Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
File: H0MPwJpxOySayqdniRHo0eMjOv0.mft (raw, json)
Hash identifier: tIOhvQyTKIR5YvUUh650zdfGYZIs45nMrZnHAXSSHpc=
Subject key identifier: A0:08:03:4B:4A:94:CF:C1:E0:72:82:C5:01:B7:AE:23:64:4E:F3:07
Authority key identifier: 1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
Certificate issuer: /CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Certificate serial: 01935877AE2F58D25F72719727200CC59B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
Manifest number: 11BC
Signing time: Sat 23 Nov 2024 10:00:58 +0000
Manifest this update: Sat 23 Nov 2024 10:00:58 +0000
Manifest next update: Sun 24 Nov 2024 10:00:58 +0000
Files and hashes: 1: CWAk7KvOD7qWhxQxwRBZi6plOuU.roa (hash: p7+C5FXpKSQ0ySuZUvdBMPqxLMzzFsAbtucQBmjbfkI=)
2: H0MPwJpxOySayqdniRHo0eMjOv0.crl (hash: E0swELLyKVAYUb5bkN8i8fSRhg2n0slzSYZBeg/JK88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:ae:2f:58:d2:5f:72:71:97:27:20:0c:c5:9b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Validity
Not Before: Nov 23 10:00:58 2024 GMT
Not After : Nov 24 10:00:58 2024 GMT
Subject: CN=a008034b4a94cfc1e07282c501b7ae23644ef307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:b4:c5:fe:8f:d2:bc:99:87:f9:a7:42:2a:
e5:5d:76:1c:71:b3:83:32:b3:e7:40:3f:12:10:99:
52:22:28:05:46:f9:56:05:bd:cb:e6:6b:d5:07:6d:
b0:f0:f9:a2:31:78:5d:c4:1a:7c:42:3e:75:e4:5a:
93:05:27:89:56:e0:66:d5:ea:67:f2:05:df:74:95:
05:c2:2a:6f:64:82:08:02:d2:09:ef:c5:aa:09:f0:
d8:2a:e1:99:22:5d:30:f2:74:00:f3:ed:70:77:d1:
17:0d:f8:2f:f7:e8:7a:9e:25:b1:3e:87:83:80:50:
32:aa:01:1c:91:bc:f3:de:62:8d:3a:35:66:b6:56:
a2:33:19:25:8b:a7:46:8b:9a:35:46:d6:23:87:00:
3f:f4:6e:23:8e:49:b3:67:5b:6a:93:c5:9f:77:56:
27:1f:64:0a:93:73:ad:2c:49:bc:2c:46:c9:ee:61:
2e:b7:bd:d7:fa:4a:de:a8:66:6b:74:33:d6:43:7a:
65:55:9e:50:0e:81:21:d3:00:b4:32:d6:2f:50:e2:
89:7b:a8:d2:12:b8:5c:1a:81:85:08:95:f7:ec:b1:
8f:7c:46:fb:c8:65:2d:ed:7c:4c:d6:ad:0a:da:7b:
aa:b9:5e:cd:a2:ea:11:e6:40:0f:2a:ec:d1:cf:19:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:08:03:4B:4A:94:CF:C1:E0:72:82:C5:01:B7:AE:23:64:4E:F3:07
X509v3 Authority Key Identifier:
keyid:1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:68:a7:f4:c0:a8:5d:f6:39:67:5c:f7:1e:14:8b:46:88:4c:
ed:ce:c1:2a:8f:d5:aa:ff:98:ab:80:ab:b1:68:46:55:c5:d5:
c7:b1:d5:7e:f5:13:fe:d9:bb:84:eb:25:40:a2:67:01:19:b9:
e4:24:be:2f:36:d4:ae:19:1e:97:92:99:01:eb:00:e4:23:3f:
5f:98:66:f4:a4:03:da:02:17:67:d7:2c:62:ce:7e:49:10:07:
99:3e:1e:5e:74:03:0a:d4:7f:18:19:22:3b:c9:f1:b8:c2:48:
eb:52:74:f9:79:29:2a:b2:77:61:7d:00:87:b0:1d:47:ee:b8:
76:a0:1a:f8:3d:e1:09:35:5a:47:02:41:0f:35:68:c3:38:be:
17:d2:d3:70:fd:26:34:99:71:96:87:da:c3:72:33:3a:71:99:
26:a3:56:7d:ca:08:56:22:0a:43:b4:87:68:fb:45:77:3f:6f:
21:e4:a1:6d:b2:5e:f2:fd:e1:c7:4d:58:69:89:3f:d2:24:70:
3d:92:cf:18:6a:bf:6f:49:cc:ac:d4:2f:b8:76:a0:1a:2f:11:
b5:b7:e9:d0:68:13:e3:63:12:f3:e1:d0:18:a0:ea:56:ee:34:
23:a2:a6:46:11:05:72:c3:5e:ca:1d:d6:90:14:c8:eb:7f:29:
29:66:dc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:20 2024 by rpki-client on console-fra.rpki-client.org