Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier: TJiN8VF6aKrFxEo2R9dM/LwqSGIp+Uu6Ie0UeF450qI=
Subject key identifier: 3B:5E:62:91:27:37:75:CA:9B:8F:00:CE:56:BD:39:8F:A9:F8:21:25
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial: 01936A4651E715B586EFA8C34D7C3B8F8AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number: 08C1
Signing time: Tue 26 Nov 2024 21:00:13 +0000
Manifest this update: Tue 26 Nov 2024 21:00:13 +0000
Manifest next update: Wed 27 Nov 2024 21:00:13 +0000
Files and hashes: 1: 26vdi3i3-coQYIKBdb4bkDvKg5c.roa (hash: 2KcMWsKD3i1cs5U/nnczaE0l7vEhxTZrXosDte6EWyA=)
2: 7rVjxosQnGiU5mwut_AFDi6Q8Vs.roa (hash: 582qOKWd2kg9kfGJt6Cr5ES3veuiAWpDTaXK9dyqv44=)
3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: UaFmVn8BApMHm5F1Gvotrfvdqdjpl6H7lnIrfyzbo8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:51:e7:15:b5:86:ef:a8:c3:4d:7c:3b:8f:8a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Validity
Not Before: Nov 26 21:00:13 2024 GMT
Not After : Nov 27 21:00:13 2024 GMT
Subject: CN=3b5e6291273775ca9b8f00ce56bd398fa9f82125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:14:23:c5:3f:15:df:14:7c:d8:12:32:4a:
17:68:f7:b5:a5:5e:f7:b6:b2:ad:0e:c6:95:0d:6b:
2c:a5:46:67:d8:01:f9:0e:fe:af:3f:77:44:c2:4c:
1c:cc:ba:4f:f2:3d:10:37:fa:3c:5c:bb:2c:56:d9:
bf:8a:2e:41:7d:ec:db:4d:22:32:74:2a:76:75:71:
f8:8f:20:68:64:ee:99:6c:80:75:7b:0f:93:c5:d3:
d5:c6:23:15:1d:3e:be:b5:67:7e:70:77:7a:bf:ad:
b1:2a:6d:4c:a8:65:b4:9e:9f:bb:4b:cc:c1:4e:05:
46:02:50:b3:9b:7a:f5:9c:7c:1b:d9:dc:19:64:a1:
96:90:8d:23:33:e3:50:e3:96:77:3a:2f:8d:2d:af:
58:46:56:a2:a2:b1:7a:d2:21:8d:79:14:93:25:5f:
d8:61:79:dc:6b:be:24:c8:06:75:85:3a:b2:ef:46:
70:eb:93:78:90:d0:18:d4:0b:a4:0c:9d:2d:cd:23:
35:8a:48:ea:7d:c6:12:b6:2c:4f:f6:4f:62:31:21:
72:de:c2:05:08:3b:ad:43:51:27:36:f3:f1:16:a1:
e4:14:60:1b:1e:7a:b8:9f:43:1a:13:4e:e9:9b:7b:
12:7a:13:c3:4b:97:ba:46:1f:cd:68:0c:c8:78:29:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5E:62:91:27:37:75:CA:9B:8F:00:CE:56:BD:39:8F:A9:F8:21:25
X509v3 Authority Key Identifier:
keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c6:66:8c:c6:70:ac:80:dc:a7:1a:b3:81:36:7a:e8:88:37:
c2:9f:d3:d5:49:29:54:ae:fe:6b:6b:64:74:0e:4b:bf:70:6e:
98:57:f0:95:9e:24:11:cb:80:c0:5f:02:d3:65:9e:61:99:ad:
f2:87:c5:bf:75:e8:69:ae:60:9e:ef:95:45:61:4d:7a:b2:b9:
67:0c:05:6f:c4:92:a9:13:81:70:9c:4e:64:1e:e9:13:d5:ce:
b7:35:e3:c8:fa:b3:21:d3:90:09:3a:89:5a:2d:d0:e0:89:8d:
f6:17:8f:b2:bf:c2:cb:96:50:5b:76:2b:c1:22:77:78:43:70:
5e:74:07:00:64:f7:e0:38:ed:d4:69:de:f2:83:57:c7:2f:be:
c9:83:eb:61:b8:9f:fe:2b:de:6e:4f:6a:91:16:e6:3d:a9:fc:
ed:3c:02:ce:a3:a0:92:a0:e9:fb:98:f9:7b:af:a6:3a:5b:16:
ab:ef:1f:f2:bd:ab:9d:89:fc:c7:ce:92:a9:9b:c6:dd:0b:89:
18:f8:20:60:f5:85:33:06:5d:a6:af:f6:72:da:32:9c:25:f3:
d4:46:73:2f:a0:47:ea:6c:34:bf:5c:8c:ef:a9:40:68:89:95:
09:df:5c:f2:2a:15:47:53:d3:85:14:02:03:f1:84:f1:5d:89:
10:73:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:47 2024 by rpki-client on console-fra.rpki-client.org