Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json)
Hash identifier: 6CNRfG4DVlJlLkHQt/noQz3mrbNA/towNExthVPDxtU=
Subject key identifier: 2A:2F:04:4D:A5:31:DC:31:E1:BF:56:4D:6D:AA:47:6F:60:8E:67:6B
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 01935387D342E265D539CCF729AE4F5E125D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
Manifest number: 05FF
Signing time: Fri 22 Nov 2024 11:00:30 +0000
Manifest this update: Fri 22 Nov 2024 11:00:30 +0000
Manifest next update: Sat 23 Nov 2024 11:00:30 +0000
Files and hashes: 1: FffZIBJYYaFWU5ZcNhhYnGkmmGg.roa (hash: iMXPpRQkEZs/s6tjnlBOJ1l7xL9QN/qI0FbaKJ0ndiM=)
2: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: ZN8frIAhyVCWlNWg2iGVPgsc4/6kK0IE+rFJ6bY4D/g=)
3: x4srMTzqKkwkV7S1jL31T9wCaTo.roa (hash: ZbTxRhcuphwqFW7JRgWhJAfnDyPGEqL1yHTMmVuymSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:87:d3:42:e2:65:d5:39:cc:f7:29:ae:4f:5e:12:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Nov 22 11:00:30 2024 GMT
Not After : Nov 23 11:00:30 2024 GMT
Subject: CN=2a2f044da531dc31e1bf564d6daa476f608e676b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ba:0e:4d:d7:c9:9b:53:9e:9a:da:ff:8c:b5:
79:75:b9:37:35:c0:00:42:da:a7:6a:56:63:e4:7e:
8f:28:0f:ef:f1:e0:62:fe:86:85:36:82:7d:c4:b4:
0b:03:7f:94:01:09:b8:5b:09:14:f5:5a:c7:d6:93:
5b:94:b4:39:e0:39:8f:b1:cf:a2:24:13:65:35:28:
42:7b:61:cf:f4:7a:9b:d4:76:6d:ea:86:2b:fc:10:
1d:90:e0:69:c8:e8:8e:1d:38:0d:54:c1:80:63:54:
0e:41:8a:51:7d:8a:3e:99:16:c9:89:06:6d:f4:52:
82:b4:3e:ba:4b:38:40:f6:67:fd:31:4b:4f:c4:ab:
5f:b3:0d:c1:63:48:c3:b0:f6:a2:2b:8c:26:bd:ab:
6e:e0:a1:8c:09:e3:cf:13:1d:42:be:a3:e4:e1:18:
4b:51:05:42:6c:c4:47:2e:c2:01:89:8d:a0:36:a9:
ca:31:92:b8:ff:a0:89:62:6a:4a:cb:ef:f2:e6:50:
20:b1:57:32:ae:1e:0a:1c:f8:2a:51:94:3e:95:14:
8a:02:04:a4:b6:c1:09:cc:db:c7:b8:13:8d:5c:94:
ab:73:e8:44:5d:ea:42:0a:b0:a0:64:12:02:44:b6:
48:92:04:2e:cf:56:4f:ff:4a:f4:cc:4f:a9:0d:2f:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2F:04:4D:A5:31:DC:31:E1:BF:56:4D:6D:AA:47:6F:60:8E:67:6B
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:48:30:7d:18:02:6c:57:d3:b9:c3:6b:bf:ee:31:16:2a:57:
41:f5:b1:03:ba:9d:b4:5d:27:d8:6b:24:66:e1:2b:71:b5:14:
40:3c:3c:99:ba:d4:96:37:1b:24:c0:1c:3f:78:f1:45:19:f7:
0d:77:ff:a4:2c:80:b5:03:df:cd:f4:2e:ef:a7:f2:b7:6c:9b:
63:4b:a0:f5:52:d8:f3:c9:6f:df:1a:ae:46:9f:4b:b1:62:ef:
f0:5b:75:04:95:99:27:d0:c8:85:48:eb:ae:59:bf:3f:d2:a4:
4f:e4:3c:9b:a7:07:47:6d:4e:1f:d1:04:24:b7:ae:04:87:77:
0f:68:8d:ad:98:21:71:73:0b:04:39:a9:ed:1b:e9:0c:31:66:
4b:52:06:91:c5:9b:0f:5b:2c:b8:5b:3b:d5:e2:76:ee:b0:e1:
8e:3d:de:b0:cf:18:55:22:9a:b3:ac:cc:0d:50:49:e1:90:01:
58:c7:6a:c3:43:07:70:4f:be:3e:82:f8:64:32:30:9e:31:f6:
50:42:c1:7e:f5:01:fc:38:8e:a7:7a:f9:58:f3:c0:55:14:69:
c9:85:21:e3:0d:85:cf:82:bc:5f:83:3f:2b:c1:2b:53:52:3a:
f7:4b:12:39:28:94:c2:b2:65:cb:82:03:85:f0:21:3f:70:9b:
55:c9:b8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:40:26 2024 by rpki-client on console-ams.rpki-client.org