Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
File: hP-lQvPYybB7926uioaYWj17Tcc.mft (raw, json)
Hash identifier: CEOHrPvb1Oxzq+WYHPSskMTl+QnYUmxjjofwOtC/iDo=
Subject key identifier: 64:1D:ED:30:0B:0F:D5:D4:55:62:0C:F9:8E:60:BC:EC:74:7F:C5:4E
Authority key identifier: 84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
Certificate issuer: /CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Certificate serial: 01936AB49F5CF377A85C3DABACE72E9F5AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
Manifest number: 0D44
Signing time: Tue 26 Nov 2024 23:00:42 +0000
Manifest this update: Tue 26 Nov 2024 23:00:42 +0000
Manifest next update: Wed 27 Nov 2024 23:00:42 +0000
Files and hashes: 1: hP-lQvPYybB7926uioaYWj17Tcc.crl (hash: vTs/AQVQ4IJsiVVdWfkSeXKPxiecuD0lgFtkCKE0Q/I=)
2: xo4mD_xXnVolWefGDr3FTKdUYD4.roa (hash: sklQtsBQfWMyKiaoK2Bc2nQS/uCyTh7qkAb4YlE+F7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:9f:5c:f3:77:a8:5c:3d:ab:ac:e7:2e:9f:5a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Validity
Not Before: Nov 26 23:00:42 2024 GMT
Not After : Nov 27 23:00:42 2024 GMT
Subject: CN=641ded300b0fd5d455620cf98e60bcec747fc54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:ac:49:ab:6c:f9:87:a2:ef:0f:a2:25:0d:
23:80:82:01:3d:86:f6:0e:4c:84:b7:f2:b6:78:9e:
af:62:a4:38:44:dd:cd:0f:11:bc:c0:0f:9e:8b:e4:
80:60:62:d0:ed:37:21:88:47:e9:11:90:d4:e2:41:
a3:ea:b7:2c:d0:09:24:11:e6:36:72:03:1c:b6:9c:
8a:b0:9a:9f:5a:9c:ae:f0:ab:87:e2:d9:fe:80:a6:
ef:6b:86:4f:ec:17:c2:2e:cd:6e:4a:ff:54:aa:3a:
69:5e:29:96:d9:54:e6:81:fe:8a:40:94:74:88:af:
a4:a0:4f:ce:47:ca:15:af:78:44:87:36:34:a1:9b:
d3:0f:94:5b:e5:a3:ad:aa:2c:a3:e2:c9:c3:57:98:
70:50:04:e3:7f:49:40:8c:0b:d3:54:41:ff:bf:fe:
4c:e4:42:de:aa:5b:f9:05:05:60:94:8b:52:2d:e0:
e8:8e:c3:cf:00:3d:e1:45:3b:5d:bb:1f:9f:d1:7b:
3d:51:30:90:03:39:e6:f0:c4:fa:83:9f:e7:50:84:
28:a1:21:92:b0:92:48:20:96:93:63:22:d5:54:da:
78:fc:a5:22:ba:67:59:14:07:ff:2b:89:3b:a3:aa:
00:58:2a:c8:6a:87:51:5f:e8:f5:9a:36:01:6d:7c:
f8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:ED:30:0B:0F:D5:D4:55:62:0C:F9:8E:60:BC:EC:74:7F:C5:4E
X509v3 Authority Key Identifier:
keyid:84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:82:51:49:20:1d:eb:1a:c7:4c:ba:9f:fd:9e:5a:48:c9:b1:
d9:63:ec:cd:53:ab:f2:2e:5e:bc:2a:4f:76:9c:e8:56:67:35:
3a:22:13:3f:a9:07:e5:61:fe:bb:45:0c:4b:cd:b3:3e:93:31:
29:34:fd:db:87:93:c3:8a:b4:bc:98:ce:ed:7d:67:0b:e6:61:
c9:89:93:bf:66:28:c1:c8:1e:8c:1a:9e:f4:11:54:55:61:67:
c3:a4:be:37:50:6d:22:ef:c5:ce:a0:e8:60:c4:ec:5c:80:ab:
70:88:df:dc:b1:0b:99:dc:a0:4c:ac:5c:3b:bb:56:c4:36:3a:
9b:67:f4:64:aa:3b:eb:5a:4d:67:0b:70:ef:c5:d4:e4:3f:02:
3b:e5:db:17:af:20:48:76:63:3f:4d:59:15:9f:6f:a3:e5:2f:
a2:35:ed:ba:c2:14:15:cd:b6:e8:59:ee:6f:eb:5a:1e:9d:e4:
bd:ec:04:d7:cd:37:65:02:27:0c:35:90:88:57:06:a3:de:6d:
a9:73:72:4e:dd:ec:ec:d0:42:d5:e6:b9:9d:f2:8c:54:fb:e2:
4c:4c:99:fc:6e:2d:2a:85:c2:dd:44:2a:e8:bd:7e:c8:54:17:
a9:e1:2e:e6:80:6b:62:50:a2:84:0c:92:fa:1b:9a:50:be:19:
b7:b1:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:20 2024 by rpki-client on console-fra.rpki-client.org