Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: Z7JvnUkUDOxE0vuYRrB+VCsoOvdPyHqa2+RZItFfI0c=
Subject key identifier: CD:9D:F5:C3:B6:CB:27:B9:96:9E:69:D6:D9:6E:F2:69:A5:A8:3B:DC
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 0193591BE2E96A98717D43BB515154943C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 0314
Signing time: Sat 23 Nov 2024 13:00:19 +0000
Manifest this update: Sat 23 Nov 2024 13:00:19 +0000
Manifest next update: Sun 24 Nov 2024 13:00:19 +0000
Files and hashes: 1: 2z6LsI_o5WA-wjlHEyLVyaANZLc.roa (hash: WBT4La052LS/qP/I1oFySnJ0P6GzL7y/IXa9qAn6xAw=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: zxIjobBzZX5i8AQRkP8USEZEEln3GagyoK8LALw0vOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1b:e2:e9:6a:98:71:7d:43:bb:51:51:54:94:3c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Nov 23 13:00:19 2024 GMT
Not After : Nov 24 13:00:19 2024 GMT
Subject: CN=cd9df5c3b6cb27b9969e69d6d96ef269a5a83bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:bb:e5:35:01:cf:1a:a1:60:d2:56:ed:77:
88:45:86:56:32:7e:1e:26:da:43:73:4b:ac:cd:23:
f1:33:4b:f5:d4:4e:b4:06:69:ac:ff:18:71:90:42:
c7:5c:bf:d3:82:11:03:95:a8:36:df:cc:7b:0a:ff:
05:8b:b1:8b:6d:7a:a5:c1:b7:33:d1:5d:86:42:ba:
f2:56:75:a4:71:fd:ae:74:a8:be:84:88:42:96:18:
a1:78:11:b0:ec:08:8b:af:a7:5c:77:e0:1c:30:18:
50:14:56:15:d9:83:58:62:15:6d:9f:7e:8e:b6:70:
b7:d7:21:45:ce:00:6e:f9:b1:77:3a:88:5b:8a:bc:
2e:20:fa:6c:c1:c3:3a:88:69:b6:b0:33:cf:1d:ac:
b5:40:cb:11:97:81:75:e1:bd:26:f7:b0:7d:0e:ab:
9d:8e:82:e2:cf:a4:f5:27:e7:33:5d:29:ae:23:6c:
5b:b2:78:f1:29:bb:31:c3:5b:d3:38:40:c1:88:e2:
72:ee:22:8b:1f:98:91:fb:01:be:2c:b9:ee:41:d4:
fc:f2:73:e0:4f:1c:fb:32:75:d8:b3:98:6f:6f:af:
36:11:d7:9d:a6:02:ef:c3:4e:0e:b1:52:c3:8f:fc:
26:51:46:c1:ce:81:32:a3:e3:43:dd:f6:e4:b5:15:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9D:F5:C3:B6:CB:27:B9:96:9E:69:D6:D9:6E:F2:69:A5:A8:3B:DC
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c6:bb:5f:19:a7:1e:e0:58:6a:e7:dd:0d:91:c7:68:be:e4:
3b:b1:e0:e1:ab:ac:87:8e:5f:47:2c:08:f8:c0:ef:a4:f1:1a:
f8:28:3b:32:47:53:04:57:34:0b:62:fc:74:92:ec:46:6a:d9:
44:fb:50:ba:14:02:af:76:c0:91:35:50:7e:43:aa:af:98:50:
43:03:ff:6a:ac:73:39:37:07:0c:3a:97:84:e4:c9:c7:bc:21:
71:84:fd:97:a7:7b:ea:11:4b:be:bc:6b:49:78:bf:95:5a:65:
16:72:42:bb:9d:7d:89:e9:82:2e:40:aa:6d:96:01:90:9f:83:
f9:a1:f9:95:b0:c2:04:22:26:e3:bf:c2:0b:57:66:d9:05:7d:
2c:d8:bb:48:33:13:ef:dd:0c:2d:57:d7:f3:b0:f4:33:92:ce:
da:6a:87:49:17:d9:df:9b:c1:27:8a:9e:6e:4d:55:58:26:f6:
f6:21:74:57:40:45:a3:c8:b0:dc:cf:9a:96:60:c8:3c:ea:be:
0d:a6:87:c9:60:42:87:a2:e0:7d:df:5b:00:c0:6a:40:b9:b8:
d1:a9:71:eb:cd:55:56:06:1f:61:fe:c8:c2:a0:67:f2:3f:dd:
6a:0d:d1:32:f2:bf:cd:83:ea:3e:b9:f5:be:e2:72:f2:07:41:
74:46:01:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:57:10 2024 by rpki-client on console-ams.rpki-client.org