Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
File: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft (raw, json)
Hash identifier: 5GKrhedIOcqkIW2GWlaSH7JHGYh4M6UfHWlf6Dc4dXg=
Subject key identifier: 54:6E:C7:78:5B:33:E2:22:99:1B:FC:2D:3A:BB:04:5A:E9:0D:26:3E
Authority key identifier: 85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
Certificate issuer: /CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Certificate serial: 019368589E831A359695BB1AD7335830AC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
Manifest number: 137E
Signing time: Tue 26 Nov 2024 12:00:58 +0000
Manifest this update: Tue 26 Nov 2024 12:00:58 +0000
Manifest next update: Wed 27 Nov 2024 12:00:58 +0000
Files and hashes: 1: U_SB6028ltV40-Q2YFUdKqR3818.roa (hash: 2CnxfGcjSkh6o8BNZdn6OmavaRW2jjued/CY3wCZ/qs=)
2: hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl (hash: Vl8eGosAIFzC04fZAq55m1ClTRYbD2h4VIz7EmItMFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:58:9e:83:1a:35:96:95:bb:1a:d7:33:58:30:ac:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859d5177077b90818c6f90ae4e44332d8cacbb74
Validity
Not Before: Nov 26 12:00:58 2024 GMT
Not After : Nov 27 12:00:58 2024 GMT
Subject: CN=546ec7785b33e222991bfc2d3abb045ae90d263e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cf:b0:b3:a4:83:35:03:87:d1:24:99:2f:2a:
92:3f:79:90:92:e6:3f:77:3c:2f:75:5e:d0:14:26:
79:69:f1:66:22:4c:c3:52:37:f7:e2:2d:2f:04:6b:
91:de:12:76:86:a1:8e:e5:d7:f4:a3:bf:79:1a:ce:
d9:ab:03:8a:68:32:52:47:fb:d5:42:ac:ce:42:5f:
d6:5d:9c:20:b3:71:ca:1e:9d:55:16:77:4c:ad:e6:
79:70:a5:0a:44:d3:c1:8c:96:12:47:4a:20:bc:2a:
ce:62:fa:4e:ab:a7:22:ff:43:c5:47:6d:75:05:70:
d5:0a:42:69:aa:7d:13:b6:28:51:e2:c7:c3:04:c8:
e2:ec:39:6b:dc:48:25:44:9c:13:50:86:71:46:b0:
4e:cb:2a:51:df:8c:fd:40:47:f6:c8:b9:f2:1c:0a:
52:0d:ea:7e:3b:0f:69:cb:4e:af:c8:a2:39:c6:b9:
19:50:db:db:e3:4c:9c:2d:c3:4f:0a:9a:60:64:e8:
5c:fa:75:70:cf:da:ed:76:2c:47:92:09:2d:74:6f:
c5:54:81:c3:46:cd:b8:40:a2:c1:36:e2:7c:7e:05:
45:80:6c:0c:92:ec:9b:9f:ea:59:bd:f0:5f:26:0c:
2f:ba:14:51:24:51:c4:88:0f:34:a5:2b:14:79:cb:
21:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6E:C7:78:5B:33:E2:22:99:1B:FC:2D:3A:BB:04:5A:E9:0D:26:3E
X509v3 Authority Key Identifier:
keyid:85:9D:51:77:07:7B:90:81:8C:6F:90:AE:4E:44:33:2D:8C:AC:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/faea43-f333-4509-a6db-3ac96be285e0/1/hZ1Rdwd7kIGMb5CuTkQzLYysu3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b7:57:03:69:a9:28:b4:8b:0a:0d:b5:dc:67:72:bc:27:d5:
34:86:35:74:40:4d:52:e8:49:1b:73:80:30:67:0c:8e:90:3d:
0a:6f:1f:6a:5e:00:5f:10:59:9e:51:44:18:8e:37:b9:10:2e:
a7:75:70:d9:4e:09:a3:76:94:50:97:4c:78:af:e8:33:3a:b0:
56:a5:b5:96:c8:ae:52:84:a6:40:dc:e6:6e:1b:97:b9:8d:6d:
ee:b5:3c:9d:61:26:9d:38:94:16:36:9f:ae:aa:19:f9:59:62:
a5:53:db:c5:53:7c:ad:3c:32:7d:79:88:68:ff:e7:be:9b:ce:
1d:19:05:3d:ff:e0:cc:8f:d0:d8:e6:45:cc:53:88:0b:40:25:
90:cf:7d:f5:a9:fc:80:1a:b9:7d:85:85:3f:58:7b:83:56:2a:
c3:e7:4d:ac:62:04:e6:f3:f6:8b:92:56:17:06:04:b9:8c:71:
c5:e2:87:60:58:76:20:05:ef:eb:9b:70:fc:d2:64:96:d5:7d:
ee:56:ee:cf:c8:3f:ba:97:e0:e6:b4:eb:18:e9:f0:bd:8d:22:
38:48:11:9c:34:60:07:51:5b:ba:e9:ff:87:ee:1d:23:a0:6a:
4d:0c:fb:8a:8a:f2:68:ab:47:ac:4f:9b:d9:77:2a:96:9f:f6:
83:27:7c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:35:35 2024 by rpki-client on console-fra.rpki-client.org