Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: d/TPBuEIXC+o0MLl3opoyvdCenW/3fYfBgKZmWUq4pg=
Subject key identifier: CD:ED:51:29:B2:81:45:6F:91:95:31:17:5E:8C:BF:B7:88:A6:6C:35
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 01935508246AC1A76DD95ABDFEF3B393909A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 18:00:17 +0000
Manifest this update: Fri 22 Nov 2024 18:00:17 +0000
Manifest next update: Sat 23 Nov 2024 18:00:17 +0000
Files and hashes: 1: bWHKgCmcMYLntSLKZbrE6RObN7I.roa (hash: bAG5MeySUmSx1wWq4wvyULspP0dnGhiSl213COS0RnE=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: 11Q2/AO7bWO21ng4auU9M1xT4h2e7CYNdipETRB240k=)
3: mISpu_n-YL9vYFzSE14Tk2a1rNU.roa (hash: WZhc0IAPvclblTG7bYl2mtS/VFQmUVl/Lx1k/Xr9M6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:24:6a:c1:a7:6d:d9:5a:bd:fe:f3:b3:93:90:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Nov 22 18:00:17 2024 GMT
Not After : Nov 23 18:00:17 2024 GMT
Subject: CN=cded5129b281456f919531175e8cbfb788a66c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:a2:cf:fb:1a:4d:cf:c9:11:40:06:71:00:
c2:89:61:86:70:d2:a9:77:03:be:70:4a:f2:f9:d3:
38:1b:06:e4:02:ef:26:34:7d:86:e4:87:79:e0:6f:
41:16:00:da:0e:e2:db:fc:1f:d3:42:33:6d:ff:82:
91:67:65:45:88:50:5e:b1:5c:45:4c:27:b5:10:81:
65:9b:7b:ba:a4:03:eb:7f:1d:d4:a6:a7:78:db:12:
af:36:56:03:52:fc:f1:70:c9:46:1e:23:bd:6f:98:
f5:2c:b8:71:b5:6a:1e:3c:ae:8c:32:64:ac:d6:29:
0e:56:3b:40:45:e2:c5:4a:e0:21:58:5f:92:dd:96:
ff:dc:50:9e:2c:77:4f:49:d8:e8:27:d9:c9:97:06:
38:a5:f3:d9:48:1f:c1:68:83:67:f2:e2:6f:9c:5e:
e9:1a:41:7c:b4:88:2f:dc:01:b9:c5:9d:bb:85:50:
10:db:4c:6e:10:dc:d8:57:b2:9e:24:eb:30:f9:f5:
27:d7:5c:73:c8:e1:01:0b:20:bc:29:2f:1f:97:06:
d9:7a:dd:47:7d:24:db:7d:f9:1a:c6:ba:43:99:64:
3c:ae:5f:6b:ec:5e:7a:50:e0:3b:60:34:2b:75:af:
23:ce:c1:ac:2b:ff:7a:bd:6d:17:49:c8:aa:e0:ee:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:ED:51:29:B2:81:45:6F:91:95:31:17:5E:8C:BF:B7:88:A6:6C:35
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2b:f8:25:b7:aa:00:24:6b:6b:67:8a:18:1f:dd:81:f1:4c:
9b:4e:ef:b5:dd:51:fd:0d:de:d9:55:ef:c4:30:e9:cc:bd:fe:
6b:c3:95:e1:5d:72:ca:b9:28:d8:54:0c:39:59:25:05:81:e5:
b6:fc:87:d8:25:49:12:26:fb:e8:68:b2:fc:bd:be:a9:a6:48:
af:4f:46:71:91:b3:3a:7a:7d:a2:c7:fe:f3:8e:6c:4d:3f:45:
d3:98:5e:2b:37:58:a8:56:3d:d5:46:d8:2a:92:ff:ae:5a:58:
17:95:8f:05:4e:62:40:cc:d9:36:6e:42:be:38:8b:93:8b:75:
27:4b:2d:c5:14:12:ba:55:37:f7:7a:4f:4a:ba:f8:f1:2a:67:
02:9b:f7:01:48:16:e1:4c:8b:d8:cc:54:fb:11:73:c5:f2:9c:
5e:0a:4c:46:74:9f:65:81:bb:e6:c0:fb:26:99:64:91:72:df:
f1:47:0b:de:66:69:a5:0d:ba:cc:49:a2:9a:47:59:50:18:23:
a5:ae:97:f0:f9:7d:34:be:f6:f6:73:c6:95:60:a2:16:a4:7a:
2b:49:3a:16:da:5d:e3:0e:bc:30:ba:f0:28:ef:06:b2:15:ed:
66:7c:a4:6a:c6:90:a9:8b:90:81:63:f1:fd:70:54:e2:b1:08:
e3:8e:82:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:50 2024 by rpki-client on console-fra.rpki-client.org