Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
File: HCN7aINpeRKVf40zc3AryQbSZEU.mft (raw, json)
Hash identifier: p5NWNpXhz5PdWPWMyep+z8c1D0hBpKqWGWoC6Rx08jU=
Subject key identifier: 9A:F5:9A:9B:B9:36:42:ED:8E:1A:11:3C:D2:78:5D:0A:7D:03:F3:B4
Authority key identifier: 1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
Certificate issuer: /CN=1c237b6883697912957f8d3373702bc906d26445
Certificate serial: 018F15C5CA4D87756B560DDF80E42DEA80EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
Manifest number: 0D54
Signing time: Thu 25 Apr 2024 15:00:34 +0000
Manifest this update: Thu 25 Apr 2024 15:00:34 +0000
Manifest next update: Fri 26 Apr 2024 15:00:34 +0000
Files and hashes: 1: HCN7aINpeRKVf40zc3AryQbSZEU.crl (hash: IwNUu6ykVaTXEWntGuQFrM40T1HP3u592o5ni5FsqgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:c5:ca:4d:87:75:6b:56:0d:df:80:e4:2d:ea:80:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c237b6883697912957f8d3373702bc906d26445
Validity
Not Before: Apr 25 15:00:34 2024 GMT
Not After : Apr 26 15:00:34 2024 GMT
Subject: CN=9af59a9bb93642ed8e1a113cd2785d0a7d03f3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8f:37:4f:50:c1:8e:13:c5:e4:1a:39:dc:92:
e8:5e:cb:70:e9:03:7b:2f:78:73:cb:7e:cc:09:1b:
41:f0:e7:83:ec:82:02:88:f8:3c:8a:16:3b:b5:6e:
35:ce:f9:a1:23:d8:cf:b7:c5:03:b6:38:02:61:cf:
f9:4b:36:6f:1b:5c:b8:89:9c:55:d2:2e:53:6b:21:
71:25:71:eb:74:ae:ec:83:5e:4d:aa:24:c1:c6:1a:
f0:51:a4:32:09:19:93:5d:b3:be:1f:78:7f:3a:0b:
22:a5:d3:a9:b2:61:29:21:cc:90:e2:c2:b4:27:3f:
d2:b5:80:26:ce:f2:1a:ff:c3:b6:a5:fe:0a:fd:fa:
8c:86:4a:62:48:eb:c5:7a:fd:36:5f:ad:91:54:55:
08:bb:e7:81:f9:ea:fc:c7:be:1e:32:ba:2f:b3:4a:
15:3a:ad:71:fc:ba:a5:cb:fe:e0:db:58:79:42:7e:
71:4e:1d:99:e2:be:84:a8:af:19:95:5f:5f:d6:9c:
eb:bc:23:8d:a8:c6:6f:c3:af:bd:0c:f8:35:dc:cd:
c0:05:85:3d:a5:0e:98:69:f3:72:18:e1:16:d4:2a:
77:39:41:13:c3:8d:b1:ea:80:b4:89:49:b4:02:a4:
bb:62:86:bb:f3:75:d1:a0:3d:1a:24:57:fb:fc:c0:
bb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:9A:9B:B9:36:42:ED:8E:1A:11:3C:D2:78:5D:0A:7D:03:F3:B4
X509v3 Authority Key Identifier:
keyid:1C:23:7B:68:83:69:79:12:95:7F:8D:33:73:70:2B:C9:06:D2:64:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCN7aINpeRKVf40zc3AryQbSZEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/d7be5e-8546-4aca-8b6e-a33e8eb5a538/1/HCN7aINpeRKVf40zc3AryQbSZEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cc:c1:93:54:12:3a:2d:a3:10:0c:6f:c3:bf:89:ef:a5:11:
b8:8d:21:d5:36:99:4b:e0:99:e0:95:a9:25:84:43:32:84:6d:
0e:4b:fa:a9:84:74:dd:0f:b9:9c:8a:4b:27:c2:ab:09:24:24:
03:4d:0e:cd:06:80:a7:97:17:be:c7:2b:0e:17:26:3c:b5:bd:
92:98:60:be:ac:bf:ad:1d:e1:6a:e9:3a:4f:a1:ea:6f:e8:c1:
a3:1f:d2:94:12:8a:46:bc:b1:48:61:fd:9c:37:c6:1a:64:59:
4a:77:ce:57:15:ca:cb:67:8c:38:00:29:12:0f:5e:56:34:0f:
9e:19:1f:02:f0:72:86:f3:e9:ed:17:cb:cc:e6:67:d8:92:fa:
19:a9:ef:65:d3:db:2c:ca:40:ba:f3:b3:3c:20:02:55:2f:93:
72:4e:e7:e0:64:c3:c2:26:f1:2c:10:68:ec:46:eb:06:d4:39:
bb:3e:19:42:32:ae:83:a3:66:97:73:7c:66:67:dd:f8:75:04:
00:47:f6:f7:8f:8f:83:96:53:eb:bf:ac:b1:b3:a5:a6:dc:05:
29:2d:cf:c1:da:9b:b1:8e:4c:25:b7:65:4c:c3:7b:fe:6f:d3:
4e:d0:5b:c6:27:24:58:21:35:22:10:d0:f1:67:b1:9b:2f:47:
3a:5c:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:49:26 2024 by rpki-client on console-fra.rpki-client.org