Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: xS2nlnqgdzCtfvZF2SjMRIoUVy+Ls/dC7lKYCWCp9hc=
Subject key identifier: 6C:D9:2F:56:46:07:CE:68:24:A2:A3:EA:1F:15:B0:B6:61:F3:C0:ED
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 0193595322CC368E9855B0AE8D9BA6F70247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 14:00:40 +0000
Manifest this update: Sat 23 Nov 2024 14:00:40 +0000
Manifest next update: Sun 24 Nov 2024 14:00:40 +0000
Files and hashes: 1: 3OX791jIHt-KyzYL70SzuRA3sB8.roa (hash: C9c2nOfhQAjNeZ49os1dNhuW+dMXSzAkbgLJen/CRbU=)
2: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: XEBnZWIjlQ6kpJ2NKv0bv4zgND+tchLAXjWMKuSE/6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:22:cc:36:8e:98:55:b0:ae:8d:9b:a6:f7:02:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Nov 23 14:00:40 2024 GMT
Not After : Nov 24 14:00:40 2024 GMT
Subject: CN=6cd92f564607ce6824a2a3ea1f15b0b661f3c0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:3b:e3:c1:c1:f4:03:76:a6:de:a7:5e:e3:
3d:22:c0:7f:da:30:0f:3e:5c:76:ff:b6:38:af:b8:
b8:1a:57:b4:1a:c6:a0:18:7b:7d:72:9c:87:77:61:
a1:c3:3c:2d:c9:2f:ef:d9:a2:8a:db:b8:5d:ac:2b:
4d:53:70:55:65:fb:38:32:6c:f0:f8:a5:e3:67:77:
40:e3:6c:39:84:d0:f4:d9:4d:6e:5b:5d:ad:b8:a2:
50:a9:e5:92:14:2b:7e:20:63:ea:a9:32:46:df:4f:
ef:d7:42:d5:78:1c:cc:4d:73:63:a9:3d:d1:55:cf:
76:4f:85:32:f4:e4:d5:5e:67:c3:65:cf:7c:1a:f9:
b2:69:ee:ed:2d:49:a7:77:c2:a7:b3:47:8e:75:88:
ea:82:1d:18:94:b1:f0:4d:5c:f4:41:92:a8:1f:7b:
77:bf:fe:ba:3e:a5:80:10:30:1d:9b:41:09:5a:1b:
e9:dc:5c:a0:43:6f:37:d8:3c:6a:b1:16:eb:f7:2c:
98:77:c4:ed:fc:a0:66:10:5d:08:8b:63:41:2c:31:
04:6a:fd:e0:e9:6f:a7:d0:06:37:52:a4:9b:aa:4d:
34:a4:e3:8a:f1:62:e6:0f:c6:7c:57:1e:af:8f:38:
b2:93:89:b4:80:bf:eb:c7:de:19:54:43:32:7a:3a:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D9:2F:56:46:07:CE:68:24:A2:A3:EA:1F:15:B0:B6:61:F3:C0:ED
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:02:23:1a:cb:4d:9d:00:09:cd:8f:bd:2f:52:43:0c:ad:49:
0c:e1:17:ba:58:02:12:8d:42:f7:c8:19:8f:1b:4e:0e:bf:99:
2f:10:95:cf:64:ee:58:77:49:b1:4e:75:64:4b:7a:ef:c9:3f:
78:b8:03:69:47:20:d2:8b:c5:c1:3c:53:56:ee:78:e7:f0:a7:
33:18:1f:5f:55:c8:dd:a0:c4:92:8e:d3:13:bd:83:99:09:24:
a0:38:d3:1c:10:82:db:5a:d9:e5:75:d9:21:15:a5:b5:5f:9f:
8c:3c:7f:bb:f5:c1:83:2c:4a:e8:f8:ad:7b:9c:fb:aa:67:ad:
f3:2c:f9:c0:6e:8e:27:07:fc:2b:60:bb:e3:8b:87:55:e0:ec:
b1:22:e2:c6:8e:54:ab:b8:8e:c2:ed:68:bc:7b:1b:86:76:95:
0a:f9:eb:74:f5:66:ef:8b:1d:da:8b:5a:7b:cb:a9:60:a2:73:
43:30:21:4a:7b:87:89:22:52:f7:5a:95:8d:4e:48:2f:9a:10:
dd:14:a8:0c:27:8c:66:97:a4:fe:a6:d3:56:fa:ed:2a:e9:91:
47:9f:4e:f5:1f:14:3f:e4:0e:a9:9e:08:d7:1c:7f:fa:09:18:
99:c8:a9:bb:fc:4e:f8:9d:33:a4:c3:0b:79:28:50:f5:58:37:
80:1b:e5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:11:56 2024 by rpki-client on console-ams.rpki-client.org