Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
File: fHIvhbMedl2Pd7aStdKoTBEdgF0.mft (raw, json)
Hash identifier: tHvzetooEQAPhZAnkSmp/ss5jqceamell/pwgKqwOQM=
Subject key identifier: 46:A8:72:A1:33:C0:6B:38:F3:FC:3C:34:CF:C3:7C:AB:BA:4E:1F:B3
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 018F6C4214FF7550FAFE8E1AEB3DD30D70CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
Manifest number: 0B47
Signing time: Sun 12 May 2024 10:03:40 +0000
Manifest this update: Sun 12 May 2024 10:03:40 +0000
Manifest next update: Mon 13 May 2024 10:03:40 +0000
Files and hashes: 1: 8M-Fd7i8yn08NXFIgESg56Kaqnk.roa (hash: YcGRltwRX/6T41YZn/4mXKbMIHtYupKsfFO4jmof3mM=)
2: HMD5b9WnzuPHD5baQXGlltJ3NgM.roa (hash: DoWkGSlgoF+2QQGiu9aL1HgtX9tHoq2FnZy8zdRyGwc=)
3: fHIvhbMedl2Pd7aStdKoTBEdgF0.crl (hash: aJe+GkfDHjGWOwEnjdJS1oJHdLqa3shRyGX3fpuvyNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:6c:42:14:ff:75:50:fa:fe:8e:1a:eb:3d:d3:0d:70:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: May 12 10:03:40 2024 GMT
Not After : May 13 10:03:40 2024 GMT
Subject: CN=46a872a133c06b38f3fc3c34cfc37cabba4e1fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:b4:e6:f8:50:91:16:c2:fb:ec:81:7d:66:
fd:0c:a1:a5:b4:e1:35:56:88:46:71:ac:ea:94:db:
f2:73:4c:b6:38:c4:93:19:41:48:68:61:3e:59:e5:
7d:77:5e:25:c6:03:c6:9f:95:6e:cd:94:f4:f4:f5:
78:cd:c1:52:a3:4c:a9:51:67:bc:a2:ad:83:44:70:
54:1e:09:e7:26:ce:bd:4e:f9:9f:20:ea:a9:60:cc:
b3:7c:b8:a9:ef:6c:de:4a:cc:ad:a1:0a:c5:b2:da:
1f:c2:8a:4e:20:6a:20:a5:72:32:1a:ae:29:1e:ef:
ff:f8:1a:2f:0d:19:cd:c9:06:1e:08:3f:34:00:8e:
5f:72:53:94:64:41:c4:d1:8d:ed:04:65:ee:00:c2:
75:c0:13:ca:6f:c6:77:87:39:94:cd:d7:c8:29:b2:
27:46:76:28:60:13:c2:1d:e3:2e:20:92:e4:e0:d1:
29:ec:d1:fe:2a:d4:2d:d4:4d:ef:25:1a:49:c5:8f:
7b:31:1d:49:63:f7:c0:25:2b:4d:bc:13:91:f5:1e:
e9:ff:92:35:ca:5e:48:1d:bf:98:3a:df:63:8d:ff:
ae:dd:e4:3b:5a:62:90:29:83:7f:da:66:d9:0c:32:
e3:43:d0:99:1a:8d:32:e3:7e:a4:78:5d:46:b3:d4:
82:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A8:72:A1:33:C0:6B:38:F3:FC:3C:34:CF:C3:7C:AB:BA:4E:1F:B3
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:49:d3:91:2e:b6:17:31:73:e6:c8:88:0f:e6:15:e2:15:c4:
a8:82:24:eb:a0:65:8b:e2:7f:34:d1:fa:2e:a5:36:97:1f:9d:
52:c2:60:1f:be:01:61:5c:a0:3a:cc:b9:79:f8:89:71:78:11:
f0:fe:29:37:de:2d:7d:ad:82:e1:6f:96:b0:2c:72:67:26:75:
4b:0a:e4:ef:87:43:87:75:a5:a3:11:00:89:d9:ab:ea:81:c1:
ca:32:b3:58:a6:37:61:c0:e5:a2:c7:16:af:d0:48:4d:40:de:
04:22:f3:8a:9c:02:89:3e:ed:7a:38:b9:3d:cf:94:d0:c7:0e:
51:3d:ad:ce:0f:5f:42:96:d1:22:bc:23:bd:4b:80:20:f0:19:
2c:3c:fe:99:4e:51:0e:fb:fe:6c:90:79:f1:4a:b7:b9:b2:a4:
83:80:b9:72:ac:49:5a:06:d8:0a:ba:30:de:2d:c5:b1:d4:fb:
41:6a:3d:bc:27:25:cf:5a:f1:9d:42:a6:36:e1:5d:1c:65:17:
df:a4:27:aa:e7:6c:8c:04:20:d9:3a:bf:e3:a8:72:e0:31:ba:
ca:0e:10:c9:2a:c5:6c:4b:5b:d8:3f:d5:bc:f1:52:ca:13:e9:
ff:4c:56:3f:16:f2:73:84:11:73:e9:9e:8d:37:30:3e:80:8e:
80:83:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 11:39:55 2024 by rpki-client on console-ams.rpki-client.org