Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: oxRWZj7l8X4uP9MFR0bBQIVGi9DEId1d5HpdnrApnno=
Subject key identifier: F9:EA:1E:E3:0E:E3:BB:FF:5C:13:02:72:AC:9B:FA:37:96:97:1E:EF
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 01935764E360F7BD11168646A5ABB1C7175A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 0EF5
Signing time: Sat 23 Nov 2024 05:00:49 +0000
Manifest this update: Sat 23 Nov 2024 05:00:49 +0000
Manifest next update: Sun 24 Nov 2024 05:00:49 +0000
Files and hashes: 1: 1-KPwF4nrnRQnMV59U4Q3NN9da10.roa (hash: q46Vm5JbNr26FALZ3SKg/2+K2yQy2Qi2HcubjV8s1xI=)
2: 23YOevYctsYYcliXHLXeRQ3Us-I.roa (hash: JP5NniDgSACG51D66vK3yvtHe4c6EoiT5SEMhPFpbMs=)
3: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: WFKLJSaifimrM9uiInOr2gcyDIyZ15W429oHYlDgIBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:e3:60:f7:bd:11:16:86:46:a5:ab:b1:c7:17:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Nov 23 05:00:49 2024 GMT
Not After : Nov 24 05:00:49 2024 GMT
Subject: CN=f9ea1ee30ee3bbff5c130272ac9bfa3796971eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f9:e1:96:33:3c:50:65:1f:90:f8:a9:8c:33:
f2:1e:6a:23:07:e2:8b:e0:b3:ee:e8:0f:42:02:5d:
c7:9c:45:73:22:d6:8b:89:c4:f6:51:bd:4c:63:91:
5f:d8:9d:b0:91:53:8c:f9:c6:6d:b6:c3:da:84:4c:
fc:d6:d1:e0:33:44:a8:ad:f0:d5:20:77:31:64:cf:
72:54:21:15:fc:a2:f8:1b:bd:89:04:b8:17:9f:72:
a7:52:19:92:87:86:40:ba:05:00:c4:c0:d6:d0:80:
89:29:da:e4:c6:6d:d5:98:56:4f:4b:ce:e9:bc:9c:
c0:79:29:1d:cc:43:af:73:a7:dd:69:ff:db:fb:8a:
35:11:32:8b:85:d7:5e:55:fa:66:e8:91:13:9b:f1:
c9:ce:82:4c:5a:46:08:90:f4:ee:28:cb:24:08:70:
ce:b5:e8:ad:91:a0:dc:fc:44:2a:ea:e6:63:24:0f:
f2:bd:8a:69:52:5e:26:35:6d:21:6c:0f:99:4b:52:
7b:bb:fe:a0:6c:de:3d:97:34:50:be:f6:6b:90:9d:
8f:ac:0b:9c:26:2c:f7:d0:78:1a:f8:55:a8:8f:91:
9a:89:a4:ff:00:35:5b:f2:73:75:56:5b:a4:fe:01:
6e:12:82:f3:29:f5:89:d6:f5:05:f1:70:38:ff:5c:
97:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EA:1E:E3:0E:E3:BB:FF:5C:13:02:72:AC:9B:FA:37:96:97:1E:EF
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:89:ec:95:5b:ab:7d:79:5c:e9:2a:87:53:f3:f7:8e:49:3f:
08:9f:26:3f:4b:5f:d8:3f:d7:1a:3f:a5:71:a0:15:f4:37:b9:
bc:1e:e0:bd:0b:c1:75:54:64:4d:4c:03:0f:aa:d9:97:2d:14:
b3:76:1c:93:c4:d2:f9:24:06:1d:84:54:48:49:ed:8d:ee:df:
19:27:9c:25:c2:fb:b8:c4:6d:b4:36:b0:bf:f5:cf:79:08:05:
47:17:ea:d2:c5:98:22:8d:e8:bf:a8:e1:7c:24:15:8a:95:06:
d1:19:18:a6:05:47:3c:5b:c5:f1:bb:e7:c7:d3:a6:0c:6a:7b:
cf:c9:31:7a:56:99:b7:d7:da:71:10:38:39:69:5e:65:48:ae:
04:f3:74:0e:19:14:20:30:99:75:61:1d:1c:63:d1:25:83:6c:
50:6e:26:4a:fb:35:39:c4:94:43:9b:7d:32:90:53:c7:7d:62:
24:01:91:6b:71:f9:d2:53:36:38:33:8e:c9:b7:fa:c7:3b:20:
c7:66:d2:47:b8:db:d1:9c:25:3f:14:51:0d:22:ec:be:7d:84:
2b:99:bc:61:9c:b2:fb:9e:4b:9b:f4:a7:f7:43:f5:c2:7a:95:
54:b3:a4:53:8c:5d:68:3e:28:61:62:56:06:51:47:07:9f:63:
88:b1:77:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:23:27 2024 by rpki-client on console-fra.rpki-client.org