Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json)
Hash identifier: QPQApTSx1bDijjTIdp8Iv146TeZCnXtzLUxo+Kqzu58=
Subject key identifier: 84:A4:DA:45:C1:E4:12:42:D3:5F:15:7D:09:39:29:1E:F0:C9:1C:9C
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 019405D81232E9A71DE7566B9DBC1482C27D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
Manifest number: 0FB1
Signing time: Fri 27 Dec 2024 02:00:34 +0000
Manifest this update: Fri 27 Dec 2024 02:00:34 +0000
Manifest next update: Sat 28 Dec 2024 02:00:34 +0000
Files and hashes: 1: BHcT026iHqb04b4n9DN3EQk40Vk.roa (hash: xxV+yuJslM2/X6x1Lnvn583I4OGYvNTWmvCajpXJ7cA=)
2: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: 72n10L2KPaKrRWhmEib+4TtzAUtxt6v8P/Qhakyql0o=)
3: S8_XJzDsgwOZ8ktGIdqaGxgfoFY.roa (hash: 4JJso85fN6VUSuicVinGOHLgJHIuWcouO20h8sUv5nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:d8:12:32:e9:a7:1d:e7:56:6b:9d:bc:14:82:c2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: Dec 27 02:00:34 2024 GMT
Not After : Dec 28 02:00:34 2024 GMT
Subject: CN=84a4da45c1e41242d35f157d0939291ef0c91c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a8:cd:41:ed:db:c9:a9:85:f6:5a:91:2e:d5:
3e:31:8d:92:0e:c1:8f:6d:7a:52:4e:db:7b:0f:fd:
3e:ef:37:17:04:00:0e:49:2b:d5:3c:ab:49:2a:41:
e9:a6:f2:d9:a7:d4:2e:ba:26:f5:14:02:ca:ee:11:
53:ae:9e:5d:29:2e:38:77:8c:4d:2e:0e:6a:d8:2c:
79:c4:49:eb:dc:c6:32:f9:fb:0a:ea:39:32:c9:9c:
65:2d:57:97:1c:70:68:b4:94:04:db:40:cf:4a:fd:
05:64:43:de:d8:52:74:fd:65:a1:df:bb:f6:36:d4:
bd:c1:4e:e0:fc:4d:ea:2b:6e:ac:be:f6:d5:96:8d:
50:ec:71:31:89:2d:ad:2e:9b:c6:c6:51:b5:84:3b:
3f:ee:12:98:c4:07:52:b3:a9:54:f3:fe:3e:5e:06:
ec:14:17:11:98:2c:c7:ea:31:ac:54:f3:44:9c:20:
6d:35:91:70:29:ef:c4:4d:06:ee:59:cd:d2:80:9d:
5f:cc:80:db:6e:4b:4e:6f:57:66:07:e1:32:0d:79:
4d:fa:3e:26:b1:17:d2:29:b2:d4:3b:17:48:46:23:
19:18:a1:62:0e:62:b6:c6:78:85:17:89:85:b6:12:
54:66:25:0e:20:51:9f:d7:45:6b:fa:97:5f:e0:ac:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:DA:45:C1:E4:12:42:D3:5F:15:7D:09:39:29:1E:F0:C9:1C:9C
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c7:43:47:3d:f9:9b:93:b4:4d:7f:79:c2:84:af:72:50:75:
22:15:e2:8f:01:52:9e:85:04:09:a5:77:54:a4:35:13:d7:07:
f9:71:c3:47:0b:7c:80:97:c4:25:78:02:76:7e:09:26:cc:a8:
45:d7:78:7f:a9:a7:16:e4:6c:33:f9:39:82:ee:02:b3:47:e0:
30:2a:88:e5:b6:dd:a6:94:20:ee:a1:4d:2f:e0:68:4d:2c:c8:
bb:6c:90:84:e4:8d:c7:50:3a:b4:e4:76:cd:07:25:04:6b:ad:
41:37:c2:11:b9:78:1a:26:ee:84:bc:d2:8e:3a:38:9b:82:26:
50:1e:cd:92:7e:7a:54:d4:7f:da:07:e6:c6:d9:50:df:a0:c9:
dc:19:2b:a6:b8:ed:7e:c4:e7:d2:f9:44:74:f7:d6:bb:09:86:
dc:64:98:ad:0a:b7:63:51:de:53:4d:0e:0b:97:10:ed:8e:ac:
7c:b7:05:5c:f5:55:45:d4:3f:ca:6b:33:dd:ec:9e:c6:93:20:
21:40:4d:99:ee:03:41:1d:89:69:9e:09:86:bb:dc:16:31:b3:
81:b8:f8:7a:76:e6:61:6e:c0:da:4a:bf:48:ce:b9:c4:4c:f2:
d7:7d:4d:5c:5a:07:7a:32:e5:58:03:72:c0:70:47:92:56:b9:
89:94:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:50:28 2024 by rpki-client on console-ams.rpki-client.org