Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/hm3ucn6DmXwCA8D3GNM7k9d9gh0.mft
File: hm3ucn6DmXwCA8D3GNM7k9d9gh0.mft (raw, json)
Hash identifier: u3mLPXxf1WuaX+lR2znxK9UDKsPAALOkuJGx+fHAfg8=
Subject key identifier: 1F:4A:18:27:49:28:BD:07:AE:7C:64:57:C1:FB:DA:93:81:4B:63:73
Authority key identifier: 86:6D:EE:72:7E:83:99:7C:02:03:C0:F7:18:D3:3B:93:D7:7D:82:1D
Certificate issuer: /CN=866dee727e83997c0203c0f718d33b93d77d821d
Certificate serial: 018F28A8D598345C74952BE3FF5B8A340223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hm3ucn6DmXwCA8D3GNM7k9d9gh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/hm3ucn6DmXwCA8D3GNM7k9d9gh0.mft
Manifest number: 08B5
Signing time: Mon 29 Apr 2024 07:01:44 +0000
Manifest this update: Mon 29 Apr 2024 07:01:44 +0000
Manifest next update: Tue 30 Apr 2024 07:01:44 +0000
Files and hashes: 1: 6q0LaC4YNYyQkaBfOhszq_qj3-o.roa (hash: /4t/3GVjdjVQuW69c5azDmQDdtUxhDuphG30pEM9LG8=)
2: RmwGhaQtyB-nWSOaUZrImL6SkF0.roa (hash: hEB6cQwTD2n62zVkX5dgTsjF65ndY8Xn1vKr3Ej8uj8=)
3: hm3ucn6DmXwCA8D3GNM7k9d9gh0.crl (hash: +kM9RR2HEOteMpQHgsKy/JosFsHK7xcxB7uoYaE7x1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/hm3ucn6DmXwCA8D3GNM7k9d9gh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/hm3ucn6DmXwCA8D3GNM7k9d9gh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hm3ucn6DmXwCA8D3GNM7k9d9gh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:a8:d5:98:34:5c:74:95:2b:e3:ff:5b:8a:34:02:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866dee727e83997c0203c0f718d33b93d77d821d
Validity
Not Before: Apr 29 07:01:44 2024 GMT
Not After : Apr 30 07:01:44 2024 GMT
Subject: CN=1f4a18274928bd07ae7c6457c1fbda93814b6373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:51:e9:9e:31:69:ca:dd:54:41:0f:32:d2:
a4:22:9a:1b:51:e7:0b:2d:53:0b:7a:56:13:b3:ab:
ba:2d:f1:c2:38:06:7a:c7:a1:f6:24:ae:2d:2a:30:
a1:b8:ac:9a:8b:5f:ee:0a:fc:6b:c8:d8:e5:91:04:
35:20:33:6d:9a:1a:56:49:b2:8a:e6:ee:67:d9:7a:
05:fb:6a:90:bc:f3:02:26:bb:dd:e6:57:98:f6:57:
9b:15:43:ab:3d:10:f0:0e:60:71:67:6c:24:f8:66:
0e:39:89:87:95:23:2c:43:12:ec:40:d6:69:56:04:
75:2f:4f:74:5e:07:ea:c3:d2:6d:da:c3:b3:e2:80:
31:57:ed:ca:1d:14:2d:74:50:3c:cd:6a:be:2e:e9:
05:69:a7:b5:25:48:0f:90:1a:80:1b:7f:2a:55:25:
ce:bd:46:c0:39:72:42:7d:e2:03:e2:91:01:ac:cc:
d6:59:89:19:3e:71:ff:64:79:09:13:a4:0a:ff:05:
1c:f6:bd:99:28:0f:be:00:46:aa:4d:7a:54:95:d7:
95:79:8e:93:c9:75:2f:a1:13:af:05:77:3b:d8:27:
85:67:74:93:12:46:2f:32:e5:bc:54:e0:86:bf:05:
15:76:ab:9b:dd:f7:35:61:95:80:86:84:93:ef:03:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4A:18:27:49:28:BD:07:AE:7C:64:57:C1:FB:DA:93:81:4B:63:73
X509v3 Authority Key Identifier:
keyid:86:6D:EE:72:7E:83:99:7C:02:03:C0:F7:18:D3:3B:93:D7:7D:82:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hm3ucn6DmXwCA8D3GNM7k9d9gh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/hm3ucn6DmXwCA8D3GNM7k9d9gh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/hm3ucn6DmXwCA8D3GNM7k9d9gh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5c:ca:af:e8:bd:30:71:3a:d3:a6:c9:91:c3:3f:02:4c:b3:
e5:3d:55:8f:4f:08:82:5e:3a:25:78:3f:77:31:c4:fc:e8:28:
1c:3a:3d:24:82:4a:f0:07:09:de:00:17:12:40:4a:00:b3:0f:
6b:87:1c:8f:fc:31:e1:68:b7:f3:0f:4e:dd:a3:bd:50:77:4c:
fd:62:27:c3:7d:7f:8e:75:8c:59:b9:04:0a:a4:c3:a9:3f:c8:
3c:bd:0d:70:77:33:10:84:a1:ac:3b:c6:e8:e6:e6:d0:f4:35:
62:a7:c3:09:18:10:c6:27:94:74:bd:fe:0e:da:85:b4:37:09:
68:79:19:74:9d:52:45:1f:e2:da:31:e0:ee:f6:f4:49:a7:0a:
41:6a:07:9e:a9:b7:fc:83:45:f9:1f:e6:f4:01:bc:5d:c2:ea:
32:18:30:c8:1a:36:e3:15:28:7c:72:28:52:a1:5d:b4:41:3a:
ee:26:71:34:8f:cd:d2:4b:8c:48:2d:12:7d:26:82:44:9a:8f:
db:45:78:fa:d2:89:41:48:41:43:e2:a1:b1:05:09:f9:5b:85:
7f:1b:67:d6:48:da:85:8a:c0:48:3b:fa:55:2b:d8:f4:8b:22:
3d:f2:b4:99:4e:ca:7d:53:ea:62:8b:c8:08:84:af:21:2b:d7:
6f:cf:2d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 11:00:35 2024 by rpki-client on console-ams.rpki-client.org