Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json)
Hash identifier: g8Zg1ax8wHNxovgDRdRzQvFzn3+hst7lNMeYtRXvnKg=
Subject key identifier: 5D:F7:7B:A7:11:3B:5B:18:2E:66:27:77:58:21:CF:B9:3C:83:5F:BF
Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Certificate serial: 0193523E0ED1598D2EBCAACC038B82A8293A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
Manifest number: 0B00
Signing time: Fri 22 Nov 2024 05:00:18 +0000
Manifest this update: Fri 22 Nov 2024 05:00:18 +0000
Manifest next update: Sat 23 Nov 2024 05:00:18 +0000
Files and hashes: 1: 3Bz-YqwXv_siqmrMPSBci6dTuFA.roa (hash: 2Wm0LzTL/CtGt6Ruijx2KQZItyTkKTmoXKYWR0sUS8A=)
2: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: 6HU2jy5PYx0Ab2s9DpgQRK9/013m+4TTk0hm3W+qK2A=)
3: YAv5pWEwOLyH2oGPHw8dUQcupnA.roa (hash: k92wmwhWcvmQNjjbmhUZgaQuUWAn1qHcFenx66sLV9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:0e:d1:59:8d:2e:bc:aa:cc:03:8b:82:a8:29:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5
Validity
Not Before: Nov 22 05:00:18 2024 GMT
Not After : Nov 23 05:00:18 2024 GMT
Subject: CN=5df77ba7113b5b182e6627775821cfb93c835fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:1e:bf:57:3d:50:7c:6b:51:43:14:e5:3c:
8c:d0:a1:6e:66:59:63:e6:4c:75:71:5e:9b:1f:d6:
c6:bf:1a:1b:8a:a7:bd:a0:d4:71:70:38:83:e3:3a:
27:5f:89:37:a7:15:ef:53:41:9f:80:3e:f2:53:09:
4e:ff:53:bc:3a:e2:c6:4a:c6:10:e7:10:59:91:5f:
d7:96:d1:03:b2:33:8a:34:f3:33:35:fb:57:e2:e4:
fa:48:7e:c9:08:88:a6:56:ea:06:57:eb:8b:d1:10:
e8:11:cb:b5:d4:2c:57:ed:cf:d5:22:2f:46:b2:21:
eb:3a:1f:16:a8:e4:01:44:45:a1:59:bd:33:e6:f6:
81:4b:8c:87:ee:42:3f:ff:9a:c4:8e:ed:47:bf:44:
4e:d9:5b:bf:e1:ea:bd:ad:fd:5d:78:bb:3c:51:aa:
51:d6:9a:51:b6:a9:ae:bc:c7:bb:fd:75:92:c5:8b:
06:09:27:6a:74:92:7d:f4:01:00:f5:39:58:41:93:
1d:40:fc:7c:29:73:6f:b7:6c:d9:db:99:ee:0a:c0:
5e:04:e7:db:4c:b9:8e:b2:c4:d6:47:8b:3b:36:e9:
b5:16:87:40:1f:81:8b:d6:b8:6b:66:83:2d:2c:f7:
28:f0:00:ca:07:46:a2:c7:c9:87:e6:a6:c7:04:16:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F7:7B:A7:11:3B:5B:18:2E:66:27:77:58:21:CF:B9:3C:83:5F:BF
X509v3 Authority Key Identifier:
keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c5:27:5c:ff:57:f6:2c:4a:44:2e:de:30:24:06:1e:dc:e5:
18:13:2c:7d:05:36:d1:d5:bd:66:5f:7d:d8:40:4d:24:2c:a2:
4b:4d:5c:c4:c9:3e:26:57:2d:85:df:a3:3b:de:6c:b0:53:5e:
e4:2a:a1:d3:5f:23:39:f4:c9:4f:e9:ca:c0:95:2d:42:16:ce:
f7:90:88:b3:c1:fa:6a:50:b1:f2:84:55:5a:14:06:28:d8:3d:
8e:ea:89:a0:d4:55:e3:97:69:a9:0f:f8:4b:87:d8:ec:87:8e:
3d:67:ee:72:6f:41:e0:6a:4d:7c:f0:7c:67:8e:ca:1d:21:50:
1f:40:0f:52:0d:e8:36:0f:51:80:87:9d:f9:21:f6:f3:18:57:
a2:d8:b0:5a:86:ef:b0:85:43:64:fd:09:1d:e0:48:f3:0e:7d:
ce:86:91:5e:cd:b0:9d:64:ac:5b:85:00:ee:c9:60:84:f4:fb:
3d:6b:9b:28:9b:27:07:20:82:25:a7:59:55:e0:2b:c0:97:43:
48:a5:10:87:3d:c1:12:42:3a:32:51:a5:37:a3:cc:b0:46:b4:
cb:5e:93:a6:3a:f9:39:36:7b:0e:90:05:a4:ce:33:e8:3d:d7:
76:9b:8c:19:fc:a8:34:7c:ef:46:a9:aa:a1:a8:0d:7c:27:12:
7c:fc:1f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:32 2024 by rpki-client on console-fra.rpki-client.org