Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
File: HU6VkgCuqPuSkVi3PowOaaiNxek.mft (raw, json)
Hash identifier: kjh+mmOQfyY6UqLtFEusJBjfZlhcy9teRIEv1LvSSDM=
Subject key identifier: C4:E7:09:9E:4D:C8:AA:1B:72:34:CE:4D:34:39:E7:B6:00:87:08:DC
Authority key identifier: 1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
Certificate issuer: /CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Certificate serial: 018F4E35785F8268389006841D1116681D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
Manifest number: 1109
Signing time: Mon 06 May 2024 14:01:18 +0000
Manifest this update: Mon 06 May 2024 14:01:18 +0000
Manifest next update: Tue 07 May 2024 14:01:18 +0000
Files and hashes: 1: 6zRBBdP3Iw44TIqOHwIWpO9Gw5E.roa (hash: kaN/QpJS9NI/Z0qFnDPC5LKl34asIG0VTNvzZBIq8Pw=)
2: HU6VkgCuqPuSkVi3PowOaaiNxek.crl (hash: f3i+3x9d3VPxl4cULQWK+MxFXmIFNnUE8VUfNRehkRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4e:35:78:5f:82:68:38:90:06:84:1d:11:16:68:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4e959200aea8fb929158b73e8c0e69a88dc5e9
Validity
Not Before: May 6 14:01:18 2024 GMT
Not After : May 7 14:01:18 2024 GMT
Subject: CN=c4e7099e4dc8aa1b7234ce4d3439e7b6008708dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:1d:24:a3:d1:4a:84:9f:f9:ce:d0:a4:f5:
1b:9a:79:6f:03:44:35:e5:a9:58:e3:f9:f4:d9:ba:
07:28:45:3a:e7:94:99:5a:d2:cc:6c:e4:fb:c8:fe:
5e:c4:a9:84:22:ff:46:b6:a9:33:e4:ec:ce:96:02:
a9:0f:88:7d:71:a2:73:d5:89:6e:94:59:fd:db:5d:
08:39:8b:a4:95:34:c2:95:5c:a5:1d:93:9e:d8:02:
f1:57:fe:b3:9e:a6:9d:ab:45:35:26:11:3a:2f:25:
b7:f5:b3:a1:da:14:81:24:1a:01:eb:81:1a:d9:b1:
d9:0c:1b:2e:b2:26:e1:c4:90:03:4e:e0:a7:7e:09:
27:4f:de:a7:f1:31:49:89:8e:87:07:45:2a:fb:eb:
20:63:d0:fc:83:1c:96:d9:56:b9:7a:77:52:50:7f:
22:7e:15:9f:f5:d0:77:12:8b:98:fa:a8:db:e0:0c:
94:7a:5e:e8:08:34:9a:ef:35:dd:ad:eb:b8:a7:83:
d4:93:52:93:27:1d:1f:8d:12:fb:04:23:f7:69:7d:
97:53:75:64:f2:b8:d4:58:69:87:dd:9e:d4:73:29:
9e:9e:45:a9:95:0c:7e:25:27:9e:e5:d8:01:a2:2a:
b1:07:71:5a:9d:07:a6:c8:98:87:07:7c:49:ba:79:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E7:09:9E:4D:C8:AA:1B:72:34:CE:4D:34:39:E7:B6:00:87:08:DC
X509v3 Authority Key Identifier:
keyid:1D:4E:95:92:00:AE:A8:FB:92:91:58:B7:3E:8C:0E:69:A8:8D:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HU6VkgCuqPuSkVi3PowOaaiNxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/04d364-560f-4b36-8f2a-2b536cf7b825/1/HU6VkgCuqPuSkVi3PowOaaiNxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c1:db:6e:55:9a:65:3b:4e:53:a8:3f:6c:22:de:12:dc:c8:
1c:99:a5:c7:b6:ae:2e:44:a6:46:b4:eb:ab:c6:c5:c3:f1:ca:
eb:d5:56:03:86:61:f3:67:a9:d3:03:ea:87:f3:e6:1a:7c:3b:
97:42:9d:00:2c:43:e6:7a:21:09:30:a7:28:df:1d:0f:91:b4:
74:0a:89:ab:76:1a:06:71:d3:69:2f:37:f1:05:d0:14:19:7c:
10:05:aa:66:26:8d:5c:ce:ee:3e:2d:07:80:0f:67:98:da:da:
53:ca:54:6c:d7:c3:20:57:fb:0a:aa:40:e9:e0:cc:9f:11:d7:
14:3d:b2:92:6e:66:4a:ce:b2:2d:fd:1f:a8:08:7c:65:3b:fd:
95:a7:1b:e2:f0:b2:3a:3c:a9:ae:0c:48:1d:f9:08:8e:98:15:
c5:d5:f5:07:2e:5c:69:10:bd:f4:de:98:b6:5c:4b:56:a3:bc:
01:bd:0c:65:b2:ce:58:48:b8:5c:0f:50:26:e0:d6:dd:d4:71:
e4:d3:b0:47:13:2e:14:e6:03:ce:4e:b8:b7:89:bd:d9:50:a0:
af:44:5c:34:00:8b:fc:d4:10:8f:81:48:7e:69:6a:c6:be:da:
80:95:b4:cc:55:23:ff:cc:03:bf:00:5b:0a:3b:ac:73:07:db:
83:37:98:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:08:15 2024 by rpki-client on console-ams.rpki-client.org