Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
File: hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft (raw, json)
Hash identifier: w0dvcCbpJb4fD71vZzqfx6BAIvLRIQP0G1keqy5Rf8w=
Subject key identifier: A3:68:6C:40:BC:AE:82:AE:A2:CE:89:D3:51:42:FB:F0:B3:15:D4:7F
Authority key identifier: 84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
Certificate issuer: /CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Certificate serial: 019356BFBA5CB4E104F31B2226E063ED6561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
Manifest number: 4C
Signing time: Sat 23 Nov 2024 02:00:25 +0000
Manifest this update: Sat 23 Nov 2024 02:00:25 +0000
Manifest next update: Sun 24 Nov 2024 02:00:25 +0000
Files and hashes: 1: cBhilWNJUm0MaEcU9f1tUBSs_JY.roa (hash: tNIf3NCxcoUFe3/BuEe+q8aTJeallskDDcrRR7JG8/Q=)
2: hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl (hash: YORHp8bE7bSRYG8/mwBOs7exp292Zhhx++7ZEF1BJ+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:ba:5c:b4:e1:04:f3:1b:22:26:e0:63:ed:65:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d509259f700cdc4448f1fbf530c19e40754ec4
Validity
Not Before: Nov 23 02:00:25 2024 GMT
Not After : Nov 24 02:00:25 2024 GMT
Subject: CN=a3686c40bcae82aea2ce89d35142fbf0b315d47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:8d:ea:09:bf:f1:f9:eb:3e:02:33:6f:ef:
55:a9:7e:42:3c:a7:ff:62:aa:a9:e3:78:0f:37:a0:
9d:70:9d:4f:3f:af:50:3a:00:43:61:66:3b:ec:c1:
44:51:2b:91:a3:7a:9d:0c:1f:66:d2:a3:7b:8e:28:
92:3d:5b:15:1f:49:b2:fc:2b:22:de:64:e0:4a:a9:
c6:60:4e:78:0a:51:a6:38:9a:1c:32:ca:6d:47:fe:
32:76:54:18:78:23:b3:e7:fe:4d:35:23:fe:15:6c:
ad:c2:ca:e8:ed:ae:4b:2f:02:8b:26:94:45:6f:8f:
0b:c4:bd:74:92:cd:f7:27:51:4a:8c:91:68:04:5f:
06:61:d9:17:f2:c2:63:ca:fd:8b:3c:27:ee:c9:3a:
02:5d:66:41:b3:a5:56:fa:50:01:a1:9a:98:a1:9d:
fd:13:48:b1:7d:8c:19:c4:32:d4:5e:f2:8d:08:db:
8d:eb:b5:6e:5f:5e:54:4e:f2:7a:8b:d8:b4:f5:88:
03:3a:40:5d:5b:e8:1b:31:59:ae:5b:ad:50:93:07:
a0:ba:fb:33:2d:d9:d8:9c:cd:f1:7d:fc:d6:79:63:
51:eb:70:3b:51:16:36:8e:ac:c2:b5:39:0f:77:13:
22:14:58:69:21:95:cc:c6:53:f3:27:f7:89:0c:70:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:68:6C:40:BC:AE:82:AE:A2:CE:89:D3:51:42:FB:F0:B3:15:D4:7F
X509v3 Authority Key Identifier:
keyid:84:D5:09:25:9F:70:0C:DC:44:48:F1:FB:F5:30:C1:9E:40:75:4E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNUJJZ9wDNxESPH79TDBnkB1TsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1286f6-688c-4cfa-a02d-1a89ab7b8cb5/1/hNUJJZ9wDNxESPH79TDBnkB1TsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3c:ab:f2:83:d5:d9:b4:6d:74:5a:51:0c:2c:36:cc:23:6c:
51:04:f0:e7:45:a5:b4:55:69:a4:7f:17:5f:0d:6e:eb:47:f6:
b0:19:d3:23:69:e5:a9:52:f5:ed:f6:a9:09:30:59:93:0b:e8:
02:ae:64:2b:38:3d:97:96:6d:26:87:b2:95:f0:e3:39:9e:86:
ca:08:5d:74:a7:4e:23:cd:71:aa:a1:92:e1:1f:19:fd:8b:57:
d3:21:49:80:15:a2:7f:06:57:fa:62:ee:e6:1b:df:bd:63:c5:
29:fe:a7:44:46:6a:8a:79:73:15:bd:4b:d7:04:31:ad:fc:cd:
f3:a1:47:d8:14:2e:7c:dd:db:b6:d9:16:80:d8:46:27:dd:6b:
39:e2:8c:98:b0:df:b6:33:7d:bc:c3:8b:af:3f:12:d9:31:2d:
58:1c:39:91:9e:29:10:0a:85:13:96:b3:98:14:89:67:c7:fb:
5f:3c:09:a8:5f:39:7a:28:4f:02:50:57:08:ea:f9:5e:10:9d:
08:ed:f4:80:70:6a:96:e3:15:63:97:84:fe:60:5a:19:19:79:
9b:e0:00:b7:14:f1:9c:c2:7d:cb:b4:23:4d:a1:38:78:65:9c:
7c:45:60:f2:e8:cd:75:12:e6:df:92:2e:ca:b5:72:5b:24:9b:
53:60:80:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:57:21 2024 by rpki-client on console-ams.rpki-client.org