Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: E6MT+GKVMZemOeJ2R3iJ3pysIfKHSlQJtT+fcc+pwgE=
Subject key identifier: A8:06:9B:9D:EF:25:D0:DC:00:95:CE:25:E8:20:04:BA:20:19:26:D3
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 018F8749A09199D9940F112D2B8ECBEC8151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 117A
Signing time: Fri 17 May 2024 16:01:40 +0000
Manifest this update: Fri 17 May 2024 16:01:40 +0000
Manifest next update: Sat 18 May 2024 16:01:40 +0000
Files and hashes: 1: 531yUaqmvnRQXArtZxsVLTfrWOA.roa (hash: 38uNSZ7f9JAPLBqCMHitV0FZ+Toz22KHvHBYOwQ3+TU=)
2: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: mh2kS1EUlKlMfJTBdrwdvoaQG2jGZWyDmvW6RsBb+7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:49:a0:91:99:d9:94:0f:11:2d:2b:8e:cb:ec:81:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: May 17 16:01:40 2024 GMT
Not After : May 18 16:01:40 2024 GMT
Subject: CN=a8069b9def25d0dc0095ce25e82004ba201926d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:e6:87:ec:98:dd:06:6f:1c:18:15:30:b4:
6e:6d:63:8d:8e:1e:8b:8e:9d:ac:08:d6:d4:47:7f:
64:47:e4:db:a1:9b:ed:ea:a9:b6:ce:09:2f:00:08:
d4:7d:a2:7f:e6:37:44:c7:3a:18:f5:59:25:84:4d:
e5:5f:04:fa:9d:68:77:35:90:17:92:99:47:90:75:
67:65:62:c3:e5:c3:66:e2:1b:3c:79:86:ba:4d:b4:
a1:56:97:b8:60:2e:f2:cc:37:eb:9f:2b:49:84:df:
ce:51:26:9c:b4:b5:a3:51:a2:15:71:bb:49:46:d5:
69:1a:df:71:9b:46:a1:c3:1c:d0:9b:f0:e9:bd:21:
ab:6b:a6:de:b4:bd:b2:de:65:62:95:02:1f:86:7c:
ec:db:60:a0:a3:dc:00:a5:dd:e6:cc:f5:c1:da:bc:
26:63:23:35:bc:63:55:f2:94:9c:10:07:63:22:be:
89:82:41:53:73:34:65:e8:47:cf:90:bf:ab:8d:f9:
13:b4:85:3c:a4:a1:26:8d:b8:8a:76:23:12:d1:97:
44:b8:b9:59:ab:00:63:c0:72:57:9c:bc:9b:71:36:
20:53:b4:f9:04:1c:9e:e3:a6:8a:22:12:1b:8a:93:
24:41:6c:a4:62:95:b7:3f:50:90:c4:fa:13:fa:7a:
04:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:06:9B:9D:EF:25:D0:DC:00:95:CE:25:E8:20:04:BA:20:19:26:D3
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:dd:11:57:60:8f:c3:4a:c9:ae:df:d6:eb:37:e6:35:6f:f1:
ca:da:46:81:c4:e8:55:c3:d9:8a:8c:a5:7d:d6:1e:91:7c:2e:
77:bf:19:cb:bf:42:c2:15:f9:71:81:75:3b:a4:9d:0f:fb:36:
c1:84:e7:32:fe:2c:42:d4:80:e8:a5:f0:52:5d:b2:2b:01:12:
e7:21:cb:b0:f7:a3:f6:59:77:97:87:9e:c8:36:7f:bc:da:56:
7b:c4:9c:59:d3:32:1e:3c:bd:9f:97:f9:2d:7a:3a:84:db:0a:
08:c9:97:94:ba:c5:6b:55:f2:58:f6:d7:ae:c9:7d:d7:11:f7:
1a:52:87:6d:5b:aa:1c:04:f5:e7:28:1f:9b:aa:6c:82:0d:c5:
c9:68:6b:b0:23:5f:63:45:c8:8c:79:5a:96:3a:97:0f:5a:37:
be:7c:07:17:9b:36:ea:d1:38:27:c6:5f:97:0a:43:e4:bb:fc:
da:96:b4:77:d1:fe:69:17:78:6d:d1:3a:df:e6:ed:c9:fc:03:
0f:37:02:71:8e:5e:a6:a3:89:42:1e:1e:86:35:43:48:4a:47:
65:6e:6a:34:64:4f:51:55:d7:22:a2:c4:95:8d:e6:2a:61:a6:
a8:0b:d0:08:2c:ee:41:6a:2c:0c:1f:33:f4:e4:bb:89:ad:34:
96:4d:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:31:15 2024 by rpki-client on console-fra.rpki-client.org