Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
File: h9wam_-izxWn2AmcijwxfOB9teo.mft (raw, json)
Hash identifier: ibhS/jDRW21A37M7MPap03xj5MxsHwnLShfRZkkxqAA=
Subject key identifier: 8D:24:B4:15:31:5A:F7:43:1A:54:14:47:15:F4:DF:9D:93:F6:FC:07
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 01923B8300354E4DB63D2A025F3EE4E1B5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
Manifest number: 053E
Signing time: Sun 29 Sep 2024 02:01:33 +0000
Manifest this update: Sun 29 Sep 2024 02:01:33 +0000
Manifest next update: Mon 30 Sep 2024 02:01:33 +0000
Files and hashes: 1: g3CX5JYd9UROTdhpJAvfjLWBqMo.roa (hash: Tj1I1wWcISXtvbxDXVp9BkofmzaAFDM9ftD7TCiB4YA=)
2: h9wam_-izxWn2AmcijwxfOB9teo.crl (hash: /RLx1Ye1tPNPfu7u2dCDnWZdjbE8So1vfuFu+YQDMmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3b:83:00:35:4e:4d:b6:3d:2a:02:5f:3e:e4:e1:b5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: Sep 29 02:01:33 2024 GMT
Not After : Sep 30 02:01:33 2024 GMT
Subject: CN=8d24b415315af7431a54144715f4df9d93f6fc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:42:80:f5:14:f8:15:82:dd:32:b1:fd:1b:f0:
8d:6b:0a:17:55:57:9c:2e:f4:a6:fc:3b:43:74:96:
ac:bc:e8:a6:15:a1:a9:88:3d:c0:43:8e:13:1b:65:
53:10:57:17:77:65:d8:9e:fa:4b:7b:8c:b3:f0:cd:
0b:88:0d:5a:16:35:d2:4b:5a:2b:68:2f:f5:43:d8:
af:19:bc:09:b8:45:20:2c:14:b2:8a:9c:a3:7e:b4:
73:83:da:5d:0f:7c:17:e4:96:7d:99:14:d5:18:21:
5a:2c:86:d4:03:96:60:64:98:66:5f:e2:6d:74:1d:
8e:7c:df:e9:2a:b1:38:75:22:38:ce:f3:00:32:6b:
90:5a:c6:b2:bc:34:18:1d:11:1a:52:38:fc:7a:eb:
b2:37:ed:cb:1a:6a:b3:63:a8:2a:94:58:39:f2:3e:
ac:06:87:60:22:99:77:2f:98:b3:3d:53:12:39:26:
d6:d4:39:4f:e6:92:e2:c9:2c:92:33:78:ea:0e:e2:
90:de:98:8c:c5:c9:a8:df:45:74:14:65:22:17:d5:
38:5c:31:55:07:49:d1:6e:ae:3e:3d:9f:97:ee:75:
57:30:56:18:f4:45:cd:1b:8d:d6:b2:6b:43:68:a8:
ae:6e:ef:a1:2e:e4:3a:78:77:47:89:9b:ec:30:8a:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:24:B4:15:31:5A:F7:43:1A:54:14:47:15:F4:DF:9D:93:F6:FC:07
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:03:f6:8f:e6:c8:35:c2:9b:8d:ec:ff:c6:a1:2f:90:df:d1:
52:31:92:f6:cf:e5:ca:a2:85:65:35:44:60:4a:c5:be:bc:79:
59:89:f1:2c:bc:88:57:c2:34:2d:d2:c9:2f:33:13:c3:37:16:
34:84:7a:c8:6d:fb:79:5e:70:08:0c:b7:99:8a:0c:ca:bd:d7:
5f:93:c5:82:70:27:65:63:ad:9b:bb:53:17:3b:0d:2a:da:9f:
0c:67:e2:b0:09:2c:bb:7f:0c:9b:db:66:73:76:af:f0:f3:d5:
24:0b:59:0f:24:5b:fa:52:8b:9b:04:88:c8:04:78:3b:bf:32:
be:1d:a1:e1:c3:cd:c7:d6:15:11:74:f1:c8:39:43:49:28:7c:
2e:7a:c0:bb:7b:33:e6:7e:36:3c:b5:43:84:71:fb:f8:92:40:
3b:13:be:5b:b5:8e:77:ca:cb:eb:3f:55:9b:d7:50:d0:17:4a:
cd:29:a0:79:d7:07:db:70:65:a7:f6:b9:a8:7f:0c:b0:82:0f:
20:4a:81:a2:7f:1d:bb:83:0b:03:3d:5d:25:ee:9d:4d:7e:f6:
7c:2c:bd:1c:61:a8:1b:c6:75:ba:ea:ed:e8:5b:7d:d5:c5:a7:
b4:d7:32:34:0c:b7:ae:e2:a2:5f:69:78:13:e0:9b:00:38:b8:
4d:72:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 03:33:04 2024 by rpki-client on console-fra.rpki-client.org