Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
File: HQx-e7J8UzqZfSd8rdQX7HvShPA.mft (raw, json)
Hash identifier: kTJBsVwSHTxwXCnjKssMaMZz6C/a3r4r5ZbysV1g8NM=
Subject key identifier: 0E:1E:4C:47:E1:7A:65:1A:CC:BF:E7:90:5E:51:8C:7A:BC:E7:49:69
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 0193549BF884B01172800EE4F940A6ECBF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
Manifest number: 137E
Signing time: Fri 22 Nov 2024 16:02:07 +0000
Manifest this update: Fri 22 Nov 2024 16:02:07 +0000
Manifest next update: Sat 23 Nov 2024 16:02:07 +0000
Files and hashes: 1: 1-TW7-mIFR3nf7NPgSQ0A4ZRajCs.roa (hash: Iz8ROVBSC72j52gY4Xmk9KuLztIvtWbMkh96ET20xeE=)
2: HQx-e7J8UzqZfSd8rdQX7HvShPA.crl (hash: 5ZEy/Hmm/BXL6FQtsLuseTpqIHnBIw24gd0nRHUnYfw=)
3: M89MQdx37fMtZS1HINz8vNUl1oI.roa (hash: /jEhNu9yHzeQxfAr/4l8QQSp799xVjHCYW/CYW93qIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:f8:84:b0:11:72:80:0e:e4:f9:40:a6:ec:bf:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: Nov 22 16:02:07 2024 GMT
Not After : Nov 23 16:02:07 2024 GMT
Subject: CN=0e1e4c47e17a651accbfe7905e518c7abce74969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:7d:8f:3c:ce:07:94:61:ee:0f:dc:74:25:
62:7e:89:82:0d:06:ef:1c:0a:c4:a4:46:97:e8:c6:
c7:29:d9:2d:c0:1e:f4:5f:68:41:3a:de:76:ee:7d:
a9:23:0d:a6:ea:7b:8e:bc:42:84:08:f1:3c:eb:6c:
fb:16:71:4a:1f:78:a4:75:25:e7:02:ca:24:2d:fb:
58:92:c0:8b:cd:07:9e:53:3b:37:a2:f1:7d:cf:99:
fd:ef:6f:d4:74:94:9a:a7:c2:b8:c4:7b:6a:7d:fa:
7b:27:31:b5:aa:11:a4:fb:f7:5b:43:de:9a:a6:c9:
e5:29:a2:e7:58:9c:3e:b8:5d:e1:c5:65:ec:35:b6:
48:3d:3b:8d:26:66:b3:15:81:81:fa:8b:7e:3c:04:
da:70:43:68:57:55:a3:34:0a:47:ce:77:21:11:a5:
cc:d2:d7:fc:bf:a3:6a:26:48:45:a7:42:92:80:dc:
72:8d:ca:20:9f:f6:95:95:df:66:f2:d9:20:f0:57:
ea:6c:05:a7:3f:b3:95:ea:e0:60:46:1d:b6:e8:38:
ea:01:c7:d8:3d:02:4c:01:3c:7f:ee:e1:93:87:c4:
af:1b:42:6f:b8:71:5a:32:4e:d5:92:e7:4d:48:a5:
95:f0:c0:b0:76:2c:18:c9:6d:92:c1:8a:ba:e9:ee:
0e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1E:4C:47:E1:7A:65:1A:CC:BF:E7:90:5E:51:8C:7A:BC:E7:49:69
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:05:d5:21:7b:2b:68:7e:c6:24:84:51:cc:8e:14:87:2c:da:
31:4b:73:01:12:19:97:19:8c:6a:fd:c9:6f:18:b0:e7:12:c5:
ab:39:2c:c2:1e:85:c4:bb:58:cd:2f:1e:0d:90:1a:81:5d:9f:
76:c5:ec:73:95:c9:0b:8b:02:58:32:43:99:02:32:11:66:d3:
27:cb:89:bc:74:8f:e3:d8:d0:a9:d1:9c:84:1d:4c:14:28:f2:
56:50:93:b7:d5:a6:15:e9:0c:ac:18:6e:7b:6c:37:a5:b1:c3:
91:82:34:d3:56:8c:ae:f2:8e:ad:fc:34:64:84:25:30:25:fa:
de:a6:61:41:b1:90:35:ef:73:a0:fa:25:1c:e2:49:8e:a6:15:
1e:f5:b8:7c:2a:c5:da:c3:5b:b8:7e:7f:2c:fc:36:2e:10:c7:
54:3e:a9:21:ef:1b:30:25:f8:0a:7b:17:40:88:5a:55:09:e5:
b2:02:fd:19:87:3e:5a:49:13:8a:a9:e2:4d:d6:e1:33:9a:b3:
88:1f:60:99:9f:e2:90:ab:b8:c6:33:fb:04:92:bd:42:b0:3c:
7c:e7:1c:cc:c9:5f:d8:45:85:88:01:5b:ed:81:7f:c3:96:5f:
e7:06:51:52:6d:6b:69:0c:e7:5e:af:6b:03:00:3c:e3:94:87:
c9:b2:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:23:57 2024 by rpki-client on console-fra.rpki-client.org