Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: qqlVHvzYY+l1BRDhU4OI2ZmDSotCEslIcZMMINRj1ck=
Subject key identifier: CA:AB:98:38:01:3D:DB:6E:DE:65:B5:D5:F9:5F:5E:CF:17:2C:0D:FF
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 01906CAA5503791338E4BD47B5985F50B569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 0D72
Signing time: Mon 01 Jul 2024 05:00:20 +0000
Manifest this update: Mon 01 Jul 2024 05:00:20 +0000
Manifest next update: Tue 02 Jul 2024 05:00:20 +0000
Files and hashes: 1: 9kZHwaZO1BK8vlHrSL09IObD2x8.roa (hash: vJHwsZ+DylB/eMYBG18z/vaM8clKJlNy6gXM6DGjHY8=)
2: agx6ZMiW12z_5JGj7quXnia5Jqc.roa (hash: zTTBkTg7dOxFXFp2HRb/kDasvMalzl23hVu2Z0Y02Ek=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: q2SyLJHkKhqeU/6Cvepqg4qaW6015DfO9ZlW3udqgs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6c:aa:55:03:79:13:38:e4:bd:47:b5:98:5f:50:b5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Jul 1 05:00:20 2024 GMT
Not After : Jul 2 05:00:20 2024 GMT
Subject: CN=caab9838013ddb6ede65b5d5f95f5ecf172c0dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:45:d5:ee:8a:9d:9f:80:8f:3b:84:e5:6b:
f0:08:ff:93:eb:8f:78:cf:bc:c2:56:dd:3f:f4:4e:
50:65:56:00:5e:33:06:02:41:ad:06:ee:03:62:f0:
34:32:5d:78:90:13:17:1a:5b:24:9b:2a:53:d8:79:
62:18:6a:c9:9b:af:90:ef:f2:7c:7e:09:e2:14:44:
28:d1:e7:22:d9:ad:d8:5e:fa:3c:ae:99:5e:03:a2:
7a:cd:03:79:52:4a:0c:81:2f:ca:90:24:d6:7d:79:
26:ec:ca:0a:d2:35:b0:66:fc:01:05:d4:bb:c1:2f:
aa:54:2d:cb:e5:f6:7c:13:24:63:e9:cf:e2:88:b9:
9c:03:ca:93:50:10:28:d8:71:22:67:08:a5:f7:5a:
73:9d:14:68:d5:b6:46:37:e2:a7:b2:d6:93:29:ed:
d8:dd:33:55:bc:38:19:2a:1f:e5:9c:7c:e3:56:93:
cc:b5:4f:0c:41:d5:48:d7:4d:63:a7:6a:ba:39:4f:
b8:29:6f:c3:7e:b2:6d:46:13:72:4c:b7:d3:08:b1:
ad:aa:0f:94:3e:05:75:c2:ac:a8:b6:72:1d:48:c8:
0f:3a:a3:ef:a2:6e:40:12:eb:a0:a1:da:b7:92:68:
41:07:19:2e:f7:cb:dd:15:02:66:95:ca:67:e5:f7:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AB:98:38:01:3D:DB:6E:DE:65:B5:D5:F9:5F:5E:CF:17:2C:0D:FF
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c1:4c:f0:85:4b:6b:ba:06:52:e4:06:5e:dd:47:2e:7d:0e:
81:fb:b9:16:c7:64:a6:21:a7:60:8f:4c:43:a5:a3:33:d1:97:
d5:4a:1f:f7:33:d7:b4:cc:ea:b4:f7:64:33:9b:c5:a5:7a:a6:
5a:b2:88:65:02:9b:41:16:31:f0:59:c7:31:0b:b6:07:68:3a:
cb:7c:b1:7f:7d:3b:f4:d9:35:94:e9:bc:38:fb:ff:47:88:58:
88:b8:3c:01:e4:d0:c0:db:fd:a1:85:23:fd:8d:76:49:2c:b9:
1c:57:e2:f6:a5:c0:d1:44:50:95:02:08:fe:86:89:de:18:9c:
cf:e6:ad:64:13:98:0c:ae:72:b4:69:8e:48:f3:c6:bf:f8:a8:
b4:87:52:ef:8f:a0:66:d4:a6:6b:b9:1e:b9:ce:41:9a:8e:3f:
7d:e6:87:09:7c:71:e9:fe:a0:9a:dd:63:79:01:49:3c:66:2d:
6e:c8:e3:04:b8:1f:bf:7a:5f:62:ba:3d:bb:f7:72:1f:a0:0c:
60:45:30:d2:10:f6:16:db:2e:1a:46:ae:c2:01:38:e6:92:4f:
f1:20:a6:dd:8f:16:bc:0b:1f:f5:9c:8c:d3:25:cc:05:9e:27:
48:0e:27:48:41:24:0b:e9:54:0d:5c:0d:14:43:be:ab:b4:d8:
51:49:e2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 11:33:51 2024 by rpki-client on console-fra.rpki-client.org