Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
File: L7h6LDCddVU6RuECV3XpqkH2szc.mft (raw, json)
Hash identifier: GJhjnoAdB+/9sB0Gh1CdRr5MZXoiFCdr5JuOUIS31Tk=
Subject key identifier: 93:D5:68:F4:BA:1D:0F:51:E4:B1:55:2F:2D:C0:4B:77:F2:BD:72:2A
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 019368FCCAD4A55FAED92F03E2B2B43AE678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
Manifest number: 10A3
Signing time: Tue 26 Nov 2024 15:00:17 +0000
Manifest this update: Tue 26 Nov 2024 15:00:17 +0000
Manifest next update: Wed 27 Nov 2024 15:00:17 +0000
Files and hashes: 1: CQ_6N9m8J7zfNFXSCfg6Ho34Fpc.roa (hash: N7nVJjqzKG7TuJIw0ibfpw5I9i+j3S5Gg+Rsyv9b1GY=)
2: L7h6LDCddVU6RuECV3XpqkH2szc.crl (hash: eJZvZBFTcWbW+KbGWDT4Ay6San1I6jMT9fb2c/IkdoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:fc:ca:d4:a5:5f:ae:d9:2f:03:e2:b2:b4:3a:e6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: Nov 26 15:00:17 2024 GMT
Not After : Nov 27 15:00:17 2024 GMT
Subject: CN=93d568f4ba1d0f51e4b1552f2dc04b77f2bd722a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:46:2f:bd:ed:0a:de:c8:ce:cc:81:cb:70:cb:
69:98:16:3b:fc:65:17:d3:03:62:4b:4f:bc:1d:84:
9b:dd:80:a0:16:2d:47:d8:d9:e9:44:87:16:8c:30:
90:7c:88:fc:ce:01:ea:8c:02:5f:0a:b5:fa:2b:10:
59:d5:52:21:0e:15:63:dd:5a:7a:0b:4c:77:e1:77:
b5:7f:89:58:b4:5b:b9:37:28:b2:96:ac:0e:bb:9d:
0c:73:91:21:d0:8a:dc:e2:eb:22:69:77:23:c9:83:
96:10:15:47:a4:54:52:a8:d5:1e:55:89:47:a2:73:
7a:cf:88:9b:1b:61:b1:e0:a1:5c:03:1e:97:38:96:
a8:5a:69:eb:d2:4d:42:62:b0:38:46:37:7c:24:70:
34:19:d9:76:1b:e2:16:11:75:25:1e:83:c0:e9:aa:
c2:9d:51:77:88:2d:9b:b6:e9:00:63:11:9f:05:d2:
d8:0c:11:a9:66:91:93:6c:9b:e9:f6:ea:4d:96:1a:
6f:57:85:80:4a:4b:04:80:66:86:cf:52:55:37:c1:
67:cd:a9:26:24:e5:51:5d:3a:7c:6d:1b:8d:c9:fa:
cd:c2:27:bf:09:23:81:51:76:56:73:9b:04:8d:28:
15:ab:a8:10:d2:71:08:81:b7:4a:d5:73:12:3a:2e:
68:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D5:68:F4:BA:1D:0F:51:E4:B1:55:2F:2D:C0:4B:77:F2:BD:72:2A
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:08:78:a6:5b:23:67:66:e7:25:77:6b:a3:e3:aa:03:2f:8d:
78:a9:a6:f9:ec:56:f2:41:63:09:21:7c:ab:d9:98:15:4c:5a:
f6:e8:e8:e4:99:8c:c1:d8:23:0a:6e:02:98:31:fe:ec:37:ef:
3c:66:70:d1:ff:d7:17:03:70:09:c2:ac:41:5d:4b:07:80:5a:
1a:34:7f:78:d9:93:b8:83:74:eb:82:8c:0c:51:ee:bb:5e:0e:
4d:c3:a0:7b:37:62:cd:03:88:c0:c5:14:eb:66:e4:64:74:54:
da:a2:72:6d:bd:11:7b:ea:c7:3c:c8:43:14:1d:c4:57:e8:b7:
4c:b9:01:93:82:e4:a2:13:ff:65:7d:a9:bd:e7:55:49:f9:09:
84:72:c2:b7:f8:db:43:56:47:ee:0d:12:e8:ad:bb:18:97:99:
77:bb:8c:1f:87:d5:4f:c1:0f:ef:f1:37:9c:85:cc:ac:eb:86:
be:45:47:46:0b:91:dc:8a:79:9c:8d:50:56:86:05:f4:15:36:
10:59:3a:01:84:de:4d:55:4a:95:df:30:0d:ec:cb:b5:54:0c:
4e:55:3f:90:8a:02:5b:b9:ec:d7:33:2e:4c:7f:a7:14:22:f8:
4b:bd:fa:28:77:13:b6:6b:cb:57:60:b7:e2:a5:9d:32:96:42:
81:cf:b4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:35:32 2024 by rpki-client on console-fra.rpki-client.org