Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
File: humRNBcbWGP2LyK316v3QDSVKOw.mft (raw, json)
Hash identifier: rWA4JTXp+6tpfFYno+BnLhptH+m5ktST3PwYp+LJ4rs=
Subject key identifier: 9F:C7:1A:9A:4A:71:A2:D0:26:B3:0B:A1:D2:40:55:50:BA:3A:BE:9F
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 019369A1B0A52AF0A0E64694529928298670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
Manifest number: 01F1
Signing time: Tue 26 Nov 2024 18:00:24 +0000
Manifest this update: Tue 26 Nov 2024 18:00:24 +0000
Manifest next update: Wed 27 Nov 2024 18:00:24 +0000
Files and hashes: 1: aqcDGJq63ZRdh03Iu2VnkUtlyqk.roa (hash: xZtaFrWAFoKMW4Xzsq1PU3eUeF4FvX+uzvt10DcsmZU=)
2: humRNBcbWGP2LyK316v3QDSVKOw.crl (hash: El4ERXny2NRKlbFcqoHmEisGrD09dRfSlzCCMDVJx7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:a1:b0:a5:2a:f0:a0:e6:46:94:52:99:28:29:86:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Nov 26 18:00:24 2024 GMT
Not After : Nov 27 18:00:24 2024 GMT
Subject: CN=9fc71a9a4a71a2d026b30ba1d2405550ba3abe9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:bd:3f:b5:ed:0d:fe:55:c5:af:d4:bf:19:
be:a9:f0:35:4d:ab:e2:01:79:fa:3a:46:36:8d:33:
67:e2:72:51:42:c2:27:e2:4f:8c:16:24:2f:11:cf:
44:67:f7:49:88:59:c1:53:a9:65:07:c4:93:f7:3d:
0e:6f:27:4a:af:b4:86:83:2e:a0:df:31:d5:19:c6:
7f:9a:aa:f0:83:dc:d0:47:84:7d:ba:69:f4:1a:bb:
53:fc:d1:9d:68:89:ea:7d:b6:0b:3b:6e:db:19:25:
1e:d9:59:5f:9e:83:d4:2d:72:04:f2:b0:aa:55:d9:
74:5b:3e:7a:c1:47:36:fe:a5:3e:3d:ff:b0:e4:34:
c6:74:35:16:16:a4:a0:4f:ad:3a:52:9f:8a:6c:22:
13:7d:01:66:5f:b4:d2:62:f9:62:3e:bc:08:c5:8d:
89:a2:3a:58:07:60:d3:87:ca:c9:1c:bc:a5:50:7a:
ff:c6:d6:e1:58:f1:0f:9e:7e:77:db:fe:e8:41:f7:
90:14:07:0b:2c:bc:e8:f8:f7:cc:43:21:b3:de:93:
02:20:04:f6:a2:55:87:45:ca:b1:b1:95:a6:4d:51:
b2:11:38:a4:a0:bd:30:d9:59:c9:36:03:5f:ff:44:
47:44:99:53:16:6f:b0:93:ce:1b:52:58:b3:bc:73:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C7:1A:9A:4A:71:A2:D0:26:B3:0B:A1:D2:40:55:50:BA:3A:BE:9F
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2f:01:e5:41:c2:21:89:a2:c7:b7:1e:78:4a:3a:1c:ba:1b:
87:dc:97:47:aa:f7:79:1a:1b:41:57:a3:a5:86:7e:18:97:b9:
d2:c6:68:48:08:de:95:8d:a2:76:0d:14:95:80:1c:d4:27:f0:
20:d0:9f:cc:a5:70:47:8d:9b:63:ca:c5:09:4e:f7:3a:52:2a:
2d:a6:cf:f4:62:f7:5a:65:11:37:12:fe:01:b6:7d:b5:56:a8:
8d:04:51:db:b4:22:e1:29:56:78:d1:5d:0c:00:4d:8d:ba:d7:
d1:52:87:3e:9a:65:5c:ae:b2:75:e1:80:3f:cd:5c:15:bc:4c:
bf:83:33:6e:35:3e:9a:9a:52:68:e9:d8:51:db:c0:ff:67:b7:
e0:bb:80:ae:0f:57:2b:19:51:61:16:58:34:6f:10:c6:a3:1d:
d4:2c:02:10:05:31:05:1f:e8:4c:a3:0c:b5:51:73:ec:74:af:
ce:cd:27:ee:9e:4f:81:2b:47:4b:e4:ad:98:61:2d:99:8f:e6:
af:2c:0f:23:23:53:a4:29:6b:4d:5a:94:cd:64:58:a8:13:9f:
3f:65:85:d0:12:21:2a:47:ab:ef:04:bf:e5:2b:df:ca:dc:f9:
00:ff:75:dc:6c:93:a0:d5:64:fd:4d:79:58:32:66:6b:d5:d8:
0a:f4:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:46 2024 by rpki-client on console-fra.rpki-client.org