Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: Li+XSCFB9tLFbXQdbLIgDL0yQsYV6X+dEfbc1BMw4KI=
Subject key identifier: D0:62:E9:2C:34:C1:FA:42:FF:A7:E7:D0:6E:50:A8:7E:5C:ED:05:E3
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019239CB72A2BD56F0B93BC8E313F2716B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0AD2
Signing time: Sat 28 Sep 2024 18:01:27 +0000
Manifest this update: Sat 28 Sep 2024 18:01:27 +0000
Manifest next update: Sun 29 Sep 2024 18:01:27 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: M9BeHsleL6awO03BUduXkSIdA304uBfE1ONpMx5EYj4=)
2: pUMmybOYcO81prQN7U6cl0VzBJk.roa (hash: obsnBPiSNa+9+H54Uv2AnlbZb9P4yWlmHceTCOipJ34=)
3: wMhGWoQ1fihL0qEQdB_TQV3xH2E.roa (hash: DTOsU2PHsWzBFtnHfqs8BPtbLbUvB7vohBsqtSWN/FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:cb:72:a2:bd:56:f0:b9:3b:c8:e3:13:f2:71:6b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Sep 28 18:01:27 2024 GMT
Not After : Sep 29 18:01:27 2024 GMT
Subject: CN=d062e92c34c1fa42ffa7e7d06e50a87e5ced05e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:22:97:77:9a:6e:3f:53:22:b8:07:d9:0d:
a8:19:80:e9:38:25:9d:36:de:d1:3c:ec:72:6f:47:
32:c8:e9:d8:81:f2:98:2b:1d:90:be:74:74:c2:26:
ea:91:d0:e9:c8:5e:b3:5f:24:3b:96:b2:83:c4:6d:
04:d0:9c:60:e2:fe:75:8c:ec:9a:0d:f4:7a:23:36:
d8:0a:9f:2e:f5:d2:9b:fd:ee:ed:de:71:ed:5f:06:
83:00:ad:43:1b:09:2f:d7:e3:09:42:90:28:7d:4c:
d8:e1:77:d1:1a:e9:51:ef:f1:19:da:a5:8b:6e:12:
cd:fa:f1:4c:19:fe:8a:e4:07:99:cf:53:93:18:bb:
ba:2a:c2:3f:e2:1c:4b:4a:74:65:49:d4:57:80:d6:
77:98:d1:f5:a9:c2:20:12:d8:1b:4e:bc:71:ed:30:
bd:e4:fd:b8:e0:2f:de:dc:67:78:29:46:93:75:9f:
67:13:0d:29:f4:33:b5:c9:46:86:04:fd:70:ff:ea:
9c:56:17:b4:4f:58:8a:cb:89:0e:de:47:52:e9:b9:
b5:74:75:a0:44:ba:50:59:e1:11:a9:db:3a:da:5a:
50:36:4f:96:c1:17:bb:35:f9:64:8a:e6:2f:f4:97:
fd:72:88:2e:a3:8d:54:1e:43:78:d9:6f:26:e8:58:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:62:E9:2C:34:C1:FA:42:FF:A7:E7:D0:6E:50:A8:7E:5C:ED:05:E3
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bc:d5:8f:b0:32:f0:19:ea:82:7f:89:cc:96:1b:2e:f6:cd:
ac:9e:8b:1e:38:62:82:cc:26:5d:63:d4:b3:e1:20:04:5b:ea:
28:0e:d1:4a:a0:9e:e2:a8:e3:28:92:03:ac:b9:ff:89:c6:54:
c4:48:65:87:cc:e7:c4:d7:dc:e8:54:98:12:f6:24:f9:d0:eb:
6f:7e:39:1f:ef:9c:f0:44:11:f3:7d:96:86:ec:fe:f0:cb:ab:
a7:27:fc:6a:5b:89:ea:64:f8:8f:7d:0d:c5:7d:08:cb:b7:23:
fb:74:28:18:ee:62:74:60:d0:6e:66:f0:61:c7:cb:8a:3d:fb:
57:72:ee:15:7a:8e:a1:86:10:29:9c:89:7d:91:31:95:4f:fc:
f6:1b:3c:61:95:22:72:18:a0:f8:dd:a8:f3:2a:0c:1d:5c:ed:
2b:bc:4a:48:1d:fa:b4:c4:1e:61:e4:28:ed:37:7d:dd:5e:75:
f0:bd:df:53:52:0e:79:eb:7d:a5:99:22:41:b0:58:b9:86:79:
12:ae:32:9f:8a:21:62:59:b4:d7:13:04:bd:1b:9d:b0:26:b1:
30:aa:83:2f:fe:40:e3:d2:c2:e1:3e:ad:2a:54:6d:89:b0:6f:
ee:09:3a:48:93:bc:2c:ce:0d:26:67:74:b4:fb:88:a3:8d:6d:
74:09:18:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:39:37 2024 by rpki-client on console-fra.rpki-client.org