Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
File: HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json)
Hash identifier: CjZqzQ3eVmtpT2ayPtpKIAJJgCAZqotF3295yB22vKA=
Subject key identifier: 3B:99:BD:C9:7C:36:C7:9C:F2:87:19:06:C9:28:95:E6:29:DB:5C:D5
Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Certificate serial: 01935764738362BF7247C1557E48141C9848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
Manifest number: 12C2
Signing time: Sat 23 Nov 2024 05:00:21 +0000
Manifest this update: Sat 23 Nov 2024 05:00:21 +0000
Manifest next update: Sun 24 Nov 2024 05:00:21 +0000
Files and hashes: 1: 1SPBEsoqOukJG5dNeIG114xl2WU.roa (hash: T9nPuFKQ0C916hnxsxoUGBYUtf71eXWQ8c5VX1yJ/Gs=)
2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: BuY31wJZYyCECckanXN+/++hReu/1Av9PdX21+/6fxE=)
3: y6zawcFwbL-xs6VoHJJscetYGh4.roa (hash: wBJeSaCCXSg6E0vu8tE4aA3DYm8SDRD1im1ggIkONX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:73:83:62:bf:72:47:c1:55:7e:48:14:1c:98:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533
Validity
Not Before: Nov 23 05:00:21 2024 GMT
Not After : Nov 24 05:00:21 2024 GMT
Subject: CN=3b99bdc97c36c79cf2871906c92895e629db5cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:f7:25:39:a5:9b:a9:61:ac:f3:46:9d:80:
42:54:b9:b6:46:7b:28:53:a8:c3:22:2c:7a:54:17:
67:4d:9e:31:2f:b4:c1:6d:89:08:4c:9a:91:b4:36:
8f:ee:95:22:7f:8a:ff:bf:90:49:7f:8d:89:f1:ef:
08:5a:85:7e:b5:24:7f:24:3f:63:f1:bb:fe:3f:9b:
37:d9:ba:c5:0d:1a:93:96:c4:7b:b1:1b:aa:bc:fd:
17:2a:b5:5e:dc:fc:a9:a9:52:bf:e2:57:b3:03:ff:
a0:26:e0:d0:78:38:06:f9:47:03:65:43:2a:8d:9b:
cf:da:e8:14:16:c4:b6:df:01:35:69:d9:3d:2d:7f:
3d:f8:84:8a:0d:5d:ca:66:7d:27:50:fa:69:95:8e:
07:67:55:71:ae:55:8e:ba:21:86:3a:f1:3f:64:48:
b8:66:34:08:a6:03:0b:aa:24:a5:65:6c:8d:61:b8:
85:8f:8a:c0:f8:ca:15:7d:a0:11:25:f1:b7:05:2c:
58:3a:39:96:e7:cf:65:20:9c:f4:7d:53:1e:d1:34:
b8:5c:05:76:01:a3:a3:93:27:03:19:69:8d:e9:d2:
08:ff:e7:93:9b:db:dd:fe:a0:86:70:f0:21:54:fe:
1e:0c:c1:30:b9:80:6f:da:21:84:8a:d2:d1:17:65:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:99:BD:C9:7C:36:C7:9C:F2:87:19:06:C9:28:95:E6:29:DB:5C:D5
X509v3 Authority Key Identifier:
keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:57:e7:c9:ed:d4:fb:9f:3a:e8:c1:10:5b:9e:46:23:68:cc:
e0:bc:16:b9:21:d4:06:0c:f0:67:26:db:b9:ce:de:98:0f:be:
87:a3:5b:9e:7b:fb:41:e3:3c:9f:cd:0d:4c:5c:a0:9b:ba:cc:
74:1c:a6:c7:ec:d3:ff:d2:90:ff:8b:e4:4d:84:62:c4:40:0f:
0a:82:e1:82:bf:67:73:14:90:3b:98:2b:dd:e1:bf:ab:53:95:
5f:33:8c:f6:f4:4d:7a:a3:7f:b0:fd:11:89:58:d5:84:4c:29:
2b:02:44:91:fa:9d:ab:15:ff:13:1d:c4:bb:f0:44:88:e4:11:
85:1a:55:8f:91:e7:bf:df:54:e5:7f:1f:ed:cf:84:76:c9:55:
05:32:06:50:1f:0e:4e:af:7c:75:74:95:fd:6f:63:b2:3b:55:
2c:5c:ba:10:92:dd:c3:b0:4b:f1:64:43:d0:2b:97:96:17:25:
d5:fe:8f:b7:f0:90:00:fb:58:92:fa:e1:f8:ab:a1:f9:08:0f:
c9:4c:ab:52:14:a0:c5:b9:90:ba:71:d8:a9:a1:a9:ca:6f:ba:
35:30:6d:02:95:8f:41:89:49:2b:db:cd:0d:6a:5e:10:fe:d2:
73:02:ba:21:52:d6:9b:f5:d0:4d:4b:d3:14:26:b2:b2:c7:13:
e1:c6:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:16:34 2024 by rpki-client on console-ams.rpki-client.org