Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: v0RMAVSDssCne5qOqaZd4hSqjFWKnxBEnjO7IRX7G2o=
Subject key identifier: C0:DC:2C:13:92:6C:E8:61:86:26:06:F1:A3:79:8A:01:B8:DB:C7:8E
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 01935508CDF086455B74E5986A248EBD5F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 033C
Signing time: Fri 22 Nov 2024 18:01:00 +0000
Manifest this update: Fri 22 Nov 2024 18:01:00 +0000
Manifest next update: Sat 23 Nov 2024 18:01:00 +0000
Files and hashes: 1: 3G09IyofbjPhTbyAyhK87B00ESM.roa (hash: zdYKlIkCPcFDwBolAq096eji0RiSXv2/zRnrOHvAHs0=)
2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: 40v0rmD3QcTSqkB4FXq68QNPMbIZGtsffs3ZZky/arE=)
3: Yx0svQExlJ5DX_3gVYYWBjwakl0.roa (hash: HbsYLf1I5BO4UxNGaeAu+kPKzSjyYlk5Lgy2+P3f3Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:cd:f0:86:45:5b:74:e5:98:6a:24:8e:bd:5f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Nov 22 18:01:00 2024 GMT
Not After : Nov 23 18:01:00 2024 GMT
Subject: CN=c0dc2c13926ce861862606f1a3798a01b8dbc78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:f8:d1:d8:91:3e:cd:f9:49:8e:63:a1:8f:
c0:82:6b:82:cb:44:7d:0a:ac:8d:e0:e9:3c:d7:09:
59:e0:7b:a7:20:cf:17:53:51:1c:69:8f:d0:47:77:
4e:13:e7:c0:27:a6:04:19:28:74:98:77:b6:38:8e:
86:66:a6:b1:1b:d5:d0:d6:20:d5:61:17:7e:d3:c1:
cb:98:ee:33:56:bb:b4:97:c1:60:40:58:ae:c4:20:
ea:f1:ba:06:e0:d3:ad:61:33:0c:25:51:5d:13:ff:
d3:c3:a0:40:66:8c:07:dc:69:f2:2f:e6:07:b8:8c:
0e:f4:0c:be:60:72:f6:27:64:d3:73:c5:d4:3a:6b:
9a:dd:3a:03:ec:1f:68:96:50:3b:b9:d8:a7:1e:19:
95:36:74:55:d3:f7:d9:3b:6a:80:0c:06:15:db:03:
78:d3:2a:d0:e4:26:d9:2d:27:35:e6:7c:06:e0:68:
fd:6a:ed:e5:d0:5e:04:76:cb:f3:d9:85:1f:67:fc:
07:7b:6d:41:ec:d3:b3:6d:83:2f:6f:4e:e4:8e:cb:
f3:f9:38:e3:72:02:c8:bd:f2:79:10:65:40:71:d4:
f0:21:08:89:ad:6d:01:7f:9a:f4:e9:c1:5e:f4:6f:
1d:c8:94:b6:bc:12:f7:d1:42:31:2c:54:87:25:b5:
1a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DC:2C:13:92:6C:E8:61:86:26:06:F1:A3:79:8A:01:B8:DB:C7:8E
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8c:60:42:4e:f1:7e:55:6f:35:db:f5:fe:9a:9c:a5:cd:01:
70:0f:1b:be:99:9e:a5:46:6f:c4:81:ef:fd:72:7e:c5:55:ef:
fc:33:77:f0:11:27:d2:6a:fd:89:1f:1a:65:16:05:64:df:2d:
29:8c:18:ed:82:61:c7:f6:e2:56:69:5f:e5:e3:68:86:06:3a:
43:68:a1:d2:fb:a9:59:a0:6e:ba:b2:aa:aa:39:64:13:fe:e1:
6c:a6:31:1d:dd:bf:20:c8:3d:6d:bf:92:7d:98:ca:ad:36:dc:
91:ca:0e:67:45:ab:61:e0:27:56:74:47:73:73:28:30:c0:5c:
3a:d5:e6:9d:d9:18:8a:a2:2c:6d:17:2a:3b:82:72:a4:6f:1a:
3e:95:dd:ed:f5:a1:23:a3:20:cc:24:1d:eb:83:61:bd:71:4c:
13:b5:5d:b0:71:4c:69:9f:c7:17:9f:3e:22:2e:6c:87:9a:10:
a2:36:21:7c:02:4f:4c:50:d0:23:4c:b3:c1:f0:c9:45:d8:04:
a7:b0:b4:bd:95:2f:42:b3:78:78:bf:ff:a9:87:b1:9b:e1:30:
25:77:64:60:96:92:b8:d9:77:b9:28:7b:f9:93:f7:3a:2c:fe:
6a:1f:e7:0c:c4:31:f8:3b:9d:ef:f7:c8:e2:f0:07:8d:87:2f:
fe:66:e1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:54:01 2024 by rpki-client on console-fra.rpki-client.org