Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: 66HdCAIoOOvs4AD1SZZgoLJQGdGWPTjD4KyumCcJmwo=
Subject key identifier: B0:93:D4:50:ED:99:AF:3F:80:65:19:32:2A:6F:FA:9C:E7:04:59:93
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 01935689D9E29FFE6B3F554FCACC59C0F255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 1004
Signing time: Sat 23 Nov 2024 01:01:34 +0000
Manifest this update: Sat 23 Nov 2024 01:01:34 +0000
Manifest next update: Sun 24 Nov 2024 01:01:34 +0000
Files and hashes: 1: HeK6Y2ZRQgNHa7fK_jZ1v_513Ng.roa (hash: tmToq1qvSDOAfGtjx86YOgWhKMzR74lZfHzbSrtDN4A=)
2: URh8uhF1Ii9Id0pKsBg16gFGU-o.roa (hash: bRGvqU0laqSMsudMQbALWO5oqzFGvQZS9et9RS0eO9Q=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: jxGjZxGHWiTDh/4vkJ1nxMjPu4i80vDKO2WQ7OILJmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:d9:e2:9f:fe:6b:3f:55:4f:ca:cc:59:c0:f2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Nov 23 01:01:34 2024 GMT
Not After : Nov 24 01:01:34 2024 GMT
Subject: CN=b093d450ed99af3f806519322a6ffa9ce7045993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:4e:ea:88:7a:4c:94:e7:53:e0:b9:7d:d1:
02:c9:b6:25:ca:87:11:96:4f:b6:8c:d6:f0:a7:d9:
c7:36:75:72:87:15:7f:b1:a9:fb:23:67:55:27:62:
f0:70:5e:78:50:50:0f:5f:d7:26:5e:cf:ee:4e:f9:
75:99:93:b2:1e:6d:59:b7:3b:8c:0b:5e:4e:db:ae:
64:b5:c2:69:33:49:2a:c5:b3:d8:cf:dd:56:7f:d9:
72:4b:bb:b5:a4:82:5a:a2:7b:48:b4:f0:e2:b3:10:
59:5c:fc:19:05:01:44:d8:70:ed:45:2d:94:62:0e:
5b:36:a7:ff:fd:aa:de:b6:51:e1:8c:58:63:ff:ab:
21:a0:c9:28:8e:48:f0:b6:3c:a1:71:04:d2:cf:fc:
a9:df:9c:44:2c:e7:f3:cb:d7:62:9c:36:6a:be:ca:
46:2e:0c:62:bf:f9:b1:76:be:cd:f9:99:4d:02:09:
5e:0b:16:f7:ac:9a:8b:e6:5d:4e:f0:ad:46:c2:cd:
1f:0d:a6:b2:21:8c:91:10:c8:02:a2:a3:6e:7c:5f:
ff:28:7e:40:46:a7:4c:61:0e:9c:cf:70:ce:70:c3:
d4:99:04:ba:a2:d5:12:a4:60:31:70:e8:46:19:ee:
80:8e:84:d0:01:ef:e2:db:0c:6d:a8:f4:c3:80:ce:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:93:D4:50:ED:99:AF:3F:80:65:19:32:2A:6F:FA:9C:E7:04:59:93
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7c:3b:b2:33:a4:bb:43:19:6f:c5:b1:2f:f0:bc:0d:ed:ff:
8b:50:80:e9:fc:6b:ac:3d:32:67:fd:c2:29:c7:4d:57:71:62:
71:c0:4a:ff:50:30:5e:35:58:dc:e9:9f:6d:2d:25:09:15:97:
f0:11:27:dd:74:aa:92:0c:f0:8e:e0:30:74:ee:bb:a5:60:4b:
e3:1c:2e:e0:9d:67:cd:19:17:ba:2a:f1:b2:f7:f9:23:de:1a:
85:11:37:2b:52:eb:7d:5a:4a:ee:71:9c:32:34:97:f5:c0:fb:
4f:fe:08:65:a5:84:32:e1:75:e4:6e:6a:e0:4d:da:26:c9:bc:
74:0b:b3:ea:59:b5:24:ac:bd:3f:39:3e:df:71:a1:65:ee:dd:
9c:01:8d:9d:4e:92:6b:08:ab:16:86:92:26:67:2e:d0:e1:ae:
be:45:ae:88:90:7f:51:b4:ef:cf:7d:dc:74:fc:8f:87:db:0d:
b9:f8:b6:96:60:03:cd:ca:0a:43:fc:9f:40:b2:20:1d:dd:d0:
be:e9:99:ba:ec:ae:e7:09:2f:93:1b:c2:ef:01:4e:08:b3:41:
bb:74:1e:c3:99:7e:54:45:d5:55:c4:a7:49:f0:4b:a9:43:bc:
58:54:bc:0f:73:b4:6e:81:d1:61:74:0f:a7:e5:c9:77:14:73:
18:2b:56:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:39 2024 by rpki-client on console-fra.rpki-client.org