Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: /sYWashflgFSC2ShwgXHbvRaZ5zLaTeA3r+pYGUU9U0=
Subject key identifier: 39:22:21:9C:0A:EB:CB:2A:30:AB:4B:35:B2:92:2D:B8:D9:68:C3:5B
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 018F87496C915D7FBA1678E3B64B19A9CA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0710
Signing time: Fri 17 May 2024 16:01:26 +0000
Manifest this update: Fri 17 May 2024 16:01:26 +0000
Manifest next update: Sat 18 May 2024 16:01:26 +0000
Files and hashes: 1: Djj49smBJRNeau0gS3C5JM0IdLY.roa (hash: AvokbM//bgD/9PyCnc6E8CnFwvA3JDyhYmO+O2vpobk=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: l7CZFb27iZgs4AnD5QqKo712lzskE+vEt5l2HleQub8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:6c:91:5d:7f:ba:16:78:e3:b6:4b:19:a9:ca:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: May 17 16:01:26 2024 GMT
Not After : May 18 16:01:26 2024 GMT
Subject: CN=3922219c0aebcb2a30ab4b35b2922db8d968c35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:68:d3:db:93:6d:23:6b:99:67:8e:07:e4:
9c:75:e7:b6:ad:52:1a:32:65:a4:85:ed:e3:29:ec:
c5:13:03:96:eb:d2:62:01:79:27:ac:ae:96:b1:e3:
cd:8d:fa:65:2b:b4:5c:fe:45:6e:ad:f9:2b:96:a8:
ff:e4:e9:09:dd:10:7a:ea:79:3d:33:c7:d1:b3:2d:
91:70:9a:9c:ed:22:4f:bb:79:13:5a:f9:79:5d:57:
9d:0c:a8:2e:b6:da:ef:a8:4c:2f:6e:1e:b2:3d:5d:
58:62:d4:0c:94:34:55:7a:88:19:b4:05:98:c8:c8:
2b:b3:bb:2e:3e:89:7c:fc:48:d6:35:ee:06:77:97:
94:60:80:cd:e7:ac:ab:12:71:c3:8e:8f:14:65:ea:
90:a1:43:e9:1d:f5:6f:ac:ba:d5:b8:90:38:da:1a:
57:c1:3a:1e:1c:d9:d1:63:23:9e:d0:57:3e:f2:9f:
3a:ba:3b:4e:12:8d:0a:16:53:44:b3:36:d5:34:99:
c7:58:38:cd:81:83:e6:77:66:e7:ac:33:7a:bf:7e:
26:de:59:a9:22:20:89:90:c6:0f:66:b8:c9:fd:9c:
15:cc:60:91:2a:b4:86:c3:39:e4:1d:85:75:56:50:
95:3b:d8:fb:e7:80:6b:32:2e:1c:f5:24:09:90:c5:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:21:9C:0A:EB:CB:2A:30:AB:4B:35:B2:92:2D:B8:D9:68:C3:5B
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:90:42:99:ad:29:bf:0e:48:e0:25:32:fa:ec:fe:72:c7:89:
7a:c2:62:3a:3e:dc:e1:7c:ea:0e:6a:e5:71:49:54:b3:09:07:
cf:47:0d:4c:31:51:b2:72:d0:ee:5f:5c:c7:f0:b2:a3:b2:ed:
af:f4:a7:5c:29:01:30:70:b6:c2:9a:01:bd:e8:08:2d:83:2c:
e7:aa:37:b1:1e:92:82:2a:56:38:75:9e:b9:d0:80:92:63:5d:
20:ce:58:9a:e1:ab:c9:21:2c:1b:a1:7c:93:94:03:c7:e4:89:
49:12:a9:f0:33:ba:0b:b8:b5:58:f2:27:e2:76:de:34:ce:9c:
ae:f2:1a:e7:24:d7:fa:4b:87:6e:16:ea:de:3f:cd:12:53:b0:
42:59:e0:ed:06:4d:9e:ed:2b:11:87:6d:7f:63:54:a3:03:5c:
35:da:20:74:e2:52:42:7c:ce:87:6a:bf:12:48:ae:b2:28:d0:
fe:0b:fb:fc:00:69:af:da:d3:7e:48:46:be:81:c5:48:1c:1b:
c2:c8:2e:ae:1a:a1:ce:ff:ed:c6:b0:30:ac:0c:a7:16:02:f3:
a9:da:c8:db:e9:74:ae:d1:49:1e:71:49:3d:8f:b2:ab:f6:a8:
9d:7b:02:b6:a8:0d:e3:a2:53:cc:93:ff:d0:b7:79:2e:35:1c:
65:ad:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:54:07 2024 by rpki-client on console-fra.rpki-client.org