Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
File: HcdSIyHCPRae0zL_SYeczCRRcts.mft (raw, json)
Hash identifier: AOYxFXktMlSoj1PNpao/UZQTS564co9mXxYKliJP7Bc=
Subject key identifier: 5C:52:D3:E9:3D:AC:B1:E4:80:67:C3:AC:F7:0C:E6:9C:88:D4:7F:63
Authority key identifier: 1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
Certificate issuer: /CN=1dc7522321c23d169ed332ff49879ccc245172db
Certificate serial: 018F478F0CEDFF5633B6AF9F5B4FEF04D0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
Manifest number: 1157
Signing time: Sun 05 May 2024 07:01:48 +0000
Manifest this update: Sun 05 May 2024 07:01:48 +0000
Manifest next update: Mon 06 May 2024 07:01:48 +0000
Files and hashes: 1: HcdSIyHCPRae0zL_SYeczCRRcts.crl (hash: a40iwLU3hN0X+GnZZ4ynYOcxFIcWygHCP3FOsuZj7Tg=)
2: oSGpX3XbqNBGofqXxKMU7rbutFU.roa (hash: d+vs+8S1EjnFVzZY5ZuTH+YjGjJ0pIaUtMf+rEDviEk=)
3: zbVDcemDzwXiLT_ONJi9tBoUwZM.roa (hash: pLQ0MA/2Sz3axa1hJjvFbTxC2tZgBPwZG2HLhytJ6Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:47:8f:0c:ed:ff:56:33:b6:af:9f:5b:4f:ef:04:d0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc7522321c23d169ed332ff49879ccc245172db
Validity
Not Before: May 5 07:01:48 2024 GMT
Not After : May 6 07:01:48 2024 GMT
Subject: CN=5c52d3e93dacb1e48067c3acf70ce69c88d47f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:d5:b5:4b:9b:ac:81:0a:98:66:48:3e:b2:
fe:d1:74:ed:c9:74:d2:fc:8c:f6:cd:9d:55:81:d3:
03:26:ef:a4:16:ec:42:0d:73:2a:44:85:d1:f6:78:
04:f9:21:f7:21:8e:b3:92:b4:15:2c:e2:66:10:c2:
f0:a7:f4:9b:ad:f3:59:69:30:c1:50:6e:b0:d6:9c:
a4:09:dd:8d:a8:81:c2:7a:6d:94:80:1d:34:9b:13:
b1:e9:d3:8b:33:74:fd:62:02:7c:ef:d1:b4:4c:34:
3b:7a:dc:2f:a9:68:4a:36:4c:84:68:a8:0f:6f:7f:
bf:8e:5a:54:dc:06:22:70:73:50:0f:e0:b5:b2:94:
ba:ac:58:bb:f2:5b:71:50:43:d8:ca:1a:3c:15:f8:
96:08:fe:10:a4:c7:93:36:6d:66:01:3e:26:28:b4:
e9:06:26:ac:97:34:67:04:72:de:67:e7:b4:a4:55:
0e:0c:a9:c9:3a:9d:b3:1a:8e:22:5f:02:e7:28:25:
29:bb:5f:c9:fa:af:e9:8a:13:25:77:ec:97:50:f1:
82:c5:3b:5c:b5:0c:a6:a6:1a:39:e9:0e:ce:81:2b:
c3:ae:71:ed:a7:6e:e2:a0:15:e3:4d:5d:63:2a:b0:
dc:5f:60:38:ce:cb:cb:1b:14:92:a2:af:13:c7:25:
81:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:52:D3:E9:3D:AC:B1:E4:80:67:C3:AC:F7:0C:E6:9C:88:D4:7F:63
X509v3 Authority Key Identifier:
keyid:1D:C7:52:23:21:C2:3D:16:9E:D3:32:FF:49:87:9C:CC:24:51:72:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HcdSIyHCPRae0zL_SYeczCRRcts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/520d04-e912-4f46-a9e6-7055393f75fe/1/HcdSIyHCPRae0zL_SYeczCRRcts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9e:8c:72:d5:f6:b6:6d:f7:2f:94:4d:c2:45:08:f2:e3:3a:
e1:93:f4:c5:63:c9:80:f8:9e:4f:d8:4d:1a:28:be:1c:4d:26:
46:d7:b7:54:1e:4f:b1:cc:2f:23:da:61:0b:77:f7:df:c3:e2:
62:79:ee:05:81:df:d4:63:aa:80:04:e2:b3:e0:ad:90:c2:8b:
d7:06:f2:05:06:a7:71:6a:7a:ba:2d:0f:56:41:02:d9:67:32:
d2:75:75:71:e3:37:73:7a:35:a7:14:a2:36:62:45:1e:5b:2d:
47:0b:09:ec:4b:34:dd:df:e9:47:64:40:81:76:18:7f:81:d3:
bd:76:80:50:83:8d:d0:9e:31:45:70:42:51:24:e0:7a:70:10:
60:3b:ff:fe:6e:a1:3b:65:87:48:e6:74:58:f1:d1:d6:fa:27:
74:9f:bf:c2:84:2a:ac:35:25:cf:41:a3:c5:cd:47:f0:c1:6e:
30:35:65:a8:04:53:23:9f:1b:9d:d7:90:b5:f2:28:f0:ad:13:
91:30:76:9d:8a:90:7a:5b:83:5c:3e:88:28:7b:09:77:54:1a:
42:d3:e3:02:96:a4:cc:f8:6e:8a:c4:59:8e:08:24:21:76:6e:
4b:7f:be:a9:2c:7d:0a:c8:70:c2:b9:9a:19:4c:62:0b:8d:38:
fe:ea:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 10:25:17 2024 by rpki-client on console-fra.rpki-client.org