Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: 9A9HQfV4Sql9jGZqD7XaLV72lRCsKceQOyqufv0z/8Q=
Subject key identifier: 48:76:8E:48:1F:DC:97:85:8D:C9:CA:CD:35:89:91:6F:2C:37:02:56
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 019351994C4CFDA5CCE3FE7D8CE25D1E4AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 9D
Signing time: Fri 22 Nov 2024 02:00:20 +0000
Manifest this update: Fri 22 Nov 2024 02:00:20 +0000
Manifest next update: Sat 23 Nov 2024 02:00:20 +0000
Files and hashes: 1: MC0w0XnrkmPxcssbSp9NplDDG98.roa (hash: 6GG0nGuHjB+jY5TyvBwJNeLinlZzOImndW5d8FVxJLk=)
2: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: cLhkvCIoG5ZjACQfwjU6Cb83I8oYPC4ZAfil7D0PVcw=)
3: ovyiGyUE9NJCyHpjy3osG405CDg.roa (hash: NDWmil8aNTXJBsVc8NaTPkV4/TUsSJ9Kv/kUr13aR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:4c:4c:fd:a5:cc:e3:fe:7d:8c:e2:5d:1e:4a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Nov 22 02:00:20 2024 GMT
Not After : Nov 23 02:00:20 2024 GMT
Subject: CN=48768e481fdc97858dc9cacd3589916f2c370256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:e8:40:ba:58:84:6b:f4:e2:1f:61:5c:df:
d4:94:a3:d0:fd:90:fc:94:38:48:c3:d9:cd:18:6c:
fc:19:3a:16:3b:73:e5:df:e3:6c:53:18:18:22:43:
40:23:71:e9:90:60:26:0b:19:4f:32:17:9f:34:10:
36:51:90:a2:66:06:c9:b6:0f:5e:a6:25:fa:07:4e:
45:e9:9d:5f:ba:2c:98:4a:77:e6:3f:50:40:a5:e4:
ef:e5:64:62:46:77:70:9a:95:0d:e1:b7:eb:f8:34:
3e:b2:0d:ff:62:95:b3:3a:48:3f:b9:a8:c4:54:90:
35:96:41:98:52:98:62:af:0c:63:92:22:9f:08:05:
d5:6c:87:8b:d0:1e:7b:c9:48:23:e6:49:8e:98:1c:
97:22:09:26:4e:b0:db:fb:79:3c:d0:28:25:82:ba:
7e:dd:17:81:20:b9:f3:37:c4:ed:dd:1c:63:95:d9:
c0:68:86:8c:01:25:15:14:cb:6c:99:15:6e:76:aa:
7c:21:f1:31:7f:b3:e9:27:f8:64:e9:e3:69:ab:ba:
a3:9c:b5:48:1b:ba:8e:d6:2b:ad:cb:de:5e:12:37:
1c:f2:7e:b9:a9:ed:bd:5c:14:a5:0f:6f:32:44:92:
27:31:87:f3:96:45:67:d1:aa:30:08:5b:61:6b:48:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:76:8E:48:1F:DC:97:85:8D:C9:CA:CD:35:89:91:6F:2C:37:02:56
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c0:71:2d:f8:0c:e8:bc:6e:1b:d6:a8:6a:e7:a5:c5:d2:f8:
8a:64:24:ee:e9:88:7c:72:4e:de:57:41:42:47:4c:08:98:16:
e5:7a:e5:de:bc:f3:80:90:d6:85:fb:cb:94:3c:67:74:3d:52:
4c:6a:1b:b8:3a:bc:bc:7f:e7:7b:4a:7c:4f:c6:ac:7c:28:eb:
06:c5:d8:ac:d8:d3:38:fe:d5:fa:b7:a0:f7:11:21:ae:8f:05:
e0:e2:01:08:b0:69:8f:3a:40:df:a5:2d:85:d8:cb:3c:e3:25:
85:e8:cc:b4:f8:14:be:02:d9:5d:07:2e:af:99:fc:ec:ed:f8:
43:57:36:d4:7e:e3:73:dc:0b:5e:de:f9:ae:ce:d1:a1:95:f8:
34:6b:51:47:1d:17:16:e0:c6:b5:e0:f0:a9:96:1b:36:f4:58:
dd:e3:43:2b:39:76:29:86:f5:51:06:6e:16:80:f1:2f:d7:90:
0f:4f:ba:73:0f:d2:02:d5:09:ac:e4:25:e1:66:5d:7f:2d:83:
68:71:28:7c:93:1b:ac:fa:c6:85:d9:c7:31:4c:46:4d:91:45:
3f:a7:45:24:49:92:e4:43:bf:23:49:a1:04:3a:23:4a:64:11:
b5:2c:a8:4c:6a:02:28:64:2b:f3:11:91:ad:fb:ac:a2:2d:da:
ab:2f:f8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:28 2024 by rpki-client on console-ams.rpki-client.org