Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
File: HK8vo44dGk0OBmCb8pdugcUKrQo.mft (raw, json)
Hash identifier: LMzEdW39JBl4JS3NoxDrO7daP40N2WIPVYw9CdoANqY=
Subject key identifier: F5:8B:F7:78:B3:22:22:EA:86:6B:1E:44:36:72:51:E2:5D:5E:8E:30
Authority key identifier: 1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
Certificate issuer: /CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Certificate serial: 018F32F4E6CA384358405DE77BD6E82DA393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
Manifest number: 0E01
Signing time: Wed 01 May 2024 07:01:01 +0000
Manifest this update: Wed 01 May 2024 07:01:01 +0000
Manifest next update: Thu 02 May 2024 07:01:01 +0000
Files and hashes: 1: HK8vo44dGk0OBmCb8pdugcUKrQo.crl (hash: dgnfgG88oYqnsElC0MEGbvQ7sCpXZmp+KHL+4D2c8Js=)
2: mcXzNzMVM7ne8Swx56wb7KlLFzI.roa (hash: MEwQkJAhMcHg6QiopPYkEWOMmgVM1ULGZn1PRJtmxiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:32:f4:e6:ca:38:43:58:40:5d:e7:7b:d6:e8:2d:a3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1caf2fa38e1d1a4d0e06609bf2976e81c50aad0a
Validity
Not Before: May 1 07:01:01 2024 GMT
Not After : May 2 07:01:01 2024 GMT
Subject: CN=f58bf778b32222ea866b1e44367251e25d5e8e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:e0:7c:55:25:04:79:e8:7b:3c:62:62:dd:
66:a5:ed:2e:80:b8:be:99:3d:99:f3:d2:0d:1e:fc:
33:77:3e:fc:1d:12:7b:29:89:aa:a6:63:82:bf:60:
a0:b5:28:2c:69:a4:6c:51:58:ac:67:55:69:23:a2:
cd:f0:f4:9c:08:5f:bb:ac:14:95:ad:82:25:81:b6:
28:1d:f3:e2:d6:23:f9:06:3d:0e:33:9a:0a:07:47:
75:30:04:c4:4c:91:7f:1f:bf:6d:c7:0d:1d:1c:f7:
a6:9f:e3:0c:d5:fd:6d:52:91:ca:7a:46:27:a7:99:
83:66:f9:9a:72:94:b2:46:7b:f2:16:42:69:26:b5:
9d:85:85:a3:aa:19:5f:96:2c:69:7e:c2:3b:ad:50:
73:7f:b3:f2:99:d8:ec:54:ea:33:c2:e7:27:a9:40:
53:56:68:e1:58:7f:aa:c5:df:f5:df:ed:bf:0d:a4:
9d:ca:a0:00:15:67:51:a3:73:ec:c6:10:7a:04:15:
39:2a:4f:79:3f:0c:48:97:5b:86:47:2f:98:de:45:
b2:35:6c:4b:46:87:18:0e:b0:17:b1:52:8b:da:3c:
51:99:92:4b:32:4d:40:f7:cc:20:fd:5a:87:79:d1:
e9:0b:81:dc:c3:aa:b8:bb:8f:48:85:d8:b9:a3:b7:
5d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:F7:78:B3:22:22:EA:86:6B:1E:44:36:72:51:E2:5D:5E:8E:30
X509v3 Authority Key Identifier:
keyid:1C:AF:2F:A3:8E:1D:1A:4D:0E:06:60:9B:F2:97:6E:81:C5:0A:AD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HK8vo44dGk0OBmCb8pdugcUKrQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eb7dd4-fc8f-4937-8db0-a665db22ef72/1/HK8vo44dGk0OBmCb8pdugcUKrQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b3:b7:da:c2:b5:d5:2f:9b:31:fc:88:77:95:f5:ff:b9:1e:
d8:4a:03:31:34:89:bf:c6:21:0b:51:77:da:ee:4e:72:92:74:
d6:dc:4f:0a:af:f2:57:de:95:42:67:07:cc:63:4b:d7:4b:83:
41:68:10:82:cd:a1:01:96:c3:53:64:25:5d:68:8c:8c:44:3a:
92:93:7d:fa:09:77:a8:76:fd:da:3a:7b:54:bb:6a:1e:db:4c:
d2:02:18:39:b5:69:a6:95:c3:0f:13:b3:a4:02:90:b1:e1:1b:
a0:8b:56:3e:c7:84:bb:67:e1:2a:aa:26:e0:e8:38:f1:68:ff:
ad:16:82:15:81:fe:55:fa:37:ae:4e:f6:85:45:90:01:af:46:
70:40:9a:8e:9f:34:16:99:81:55:94:90:7e:77:bd:c2:20:96:
39:39:e6:94:42:f0:8f:48:2c:a5:3a:6a:25:c4:1f:fc:7e:80:
74:aa:02:c2:40:ed:fa:70:0e:99:ec:48:34:28:1e:36:a4:06:
c5:07:fe:e5:15:53:d9:a0:41:aa:87:d7:26:31:43:c5:02:5c:
91:76:74:6e:a5:b9:71:4f:bf:31:fe:e5:c8:70:8c:df:d9:fc:
f4:4b:6c:30:b5:0c:bd:28:27:18:f3:3e:1c:a5:a1:47:65:04:
ae:1e:ab:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 17:07:06 2024 by rpki-client on console-fra.rpki-client.org