Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: nhGQPRDeOphNjoTllxgeNp6Hxwvdi1kzQIF4IMB17/4=
Subject key identifier: F1:D8:E4:8A:72:5A:19:5D:89:47:8B:B3:50:39:08:D4:AD:A0:16:F9
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 019355E475AC2E315484F9A768BE78CE5EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 0F1C
Signing time: Fri 22 Nov 2024 22:00:55 +0000
Manifest this update: Fri 22 Nov 2024 22:00:55 +0000
Manifest next update: Sat 23 Nov 2024 22:00:55 +0000
Files and hashes: 1: XFupdCNwpqEnCTJQqZIzkCEE_gw.roa (hash: aXb+V05PGRqV65BaIWMNIMOApG2SR/+9bAtIG1jdo1E=)
2: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: 9Yto7xTlqSOI7IZlUDqe1rJT8U1/8IatgzsQ5jOw6JY=)
3: lcOTo4ScTg8b-c7XX9Dv9XcdIDQ.roa (hash: bOuv1PNys97/geyGQQKbN74k7Kxxr0ZJUCSjvXz4Vpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:75:ac:2e:31:54:84:f9:a7:68:be:78:ce:5e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Nov 22 22:00:55 2024 GMT
Not After : Nov 23 22:00:55 2024 GMT
Subject: CN=f1d8e48a725a195d89478bb3503908d4ada016f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:ac:0b:83:f3:a7:e5:ca:e0:bb:5f:8b:0e:
72:2f:e1:b7:61:86:e7:a4:42:91:ef:32:95:0b:29:
ba:2b:d2:03:db:08:67:86:b6:7d:ad:92:0e:9e:80:
59:92:e1:72:2c:4d:9b:ca:49:86:82:db:c5:e9:87:
99:48:8a:1f:2a:6b:96:98:2d:c0:30:9d:da:54:3f:
06:e7:be:ac:24:06:1d:a5:a2:86:cd:c2:8d:85:85:
08:48:5d:9e:dc:55:2c:b5:54:66:00:74:e8:68:20:
80:f9:3d:a2:8e:d2:a8:38:5b:af:2d:b9:e0:89:ed:
25:d0:a5:46:2f:c3:13:54:5c:69:dc:b4:c3:85:9a:
69:af:b6:58:43:d3:ce:72:81:5f:53:b2:78:8e:58:
03:22:97:33:04:1a:d4:7e:7b:32:0c:85:24:31:69:
80:bf:01:fa:d0:9d:4d:9f:40:64:66:4b:25:aa:26:
f6:af:b0:07:0a:b7:15:9b:0d:f4:5d:f9:db:51:cc:
42:81:04:1c:00:45:dc:e0:6f:d1:ec:8b:98:a4:87:
93:d6:f3:a0:05:e3:7c:eb:d5:7e:1e:a6:12:b6:e6:
2c:50:50:5e:d0:64:68:1b:22:50:30:da:2b:0a:8b:
91:46:7a:c1:91:ac:79:bc:d0:a2:3e:d5:9f:b4:a2:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D8:E4:8A:72:5A:19:5D:89:47:8B:B3:50:39:08:D4:AD:A0:16:F9
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:71:f3:f0:53:5e:a2:84:4d:6b:6c:5e:4c:18:ba:06:e4:6e:
98:ce:c5:5f:9e:13:4b:b4:64:37:7c:7b:30:a3:dd:47:a7:85:
71:2b:34:85:20:6c:3c:61:50:41:f3:45:73:2b:1b:58:61:f5:
df:07:76:ad:51:bf:be:2c:3c:84:33:25:75:e5:24:59:10:f3:
0e:b7:7f:24:b2:ca:1f:f1:9e:67:f9:ff:50:4f:b9:a8:c9:a2:
b6:2f:85:84:e8:0c:da:07:3c:f3:cc:ba:ee:94:f7:92:a3:c9:
25:36:4a:dc:be:ad:31:9a:36:65:c9:b7:d8:31:26:47:8e:4b:
8e:40:ab:bc:ae:b1:bc:29:37:5b:4b:7a:a2:1f:71:28:a1:94:
6e:98:e3:f2:14:78:24:8b:a9:36:5b:9f:84:92:ed:90:0a:50:
38:73:59:da:55:27:79:24:2b:bc:a4:83:55:98:3c:fe:4b:d7:
9e:66:a4:8c:34:42:10:e6:7c:7d:2b:dc:ab:94:f0:bc:27:28:
0f:fc:0e:83:79:ad:8e:60:e1:8c:6e:c5:79:b5:a4:14:fd:e4:
ab:54:bc:e6:47:59:73:90:d7:19:9b:27:ec:10:c1:60:e4:3f:
65:60:d5:77:97:dc:a2:ca:9f:a0:23:c8:0f:a4:9b:e3:c3:df:
3a:3b:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:58 2024 by rpki-client on console-fra.rpki-client.org