Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
File: hTodtQq3cdy1KTZ92VGmfKzEhSc.mft (raw, json)
Hash identifier: GsQJeHmR1GuF4w7pYEOieq3lX4p5Z6SJ0Oc6/UL9K4s=
Subject key identifier: F7:AA:7F:B5:33:89:E3:7A:10:CD:6B:85:56:C3:99:35:67:EE:3E:22
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 0193591C20C1783EF3B09F8AA7392E6D29B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 13:00:35 +0000
Manifest this update: Sat 23 Nov 2024 13:00:35 +0000
Manifest next update: Sun 24 Nov 2024 13:00:35 +0000
Files and hashes: 1: bHoUUoLktNBreBkhTf5WvMROPac.roa (hash: geXaciA/Jp+yn/c12UutXZir9of+PbDFpnoo55JlJJg=)
2: hTodtQq3cdy1KTZ92VGmfKzEhSc.crl (hash: Aeg7ptFcnn+RWuOOvfHSfmO8WXjMKGLyyDKf0qJMUXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1c:20:c1:78:3e:f3:b0:9f:8a:a7:39:2e:6d:29:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Nov 23 13:00:35 2024 GMT
Not After : Nov 24 13:00:35 2024 GMT
Subject: CN=f7aa7fb53389e37a10cd6b8556c3993567ee3e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:42:b4:70:82:7c:fb:1c:96:0b:bf:28:18:
a3:94:29:38:da:65:a8:5a:7d:53:b2:08:31:21:1e:
59:4e:c9:43:45:e7:70:74:46:74:64:40:78:9c:9f:
78:e6:b9:dd:22:49:a4:05:76:e1:9a:d5:1d:a2:79:
78:e2:68:8c:93:77:49:7a:ee:04:1c:1a:1e:79:e6:
fd:71:84:af:b6:ec:a8:c1:0e:93:d6:ad:69:01:9a:
14:03:28:0c:53:a2:06:5f:1a:76:cc:15:c7:ff:40:
c9:25:02:09:bb:fa:87:31:d5:6d:b1:8b:0c:c9:4b:
d4:3d:cb:53:b8:7b:03:ab:fb:55:ed:bd:fc:a5:b6:
66:2d:23:0b:af:51:b8:ee:ed:8a:71:4f:22:44:25:
b6:d3:27:4a:39:b5:2a:a3:92:7a:e9:38:da:d0:e5:
7e:e5:e7:e2:36:b7:ed:c8:76:ae:d8:3c:35:9e:9a:
8e:8e:bd:54:0d:ec:dd:c6:50:c8:9f:e2:a3:d4:46:
b2:03:49:38:cb:ca:2e:cd:23:55:ec:02:55:38:40:
4c:0b:0a:e7:09:0b:44:ff:ce:f5:5a:92:aa:0e:71:
e3:e2:56:5b:5f:84:18:61:2b:68:c1:51:71:12:fb:
4c:26:ec:b0:c3:a9:b8:e6:66:06:51:2b:bf:cd:9a:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AA:7F:B5:33:89:E3:7A:10:CD:6B:85:56:C3:99:35:67:EE:3E:22
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:58:76:e4:5f:7b:9f:1c:3e:81:ee:c9:0e:6f:e9:64:39:ab:
1c:ed:e7:36:e3:e0:97:d1:73:83:24:df:d9:93:e1:ef:a3:0a:
e2:09:19:0e:fc:7d:b5:8c:7d:ec:ca:5e:07:11:87:85:79:77:
a5:80:c2:e6:72:1d:69:59:fe:0e:7c:2d:d3:cb:f0:36:d3:7e:
68:10:bf:91:67:38:c2:0e:4e:d4:03:9d:47:97:88:3d:49:fc:
69:58:a8:5c:59:a9:8d:a5:3d:f2:03:d9:00:6a:c4:d9:24:88:
b9:44:a6:82:fc:e0:03:d1:ee:02:d1:03:ae:c9:53:98:13:72:
20:a8:7a:7d:5d:f5:f5:14:4e:53:14:40:49:0e:06:2b:55:1b:
96:2f:52:9a:6f:65:1a:be:45:7b:e9:3d:ca:52:a4:76:b9:e9:
99:24:03:89:64:d6:d8:28:82:39:7f:62:da:ca:cc:78:55:8a:
46:f0:df:bb:5a:6a:d5:db:c7:ce:99:ef:3d:5c:ae:87:35:5f:
68:dd:1c:e7:d5:f2:c2:28:e8:c9:8c:6d:35:c3:14:e0:4f:68:
8d:13:4a:8b:a6:c1:8c:df:32:69:36:62:d2:50:9a:ba:b3:be:
dd:63:d8:7a:ac:8c:37:06:ef:fa:05:99:a2:cd:e1:89:8e:a8:
12:9f:49:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:54:30 2024 by rpki-client on console-ams.rpki-client.org