and hashes: 1: REFsfrGVesJKFWudGVC2bUEaQxg.roa (hash: TMggVMykwpt2yA42VHi/avWLczFqO/OejGkHA5dvyT0=)
2: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: Gd08+Eyjoez+y5x1s5tjHV1ihp0zmLYzfnpXczZirIo=)
3: o_H60kmtA4ROmJOS6doFcq__dl0.roa (hash: iKFMqWbghxvDd7WJNVZtpkzIjO+D/2XmN+l5p8xMY/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:ea:ba:5c:68:c3:27:34:8e:83:b1:18:2e:aa:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Nov 22 08:00:23 2024 GMT
Not After : Nov 23 08:00:23 2024 GMT
Subject: CN=89fad7b4d2390927e0be56930fbc03eaa0467a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:1f:dd:d2:ba:e8:a3:74:67:02:55:e2:24:
75:0a:21:6a:b7:a5:0a:6b:60:b9:cf:54:6a:41:11:
5b:7a:32:00:b1:38:7e:cb:0f:0c:dc:fb:e7:24:ba:
0f:6a:7f:8d:11:5f:74:c2:b4:1a:04:ee:8e:70:86:
51:89:8a:21:2d:a4:d3:41:14:67:9a:ec:8a:c6:ef:
c9:82:69:77:bd:3a:fa:b7:c4:47:2c:dc:90:9d:dd:
03:f5:a2:2c:1f:54:da:68:9d:93:c0:03:02:d3:be:
47:8b:1d:2f:1e:bf:04:1c:40:c2:8c:50:c1:91:20:
73:08:7f:7d:99:d9:e0:34:53:7a:47:fd:2f:14:ac:
82:10:79:35:e1:44:cd:03:65:27:37:a0:61:84:b7:
10:e8:3a:9a:40:b3:66:d2:9b:58:ef:8d:20:1e:b0:
dd:36:29:1b:f9:c9:76:0f:c3:ca:f7:45:32:4b:09:
ee:d6:00:bd:29:75:c5:2e:3e:a9:32:42:66:62:3f:
b3:fb:4f:4a:22:e3:27:81:71:9b:a8:ee:14:a7:7a:
d1:ff:90:ab:e1:76:b8:13:81:1b:67:8d:5a:be:e1:
bc:d6:e8:aa:8e:73:09:a8:d3:6e:41:02:55:83:4d:
a8:5b:d8:5e:da:50:46:67:15:94:93:9c:f5:b8:5b:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:D7:B4:D2:39:09:27:E0:BE:56:93:0F:BC:03:EA:A0:46:7A:5E
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fb:e4:66:23:57:e7:f2:39:55:d7:72:a2:80:58:c7:7e:60:
62:aa:01:0e:32:1d:2f:8e:fa:e2:b1:84:b2:84:59:3a:3b:6a:
c4:37:ad:00:f8:07:9f:28:59:0f:66:fa:e7:f0:58:60:ba:8d:
30:ca:4a:08:7f:cf:9c:20:4f:e2:06:a3:12:9c:d8:94:df:13:
8b:88:f5:b1:5f:cc:49:b1:19:36:bb:62:e1:14:ce:d8:3b:74:
88:7e:da:a7:4e:44:d3:79:0b:66:bf:95:37:02:d6:8d:e3:6e:
12:e5:92:ac:ed:f0:ac:0d:3a:8d:4a:13:37:24:4b:8a:d0:ef:
89:2c:77:8d:e4:e8:01:60:e8:57:d7:af:e7:d4:c8:88:52:ef:
ff:64:be:2a:85:e2:ad:cc:2b:f4:b9:85:cb:d0:b5:7e:87:b6:
2f:1e:32:ed:f6:7a:04:bb:c1:c8:62:c4:96:ed:8a:74:19:66:
58:db:7e:fe:05:57:7a:f7:d9:6d:c9:22:dc:bf:4a:15:e8:bf:
36:bd:7d:1a:a2:dd:75:07:84:17:d8:7b:c9:ee:8c:f0:5f:52:
d6:84:b9:d1:6c:f2:ed:0b:b7:4a:89:54:f4:12:1d:b6:56:99:
51:97:8c:07:3c:c1:e4:62:d6:fe:ff:0b:0d:a6:33:5c:70:30:
d1:b4:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:24 2024 by rpki-client on console-fra.rpki-client.org