Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
File: HDRPEVl1lIgoU6eVgd0r94nusx8.mft (raw, json)
Hash identifier: XeBhJMMBXH+J71eJ4u1W1WOg20oCTWppdgoxIhlwpeI=
Subject key identifier: 39:94:E4:E4:36:C9:20:24:41:92:7A:06:37:12:17:0C:5D:A3:8F:E9
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 0190637184822D3D8C28B8E320A33BBBB52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
Manifest number: 0FBD
Signing time: Sat 29 Jun 2024 10:01:42 +0000
Manifest this update: Sat 29 Jun 2024 10:01:42 +0000
Manifest next update: Sun 30 Jun 2024 10:01:42 +0000
Files and hashes: 1: 0AFvdUY8i39Pvc5ooozuEVLG6_U.roa (hash: kaLXLENs18gGGF3ANae6rxqHTGSJibjHzFcXCucYk/c=)
2: HDRPEVl1lIgoU6eVgd0r94nusx8.crl (hash: oVRF2tp8phiH/LnGLnHugVUbs1fFqwwpfZdCqx2Px6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:63:71:84:82:2d:3d:8c:28:b8:e3:20:a3:3b:bb:b5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: Jun 29 10:01:42 2024 GMT
Not After : Jun 30 10:01:42 2024 GMT
Subject: CN=3994e4e436c9202441927a063712170c5da38fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:8f:ca:22:af:45:65:1d:c7:c3:09:a0:10:
29:3c:c4:4a:79:14:d2:72:98:9e:bc:d4:a0:54:56:
1b:e8:fe:2a:7e:7e:0d:12:30:b6:e1:ed:ff:bd:4c:
2b:94:d6:78:62:f6:5f:78:a3:2a:3b:70:8d:91:8d:
b1:01:95:81:35:43:c3:03:a8:f4:3e:41:53:dc:0c:
5c:f4:ee:ea:14:fd:c7:e8:42:fe:2d:7a:b5:ab:61:
57:b0:6c:25:1f:0c:2d:f0:5b:22:4a:68:a3:5a:f1:
fa:73:08:d6:d8:62:f1:45:b0:64:48:18:40:30:d7:
59:d1:1c:9d:74:ab:f6:1e:25:49:45:ed:ae:03:65:
9f:c5:84:a6:fb:32:f9:45:ff:17:9d:a4:3d:5b:38:
78:ad:db:89:55:e3:5a:ce:ba:79:05:9c:f1:24:37:
8f:6a:4f:c5:7c:42:3e:fe:23:e3:af:c5:6c:d4:1d:
47:37:0e:f1:7b:99:43:e7:e9:eb:be:9f:7b:07:66:
c1:9a:1d:5f:b2:b1:b6:37:ed:6a:05:49:b9:c0:69:
b2:4e:0c:b8:65:7e:a1:88:71:1e:0d:e6:23:ab:18:
c5:73:50:a1:eb:fd:89:7b:c0:9f:19:40:06:8c:51:
63:8d:9b:3c:2f:a0:2a:56:62:a2:37:c8:23:60:bc:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:94:E4:E4:36:C9:20:24:41:92:7A:06:37:12:17:0C:5D:A3:8F:E9
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:66:43:a6:c5:ee:97:2f:c3:5a:62:3a:7f:78:db:02:8d:78:
a1:72:f1:5b:72:c5:a9:79:ca:49:34:cd:05:63:79:d5:1a:86:
4e:3f:59:eb:d2:38:52:ac:3b:56:78:1e:26:e9:b5:ca:bf:04:
1b:4a:5c:c4:95:8c:25:0e:4a:b2:cb:90:1f:ea:61:ba:65:37:
38:d9:46:a7:00:2d:26:78:20:86:a4:b8:d3:b5:28:aa:31:d8:
fa:90:4b:12:a7:ae:87:23:c1:d5:91:6e:e0:a8:e9:00:12:94:
b4:91:b0:bb:f4:11:1b:5c:46:7d:0a:76:77:19:bd:6f:7f:ef:
a9:a8:90:20:42:35:60:f8:3c:de:e7:c5:15:8c:2c:40:08:15:
e0:90:fc:9e:36:60:7a:74:95:ef:ab:aa:1d:10:4b:9e:3b:b2:
0b:46:26:b2:1b:ae:4f:88:12:5f:05:d2:f7:fa:ba:e9:0c:29:
4c:2c:8a:d3:48:8a:7d:c6:01:c2:ea:78:3c:cc:a8:56:60:86:
34:c8:be:c9:ac:00:15:91:b1:f1:d7:c1:10:9d:61:72:c3:7c:
3b:6c:b4:32:00:15:aa:7b:e9:c3:60:23:b5:bd:ff:0a:3e:28:
52:98:b9:7a:17:b8:f9:a8:1a:4c:7c:c6:4a:60:fa:f7:1b:db:
99:44:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 11:34:34 2024 by rpki-client on console-fra.rpki-client.org