Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
File: HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft (raw, json)
Hash identifier: eMHanBcWm9ruMtCxGm0fnwbPVUHi4/24jTemofuLPxQ=
Subject key identifier: 7C:FB:5D:B2:4B:60:D1:E1:55:7C:9F:21:71:5A:0F:8A:D4:A6:C7:4F
Authority key identifier: 1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
Certificate issuer: /CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Certificate serial: 018F543765C801B14DBF5F800A5C9CC4F85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
Manifest number: 10F1
Signing time: Tue 07 May 2024 18:01:07 +0000
Manifest this update: Tue 07 May 2024 18:01:07 +0000
Manifest next update: Wed 08 May 2024 18:01:07 +0000
Files and hashes: 1: DbnjwXzvALb4Lrbb27sV0aGzzd4.roa (hash: 6riWSnLDf2foobhTLRSxKrATYvXh/0mfI+4vw9xe1iE=)
2: HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl (hash: aTGgC4K80CPuBXb1KnapoyRhT8Ava1V9WhY8co4T+bI=)
3: Ncg0barPN98eKH5wZnCC5v2vuDI.roa (hash: FjHXVC11s57mwFd3Gxo8Ba52vzo2Q/QHXkW4y2+LSko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:54:37:65:c8:01:b1:4d:bf:5f:80:0a:5c:9c:c4:f8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cbd5746e300091ded1a11a13b16807b4fd0f1fc
Validity
Not Before: May 7 18:01:07 2024 GMT
Not After : May 8 18:01:07 2024 GMT
Subject: CN=7cfb5db24b60d1e1557c9f21715a0f8ad4a6c74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:8f:67:74:bb:58:74:be:6f:bb:69:7b:bd:
58:57:45:6b:c2:55:d7:bd:d3:59:03:8a:bd:76:0b:
d6:c2:66:2b:45:b1:60:df:62:14:94:50:d4:81:df:
75:a8:f1:04:e8:d6:55:d8:e6:56:b8:7a:ab:31:4f:
d5:8e:11:a9:4b:2e:71:5d:75:8c:c7:88:2a:05:39:
98:c1:ee:96:82:ab:f5:b3:2e:6f:f1:37:be:c8:96:
a5:72:af:d2:7b:5c:f1:ae:18:11:30:f5:2b:63:b9:
50:8a:83:5d:be:cb:23:4b:89:52:0c:de:87:d4:c3:
f3:5e:45:66:b1:80:41:35:01:42:3f:12:13:02:b3:
69:f9:a6:6c:5d:a6:0f:01:ca:bc:b8:c0:67:fe:f9:
c5:49:81:2f:e4:3f:6f:5d:7f:0c:d0:29:75:9c:43:
44:03:6f:61:34:4b:5d:36:6b:37:c7:4f:94:85:d1:
a2:ad:2d:35:11:bf:d8:5b:59:c1:b5:b8:b9:fc:41:
b8:f4:68:78:03:74:b2:d4:ea:3b:f3:ef:c5:35:26:
90:b9:7c:6a:e5:56:c1:ee:b3:cb:25:3c:5d:f7:10:
55:fd:a8:af:a0:f4:d5:0a:87:64:77:fc:d9:12:03:
be:df:ce:26:ad:14:42:ac:f6:ef:a3:aa:18:06:e6:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FB:5D:B2:4B:60:D1:E1:55:7C:9F:21:71:5A:0F:8A:D4:A6:C7:4F
X509v3 Authority Key Identifier:
keyid:1C:BD:57:46:E3:00:09:1D:ED:1A:11:A1:3B:16:80:7B:4F:D0:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HL1XRuMACR3tGhGhOxaAe0_Q8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e3086c-d72f-41ea-9444-bdea63e5a7c4/1/HL1XRuMACR3tGhGhOxaAe0_Q8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e9:c9:49:93:46:94:cc:e2:de:0b:0f:4b:3b:68:e3:53:76:
d9:26:d5:c6:40:4c:db:c0:81:f1:60:95:41:ba:4b:1d:8c:2d:
c4:c6:c4:e8:8d:95:36:2c:d2:bd:66:9a:bd:78:53:5d:06:a8:
03:54:12:6e:6c:78:c4:83:4b:cb:98:6e:49:b3:a1:2d:08:2a:
2b:fe:c2:75:16:e5:45:f3:2b:42:29:73:46:cb:33:81:e5:88:
66:f5:92:4e:09:38:63:55:70:83:df:c0:e6:40:52:71:e2:2b:
d4:91:ce:28:93:fb:52:ed:bc:a2:83:7c:00:93:78:c1:bd:f8:
82:0e:2c:79:d3:b3:54:e1:99:12:94:ae:af:6b:e1:97:b1:07:
4c:5b:fd:a8:7e:4c:6f:cb:bb:c2:f9:fd:d7:4c:37:01:df:d6:
49:d5:f6:8f:f9:41:26:f2:9d:ec:75:d7:da:f0:d9:d7:a0:ea:
44:9c:9b:d3:13:30:a2:fe:4d:2f:8c:b4:2e:e9:d1:5b:12:c2:
04:01:d7:b2:87:52:26:01:e1:8b:63:72:59:c4:28:07:63:47:
d6:e4:9b:6a:0f:1b:f9:d2:37:d9:dd:7d:bf:d6:25:56:d7:76:
da:e4:5d:18:f6:94:ea:d7:04:f3:24:13:06:97:de:03:33:94:
34:8c:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 19:56:45 2024 by rpki-client on console-ams.rpki-client.org