Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: ghJBNXgyBH4DRB+gmsJjkGIGHlaAqoL3U24QWD+7BN8=
Subject key identifier: B6:71:AD:1F:DA:28:F5:28:2F:F0:9C:CA:EF:A8:3F:16:DD:46:EC:90
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 01936B224AF8C43F7B3021541D38471FE83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 137A
Signing time: Wed 27 Nov 2024 01:00:29 +0000
Manifest this update: Wed 27 Nov 2024 01:00:29 +0000
Manifest next update: Thu 28 Nov 2024 01:00:29 +0000
Files and hashes: 1: EcbORekMpmXDvf9gey6vKYyOLpg.roa (hash: 3azkn8umqkGedM9r/zoIDibZaDI8oWDV3Gr7yMpq/8Q=)
2: EyCOee5R3OhNT_xrl_EiwrQK0DY.roa (hash: crhcCwGJ1Or+g5eXBq6V+6t588apOi7kVSvRhnA6s+U=)
3: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: K8SUNFoPdbSl6JjerIu2zyrLIY3FoJWUU9CYWirCBsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:4a:f8:c4:3f:7b:30:21:54:1d:38:47:1f:e8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Nov 27 01:00:29 2024 GMT
Not After : Nov 28 01:00:29 2024 GMT
Subject: CN=b671ad1fda28f5282ff09ccaefa83f16dd46ec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:b6:4a:a2:80:7c:ad:5b:58:f1:9c:91:56:
45:5a:7d:33:8c:f2:c7:35:d6:54:d1:fe:5a:75:26:
09:e3:58:51:25:1a:32:4f:f8:06:92:97:fb:80:6d:
9c:c6:a5:82:f5:d0:32:37:98:9b:a8:08:85:44:b1:
94:13:98:80:49:97:50:45:70:45:a5:fd:e2:da:41:
6d:97:7f:bd:7a:39:61:de:e5:06:ff:cb:5c:51:92:
87:17:44:78:6f:0b:ed:16:f0:63:32:9d:ce:42:99:
13:17:08:d2:9a:2c:fc:97:1e:21:db:df:06:0d:1b:
76:b7:5f:0c:9c:cc:33:29:b2:e1:1c:5b:da:a2:ee:
37:65:62:5f:7a:de:f4:a6:1e:8e:6d:ca:df:b8:0c:
0f:b0:95:69:c0:5c:69:1a:80:74:56:ae:19:6b:f2:
d6:9d:22:fd:45:f5:88:04:7d:44:d4:32:b1:1d:51:
90:36:d3:cc:5d:86:5d:c6:3f:00:15:df:e7:70:5c:
ba:54:bb:6f:f1:25:5d:91:1c:4f:d2:32:c3:5d:de:
77:51:0a:86:41:77:4d:3c:de:05:cc:ec:a0:a1:08:
bc:72:46:8a:f5:28:27:7b:0b:81:eb:f5:fa:db:f7:
2b:f3:b9:1b:9e:98:ed:b5:d5:be:27:24:a5:44:05:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:AD:1F:DA:28:F5:28:2F:F0:9C:CA:EF:A8:3F:16:DD:46:EC:90
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:3a:aa:b2:55:cc:b4:09:5a:30:d2:1a:3f:3e:85:09:b3:6e:
4d:2e:98:2a:c9:7d:07:a6:5a:92:75:84:38:cf:da:47:95:11:
fa:d2:55:01:57:ae:3d:fb:60:d3:6e:6b:b2:9e:16:04:17:4b:
f3:d0:4e:87:df:71:70:6b:b3:88:09:31:2f:28:a7:33:37:40:
68:9b:b0:4c:64:61:16:94:15:fc:71:ab:1b:ee:d2:e9:46:c4:
76:f2:b8:5c:ad:7d:27:23:2e:a6:ba:b9:00:4f:50:76:24:46:
01:e9:3b:17:1a:91:a8:49:0e:4a:a4:ce:73:f4:a4:39:0c:d4:
c7:23:f7:c3:26:1d:55:35:be:15:f9:c8:60:13:40:3f:b1:43:
24:59:96:52:69:11:ee:d2:b1:6d:68:37:ad:c5:5a:a6:b9:29:
f9:13:2e:e6:3f:50:e0:9f:8c:7b:64:90:01:48:c5:d3:f0:e7:
c1:b7:91:7c:d5:1d:41:9e:c1:aa:ae:16:50:4b:a5:8e:8f:41:
0c:d4:b0:54:e0:9e:b4:76:6b:54:78:c2:2e:ad:64:2e:a1:f7:
c2:18:59:66:64:86:3b:8b:98:8e:f3:82:71:a5:79:0a:ea:f0:
8f:d8:18:96:57:ab:e1:f0:75:f1:cb:01:fe:86:9f:a1:e5:fd:
17:f2:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:50:03 2024 by rpki-client on console-fra.rpki-client.org