Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
File: hAKSSGHLwIjGVahyU1qQMQige_E.mft (raw, json)
Hash identifier: l52f5u0Y8/OZYZT4mppo+U858kmAMpvyk1v7G26d0Wk=
Subject key identifier: 2B:80:60:7B:2B:F5:38:C4:99:18:9A:55:2F:CC:E4:71:11:47:A4:41
Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
Certificate issuer: /CN=8402924861cbc088c655a872535a903108a07bf1
Certificate serial: 0193610CDF20C4A38E70E56B68D7F01359C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
Manifest number: 0FAF
Signing time: Mon 25 Nov 2024 02:00:53 +0000
Manifest this update: Mon 25 Nov 2024 02:00:53 +0000
Manifest next update: Tue 26 Nov 2024 02:00:53 +0000
Files and hashes: 1: T3jV-fHwzJxr4zBZDEQQlxz8CFc.roa (hash: yMhfTcCc+ydFDI6jb7Y+kbVjEHZSACpqdekf1/pHw3E=)
2: hAKSSGHLwIjGVahyU1qQMQige_E.crl (hash: AmOmlBJtIqHu3V7hcq+4aTgRWcoBK/nIYDVyixIYIbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:61:0c:df:20:c4:a3:8e:70:e5:6b:68:d7:f0:13:59:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8402924861cbc088c655a872535a903108a07bf1
Validity
Not Before: Nov 25 02:00:53 2024 GMT
Not After : Nov 26 02:00:53 2024 GMT
Subject: CN=2b80607b2bf538c499189a552fcce4711147a441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:28:43:51:97:1b:d6:4b:c8:8e:db:72:11:7b:
04:6a:3a:13:bf:cc:a4:69:41:e2:02:83:2c:50:33:
22:c7:01:fe:2f:57:99:8e:c3:f4:2b:6a:bf:eb:94:
b8:dd:ad:a3:ef:85:c1:85:c4:3d:19:f6:cb:65:1e:
62:1b:1a:ba:e8:ee:96:6e:59:a6:fd:d1:08:91:a6:
8d:2a:6d:75:b9:57:4c:8f:50:53:81:00:35:ea:6d:
a4:6f:ba:46:5a:8a:41:9e:89:37:aa:6d:24:e9:0c:
85:25:27:18:ce:ad:19:70:7f:5e:59:0a:78:ba:0e:
2a:2b:12:db:19:24:36:5e:0d:40:15:29:22:c9:aa:
80:dc:e2:b8:25:1f:68:f1:57:4e:4b:de:c0:92:fc:
c7:01:50:9f:03:1b:41:5d:b4:f7:92:95:75:d3:96:
13:14:45:28:7a:dd:1c:2c:23:1a:40:99:5d:b2:0d:
43:10:35:6f:b7:89:2c:1d:ef:45:53:27:44:69:6d:
4d:db:b6:b8:ab:68:90:be:1a:7c:db:17:d3:5a:02:
18:9f:d3:86:29:c3:cc:00:fd:0c:f6:ed:63:c2:d5:
bb:4f:59:e4:50:3a:cb:fd:43:e4:3c:fd:6a:c6:4f:
89:84:b9:7f:36:c1:7c:7d:f6:05:fb:83:ed:ae:d7:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:80:60:7B:2B:F5:38:C4:99:18:9A:55:2F:CC:E4:71:11:47:A4:41
X509v3 Authority Key Identifier:
keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:92:e5:46:ef:92:dc:c5:e2:38:d6:cd:5c:ae:0d:6a:65:bd:
a0:5a:40:75:fc:fc:f6:c9:bf:f2:36:27:8f:bd:93:5c:14:dd:
6d:71:6f:a5:f3:23:09:31:86:c4:42:cb:73:2c:cd:b1:82:f2:
e3:f5:a1:71:76:a7:da:43:22:f1:80:3b:41:f1:d3:4d:5b:68:
d4:e3:91:aa:f5:cc:91:be:15:3f:4b:7d:a7:fe:79:b6:6b:74:
db:de:9a:80:0d:3f:43:70:76:56:e6:4c:06:fc:a5:de:1f:9c:
6d:dc:4e:8d:9d:2c:37:f8:e0:66:95:0b:cb:78:d1:29:f5:c6:
39:17:4e:49:28:93:2c:88:3f:c2:7e:74:af:14:fd:16:39:21:
8c:31:bd:bc:c2:ae:fb:9a:3a:29:84:f5:df:66:3c:68:97:16:
be:39:fb:93:fa:d0:52:a0:27:ee:f3:9f:20:97:26:64:e9:28:
4e:f3:e8:a1:08:54:58:55:20:5d:72:6d:69:d7:fe:9f:b9:36:
08:d3:e0:42:f2:88:50:0c:5f:62:bd:c2:81:0c:b4:a8:2a:1c:
ae:10:93:21:12:dd:e4:81:e7:62:b1:a1:3f:1d:6b:36:4b:3e:
dd:57:f0:ef:83:00:56:23:53:86:c3:e2:f1:0e:b2:65:af:83:
5c:c0:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:22:53 2024 by rpki-client on console-ams.rpki-client.org