Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: tZToFD20Rq5Sc0QXhYV19FYMMODKKfdQBwPU8DpDSTc=
Subject key identifier: B7:B2:1C:50:D9:18:23:91:8C:17:42:7E:5C:A1:98:FF:CE:1F:52:AA
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 01936B22870BF021ACE6D304284A481208EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 01DA
Signing time: Wed 27 Nov 2024 01:00:45 +0000
Manifest this update: Wed 27 Nov 2024 01:00:45 +0000
Manifest next update: Thu 28 Nov 2024 01:00:45 +0000
Files and hashes: 1: ClDjUWbi2esy2PSgT6kDL1ncJjw.roa (hash: WC+f3Ltvc/wa06FKjC9JzaVW+jYS1GRWTokK+eQCenc=)
2: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: TSGWsCngoTZxMwofk3JNgl809NZGAAvzJqCwZEe9If0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:87:0b:f0:21:ac:e6:d3:04:28:4a:48:12:08:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Nov 27 01:00:45 2024 GMT
Not After : Nov 28 01:00:45 2024 GMT
Subject: CN=b7b21c50d91823918c17427e5ca198ffce1f52aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:4b:62:b7:7f:ce:34:49:57:29:41:c0:50:
6c:ef:51:84:f6:44:51:93:9a:65:90:12:e7:a5:5a:
5b:42:8a:bd:21:68:12:63:e7:23:99:46:e0:05:e7:
1b:8c:62:4e:75:65:b4:61:20:9e:c7:3d:d9:4a:4c:
cb:8f:f6:19:10:16:40:dd:50:4c:bc:e7:55:78:78:
49:b6:04:69:6f:4a:eb:e9:c6:56:0c:92:d6:10:b4:
d1:35:19:ed:f8:4c:1c:be:c9:55:f0:5c:5f:91:e6:
38:89:6f:6a:4f:92:45:24:32:3e:b4:70:61:98:18:
48:db:e7:52:15:93:78:88:e4:61:46:6b:6f:24:83:
2d:1c:67:c9:fc:9c:74:3c:f6:d3:51:44:95:cf:dc:
a3:77:28:3d:e6:1b:24:97:2f:0e:9a:09:ef:81:fe:
c6:42:19:49:af:a0:41:15:86:3a:b4:4c:04:88:05:
40:aa:35:31:78:1e:44:0b:f2:52:04:9a:f4:76:af:
a4:8b:db:6a:3e:22:87:c8:4d:c4:f1:b4:96:24:e2:
f2:ac:22:a1:40:ce:6b:63:58:1f:f6:ec:90:bb:6f:
ba:e4:4d:9e:bd:9a:14:7a:99:d9:cb:3c:66:33:e6:
df:8d:6e:a9:60:7d:a9:df:31:4d:5f:a1:f7:5b:63:
ba:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B2:1C:50:D9:18:23:91:8C:17:42:7E:5C:A1:98:FF:CE:1F:52:AA
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ad:c9:0f:6d:51:13:04:bc:58:89:4d:d0:19:8c:af:3b:71:
75:c8:3a:44:e5:e0:98:79:f2:e5:b1:b6:96:fd:62:e0:98:e0:
5c:b6:3c:99:73:69:bb:9a:14:23:b6:79:a7:06:d8:58:3b:b9:
ad:1f:69:b2:50:fd:2e:4d:6c:9f:92:bb:c5:47:5e:40:61:ea:
7a:8c:2b:ec:f7:cb:eb:67:fe:cd:61:33:a1:48:d9:28:5c:f7:
95:35:94:f0:e9:4b:11:e2:45:41:ef:85:c1:76:3e:8b:19:83:
52:4b:36:0d:b7:e4:cb:dd:fc:a8:f8:95:92:0d:79:fa:99:3b:
c3:01:5d:2d:f8:d7:cf:ec:95:3a:dc:ca:c3:a3:45:ef:59:90:
43:98:b6:a0:ee:a3:73:02:78:77:de:33:d1:ee:1f:3a:25:3d:
d7:1a:72:70:b6:5b:58:0b:e1:eb:17:f5:4d:e7:58:ce:af:17:
d2:4b:bf:23:f7:c4:7b:61:3d:72:7c:2b:9b:bd:78:bc:8f:31:
72:3e:d1:ce:d7:c9:65:60:ef:a4:4a:b6:b8:b0:1e:5a:1a:ea:
ab:fc:4f:c2:bb:98:56:a1:90:f3:a0:69:a4:47:31:c7:c7:b5:
45:b6:66:24:4d:d8:ef:9a:e1:9f:05:6b:e7:c5:a4:73:65:f6:
55:b9:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:26 2024 by rpki-client on console-ams.rpki-client.org