Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/23c4f6-d6a3-4898-931d-01cb3a210c0d/1/Hzleg8tbzdQS5DicibUMKTvHzUA.mft
File: Hzleg8tbzdQS5DicibUMKTvHzUA.mft (raw, json)
Hash identifier: 6or629de9E7+nFrVKcukUOC/yNogXKn/gjY7lULpZ5c=
Subject key identifier: 63:84:4C:57:A2:C5:E5:CE:EE:80:0C:C2:85:BA:B4:4D:C4:C1:24:0F
Authority key identifier: 1F:39:5E:83:CB:5B:CD:D4:12:E4:38:9C:89:B5:0C:29:3B:C7:CD:40
Certificate issuer: /CN=1f395e83cb5bcdd412e4389c89b50c293bc7cd40
Certificate serial: 018F4C1089A0B40FBE180EC8A660BCFF6B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hzleg8tbzdQS5DicibUMKTvHzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/23c4f6-d6a3-4898-931d-01cb3a210c0d/1/Hzleg8tbzdQS5DicibUMKTvHzUA.mft
Manifest number: 1155
Signing time: Mon 06 May 2024 04:01:43 +0000
Manifest this update: Mon 06 May 2024 04:01:43 +0000
Manifest next update: Tue 07 May 2024 04:01:43 +0000
Files and hashes: 1: Hzleg8tbzdQS5DicibUMKTvHzUA.crl (hash: WobGHlJ0qQCBVF9WWrb34IdF18uiKMYt5Y9iXgu6ulY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/23c4f6-d6a3-4898-931d-01cb3a210c0d/1/Hzleg8tbzdQS5DicibUMKTvHzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/23c4f6-d6a3-4898-931d-01cb3a210c0d/1/Hzleg8tbzdQS5DicibUMKTvHzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hzleg8tbzdQS5DicibUMKTvHzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4c:10:89:a0:b4:0f:be:18:0e:c8:a6:60:bc:ff:6b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f395e83cb5bcdd412e4389c89b50c293bc7cd40
Validity
Not Before: May 6 04:01:43 2024 GMT
Not After : May 7 04:01:43 2024 GMT
Subject: CN=63844c57a2c5e5ceee800cc285bab44dc4c1240f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:48:72:de:29:91:61:a9:0f:46:bb:d8:1f:
92:69:d3:e6:37:b9:bd:9f:d8:87:42:f3:c9:39:32:
20:52:e5:4c:1e:25:04:9b:96:d2:b4:be:7c:6b:6e:
af:6d:5c:c3:f8:9b:ea:be:d4:2a:af:d0:1a:60:0b:
64:bd:34:ae:8d:4e:8d:75:e0:fa:76:8e:59:9a:36:
94:22:ce:29:b5:f2:6c:58:b5:d8:87:4d:1e:cb:41:
5f:8e:fe:68:18:97:01:40:ff:78:f2:8b:72:bd:70:
97:55:aa:07:c0:37:2c:d7:e1:a5:de:1c:20:12:27:
a9:d0:4d:d2:f6:b9:7f:99:b0:47:3c:a9:38:d4:2a:
7b:5b:53:42:20:9f:ed:8b:30:8e:ac:f8:ee:6c:25:
ec:10:c4:ab:fe:7a:88:1f:fc:b3:6e:14:da:8b:99:
0a:29:a5:a4:19:6f:6e:7c:84:28:06:4e:f8:fb:dc:
d4:68:1d:a3:26:b8:85:e2:d5:bc:b7:94:3e:5d:d4:
02:86:1b:c3:b7:dc:8d:b1:da:be:41:f1:9c:47:ea:
f2:50:28:df:ab:1d:68:0d:28:07:22:36:ad:61:05:
d5:32:29:9b:42:87:23:77:37:8a:4b:ce:32:62:3c:
e9:bf:2d:47:44:a2:5c:c8:27:11:2a:7b:0f:ab:2f:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:4C:57:A2:C5:E5:CE:EE:80:0C:C2:85:BA:B4:4D:C4:C1:24:0F
X509v3 Authority Key Identifier:
keyid:1F:39:5E:83:CB:5B:CD:D4:12:E4:38:9C:89:B5:0C:29:3B:C7:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hzleg8tbzdQS5DicibUMKTvHzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/23c4f6-d6a3-4898-931d-01cb3a210c0d/1/Hzleg8tbzdQS5DicibUMKTvHzUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/23c4f6-d6a3-4898-931d-01cb3a210c0d/1/Hzleg8tbzdQS5DicibUMKTvHzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bf:f4:46:42:e2:9c:9d:74:27:de:86:92:81:d4:56:65:10:
33:ad:5f:ed:13:fd:8f:16:6c:cb:6e:03:5e:74:62:3f:05:03:
08:42:79:58:e7:7f:21:b4:ab:8c:84:91:2b:44:b0:1b:06:60:
0b:f8:12:dd:3e:f0:8d:f3:9f:d0:b4:61:e2:69:cc:b2:c0:75:
80:45:0c:48:47:e4:1b:43:e2:63:61:4b:f6:fc:ee:5a:56:8c:
bb:1a:56:a2:67:69:37:56:78:77:19:f5:f8:ec:c9:09:0a:b8:
48:b3:59:ca:cf:c6:32:4e:39:46:38:47:12:d1:4d:0b:7a:40:
ca:8d:f3:83:4c:41:7b:aa:71:d7:12:6e:72:a4:54:57:4a:c9:
e5:f4:6a:2b:bd:24:ac:a4:fc:69:bb:dd:5d:2c:ee:11:ed:09:
d5:f3:17:3d:64:69:55:86:10:f2:1e:8b:26:fb:7a:b9:20:4b:
be:81:01:44:3c:b1:30:4a:1b:6e:37:6b:72:b6:25:b2:9c:be:
1b:62:b5:e6:4d:99:25:c5:2a:cd:eb:ab:97:90:53:4d:cf:50:
52:f6:45:26:02:cf:a4:48:04:9c:63:d5:1a:67:26:0c:e3:54:
73:7a:fe:c5:8a:a3:53:6b:fb:84:07:dd:48:bf:56:fe:9f:d0:
8d:74:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:54:03 2024 by rpki-client on console-fra.rpki-client.org