Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: J8AMjXNOaI5MbrAN6wP3JUze0KEjiZLQ2D4AGef/aN8=
Subject key identifier: 22:92:FD:45:18:6B:24:03:B0:D9:91:64:D8:68:C3:A5:3B:22:B2:02
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 01935877B4A683D7D37EAC46550C470FB85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 0315
Signing time: Sat 23 Nov 2024 10:01:00 +0000
Manifest this update: Sat 23 Nov 2024 10:01:00 +0000
Manifest next update: Sun 24 Nov 2024 10:01:00 +0000
Files and hashes: 1: VuOq2BZETwGpaqxtzV6wTd_bw6E.roa (hash: SsXqSajz6yR3XmxW+I0yrgDW6FEbpTRuCKc8fKp2xok=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: THDWchTaddtvQBAP2ryWbj5kI9mZaiAHYo4H1GtTXRQ=)
3: kt_AXjE56jabMm8UWcyBpxYP1g8.roa (hash: S+qDpuHYeTKnIAsCxtbZbtmjuh5HRlLV1n6OVtc0cic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:b4:a6:83:d7:d3:7e:ac:46:55:0c:47:0f:b8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Nov 23 10:01:00 2024 GMT
Not After : Nov 24 10:01:00 2024 GMT
Subject: CN=2292fd45186b2403b0d99164d868c3a53b22b202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:a3:6f:a9:4b:bc:a7:53:81:41:bb:6a:c6:
51:37:d8:48:c3:1e:c8:bc:c8:de:4c:c8:d6:ed:c8:
de:b5:5b:8c:bd:1c:f5:39:49:08:af:64:5d:4c:c7:
a5:bd:da:e0:ae:26:dc:7a:58:62:82:17:e7:e5:ea:
10:fb:05:33:cd:e9:ce:46:51:27:2e:76:aa:aa:79:
4e:a3:f1:0d:48:2f:fb:49:af:45:d3:f4:2e:3e:ca:
64:57:06:82:3c:33:21:76:3f:bf:a5:55:3c:1b:bd:
85:bb:5a:cf:1a:24:1a:1e:5e:23:d6:4e:b9:a4:3f:
00:3a:25:b2:bf:de:11:50:f6:05:9f:25:64:56:23:
75:6c:4f:ce:ac:92:95:70:cf:22:e2:75:80:63:c6:
71:d9:04:e7:28:01:6d:41:37:71:9c:24:7f:de:5c:
97:36:c8:72:9a:4c:8c:99:32:ec:25:70:be:48:6e:
51:b2:a1:26:32:6f:ae:27:9d:de:21:d2:9e:50:06:
9a:af:4e:5c:ac:0d:6d:1d:21:be:b4:c6:ca:e0:cc:
4f:68:e1:04:c1:3d:29:34:c2:3e:de:ed:dd:e0:6f:
63:ff:57:2f:60:d6:99:b2:f9:25:0a:09:15:5a:48:
90:f5:bf:29:30:63:57:e3:f7:3e:66:2d:9b:38:ca:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:92:FD:45:18:6B:24:03:B0:D9:91:64:D8:68:C3:A5:3B:22:B2:02
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:62:73:31:9e:49:17:cf:2a:5c:b6:4b:f9:e9:ca:8c:44:0b:
60:a7:86:41:de:77:d1:74:d7:c2:1b:e0:37:5e:2c:8c:92:f3:
6b:76:b9:61:d7:c2:d1:c4:a2:61:0c:19:31:8a:85:d5:0c:2f:
d0:4c:34:cc:21:10:0f:f8:4e:d7:89:e4:33:07:23:e1:85:0d:
42:ff:07:49:be:3e:b1:9b:b1:25:9c:7b:b8:ac:d0:fb:8a:a4:
52:1b:5f:37:df:13:f7:ab:34:de:31:02:8c:cd:f8:31:03:f3:
72:7d:5d:40:c5:a0:6f:d4:8b:64:bb:e0:24:85:d5:ab:ac:45:
77:ed:d0:2b:bc:b0:3e:c5:b1:ef:26:dd:c9:c0:e3:1b:c8:13:
b7:2a:82:b1:9a:34:1f:ae:4b:f2:51:3c:21:cf:5f:fa:1d:bb:
92:62:00:40:43:b4:9d:53:5b:5e:f7:ff:55:ee:54:3e:23:a2:
9f:ab:90:8c:6d:46:46:22:7c:c2:1f:d3:98:77:5b:ee:1a:88:
ce:08:38:66:4a:4a:61:93:fd:03:fe:17:7c:26:33:85:61:26:
5e:8b:ba:d5:5e:4f:6e:60:4c:6b:07:6b:68:4c:74:f9:ae:e3:
40:85:c9:34:41:f1:cd:01:4b:32:e1:03:86:93:f7:af:6b:cf:
ae:1e:0d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:08:42 2024 by rpki-client on console-ams.rpki-client.org