Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier: LWy0nu5z6xkt5drY7/e85kUgR/uKLLpIAny7g6XjLXQ=
Subject key identifier: A7:21:B3:05:1C:2B:7F:3E:8F:93:97:B9:CE:86:4E:D0:66:97:A7:86
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 0193572DEFA4FE3D56898928CAD5C2D8B9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number: 0F53
Signing time: Sat 23 Nov 2024 04:00:48 +0000
Manifest this update: Sat 23 Nov 2024 04:00:48 +0000
Manifest next update: Sun 24 Nov 2024 04:00:48 +0000
Files and hashes: 1: L_6YBDXl9nkxw-60R6-PEtpreP4.roa (hash: +jVobK/MzFpbPamL3+eUoG/O7EaNRX+OsV/7jDe95pk=)
2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: uTMJK7JZcBSgetErzgxhrfkeR28TzA3RWYfaBbublEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:ef:a4:fe:3d:56:89:89:28:ca:d5:c2:d8:b9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Nov 23 04:00:48 2024 GMT
Not After : Nov 24 04:00:48 2024 GMT
Subject: CN=a721b3051c2b7f3e8f9397b9ce864ed06697a786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:60:d5:f6:fc:77:d6:97:7b:81:7a:10:b2:
b2:38:74:72:34:a0:a3:f2:dc:e4:45:2e:1b:25:52:
0b:fa:1a:dd:d0:de:3e:c0:21:4d:cf:f3:98:cd:cf:
2b:7e:c3:c2:9b:9d:e3:0f:48:fe:c7:d2:f5:ad:f7:
c7:bd:b7:0b:4f:d9:7f:c8:bd:7b:56:ed:be:84:83:
bc:88:d1:e0:2b:64:b9:aa:f1:0f:8d:5a:fa:30:d9:
b4:1e:80:fd:12:08:2c:f1:93:46:b8:0d:fd:b2:2a:
c5:fe:eb:a8:29:e7:e4:a9:a1:a1:66:87:05:60:b7:
1c:01:a4:d9:c8:ab:5a:22:17:54:45:e4:72:b2:fe:
f7:e3:58:77:34:9a:53:5c:79:08:37:f3:3d:bb:0a:
84:bf:87:3c:b6:76:df:53:22:ab:99:f3:b7:c4:20:
5f:11:e9:dc:61:db:6c:a1:e7:a8:cb:d2:8b:3a:2e:
1e:31:3b:e4:a5:7f:a7:21:d2:01:d3:41:9d:2f:65:
28:ed:0d:6c:55:13:88:28:a9:e2:18:6d:00:dd:b5:
d8:52:8b:4b:6f:12:82:c6:b6:33:65:9b:fd:e1:25:
76:e7:19:d8:b3:2a:b0:1c:ce:83:9d:b5:cf:02:dc:
7b:1c:29:54:05:e0:7d:d0:cf:23:32:ca:95:80:25:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:21:B3:05:1C:2B:7F:3E:8F:93:97:B9:CE:86:4E:D0:66:97:A7:86
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b7:a3:f5:7a:f4:10:b9:9c:ee:4d:bc:85:7c:36:b9:98:33:
0e:ff:61:f1:ee:85:b9:5d:2d:cc:be:d0:b6:bb:f8:cb:91:66:
9c:2c:32:48:03:8a:b4:f2:ad:c2:1c:2c:c5:26:a9:e0:f0:ac:
5e:aa:e7:a3:71:6d:1f:59:73:cf:00:d5:7f:51:8e:4a:a6:02:
86:90:10:76:6c:c7:5f:83:82:50:a7:a6:55:d1:37:37:91:d4:
51:c9:c2:67:3e:25:d3:a1:30:5a:0d:d9:55:9b:f3:ab:93:b1:
54:c1:91:f0:c6:d5:81:e9:f4:0f:4e:f8:d5:8b:33:0b:84:13:
48:74:ba:32:e7:66:15:51:ac:bc:2c:bd:5d:8f:88:0d:01:d0:
93:33:68:fb:46:8e:49:19:42:03:67:f2:90:69:67:1f:c0:0e:
b0:ec:b1:3d:e8:4f:ab:01:f3:8e:04:a2:ab:2b:01:01:23:8d:
24:e2:50:74:f2:2e:cb:14:5b:3a:83:03:0b:fb:15:5f:f6:4c:
33:36:f8:00:3e:ff:09:bc:16:c6:71:8a:50:b5:9c:42:d0:54:
02:35:c7:a4:75:37:41:42:b1:0e:82:1b:58:94:2b:03:87:43:
93:c2:e1:d5:76:db:b6:73:cc:a0:bb:f0:54:69:3c:85:d8:64:
7f:37:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:24 2024 by rpki-client on console-ams.rpki-client.org