Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
File: hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft (raw, json)
Hash identifier: dXgbm3Yy9TsnBLpK+yzM+81/WqITVWMzaYOa53CCzi0=
Subject key identifier: 23:65:4A:DF:42:C0:C6:54:B4:1D:81:B1:1A:DF:8F:18:24:D9:4C:2C
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Certificate issuer: /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial: 01936B2285A3660BDE36F1BCC58F76F8A329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
Manifest number: 09BC
Signing time: Wed 27 Nov 2024 01:00:44 +0000
Manifest this update: Wed 27 Nov 2024 01:00:44 +0000
Manifest next update: Thu 28 Nov 2024 01:00:44 +0000
Files and hashes: 1: NXcXmiE4ODK-WJKPLekz5MtrIkU.roa (hash: ZxOI4AATjTJZPUBOCKJ1eqXeyhieIzJa+TxXwatNeFk=)
2: hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl (hash: dPro0oAi0d2FFbCO697qItPlimlq05V9nHxF+G/gNUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:85:a3:66:0b:de:36:f1:bc:c5:8f:76:f8:a3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Validity
Not Before: Nov 27 01:00:44 2024 GMT
Not After : Nov 28 01:00:44 2024 GMT
Subject: CN=23654adf42c0c654b41d81b11adf8f1824d94c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:eb:22:50:89:45:94:11:90:bc:b3:f3:81:
a5:cc:58:f9:88:70:36:19:72:8f:0e:0f:eb:bc:02:
b4:e3:d9:d1:fd:53:9a:c6:07:f2:fa:ac:f0:6e:44:
f4:19:6b:69:d5:91:cc:53:87:91:2d:69:1e:d5:cc:
75:d9:68:fd:bf:42:11:45:a9:3b:52:71:9b:56:a8:
eb:99:89:e8:71:fd:87:ee:da:a6:ee:9b:2e:ac:10:
23:61:1e:44:e8:6f:95:a4:e7:46:f4:38:eb:bb:b6:
e3:a7:d7:d1:b0:ae:e5:fa:61:c6:12:1a:dd:88:a6:
da:97:df:a2:db:b4:ae:d1:6b:a5:97:a3:23:e2:a7:
4a:77:3a:2d:92:63:20:64:62:16:7d:7e:07:4b:73:
a1:34:60:ab:9b:ef:5b:1f:82:f7:d3:b1:56:a1:81:
d1:b7:db:51:ca:d0:0d:d6:75:1f:09:8c:6d:7e:81:
6c:57:e9:a5:55:96:7c:e0:a2:b9:c3:a0:0f:d8:76:
7d:6e:7a:66:aa:6e:bf:21:fd:37:47:89:0d:e6:ec:
f3:71:d0:c8:2a:79:ad:c9:f1:97:60:a2:7c:e6:9c:
ee:46:98:e4:9d:3f:b2:11:fb:93:24:ee:fd:97:d3:
59:14:9b:b1:28:81:ae:45:91:56:21:86:5d:ed:1b:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:65:4A:DF:42:C0:C6:54:B4:1D:81:B1:1A:DF:8F:18:24:D9:4C:2C
X509v3 Authority Key Identifier:
keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b1:11:3a:f8:91:f5:5e:c4:5b:47:40:4f:93:ea:23:f2:ef:
9e:54:33:19:05:63:53:dc:5b:ef:66:3d:3e:3d:fb:e1:66:3d:
0c:44:43:66:9c:55:a2:61:c5:68:ce:59:2d:43:c1:15:71:1b:
96:5b:90:01:ce:c9:1d:80:4b:d9:9b:51:ba:50:66:f4:26:51:
b6:46:76:f8:a4:f1:cf:b2:78:2b:a1:ad:9c:2b:df:cc:7d:9c:
57:d2:40:2b:b5:16:d0:cc:65:59:f3:66:be:de:6c:30:9f:72:
4d:16:2a:33:02:f9:d2:27:4a:d9:c6:71:e5:01:ac:a9:7d:bf:
79:ba:6f:cb:e8:bb:2b:79:0b:8e:68:1c:c3:c7:94:00:91:dc:
69:f5:4d:56:ee:62:85:b3:19:03:9f:82:d9:e9:e9:f6:3d:26:
78:fe:30:68:24:ad:ec:a2:46:0c:94:23:77:85:b7:de:34:af:
f0:8e:4e:bc:bf:b1:8e:56:df:09:18:63:bd:68:77:91:aa:07:
96:36:aa:85:3e:0f:ae:1d:37:79:ec:3a:63:7b:fc:6f:07:dc:
df:e6:2b:33:33:dc:4f:95:5b:93:dc:14:e1:cc:cb:a5:2b:93:
9f:69:aa:43:02:66:c2:20:06:ae:4c:bd:ab:99:8f:2e:90:e9:
e0:d7:db:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:30 2024 by rpki-client on console-ams.rpki-client.org