Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
File: SHaJAk8W57wukJcGwG2RkDxcfaw.mft (raw, json)
Hash identifier: MMHgtZny83FfZomf7dT6WRa669Fw4SVL2gaYIOAaNzo=
Subject key identifier: DD:AF:BE:0D:E3:36:1E:2E:83:B4:6E:69:A8:E9:B7:A8:84:0D:C0:CB
Authority key identifier: 48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
Certificate issuer: /CN=487689024f16e7bc2e909706c06d91903c5c7dac
Certificate serial: 019236CB6D12A086FE4585CAB2B95B054343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
Manifest number: 10F8
Signing time: Sat 28 Sep 2024 04:02:34 +0000
Manifest this update: Sat 28 Sep 2024 04:02:34 +0000
Manifest next update: Sun 29 Sep 2024 04:02:34 +0000
Files and hashes: 1: SHaJAk8W57wukJcGwG2RkDxcfaw.crl (hash: K7k4GMvFS3QZk+kd4dVUlxczc7SSM/cbsrZcV3wrCFs=)
2: c7-iOxX0UXmpP1ztGfXozWTlrKU.roa (hash: lfri44X7fCySoQ2ESDjmqNZkCnjnlbX1oqjdi6uXUyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 04:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:36:cb:6d:12:a0:86:fe:45:85:ca:b2:b9:5b:05:43:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=487689024f16e7bc2e909706c06d91903c5c7dac
Validity
Not Before: Sep 28 04:02:34 2024 GMT
Not After : Sep 29 04:02:34 2024 GMT
Subject: CN=ddafbe0de3361e2e83b46e69a8e9b7a8840dc0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:2d:d5:95:15:27:9d:4a:a0:03:03:b1:c5:
9e:88:07:a2:3b:29:ab:74:1c:36:2e:11:f4:b1:f0:
cd:9d:43:92:d4:64:1d:ca:44:c5:d9:5e:46:33:d0:
6c:52:b3:13:d4:a3:3d:4d:47:bf:ef:54:f8:0c:a3:
47:52:82:65:b6:5c:5b:b4:a5:8e:59:37:d2:e3:d8:
d9:c8:6b:57:99:32:8f:a2:56:a9:f8:73:61:bd:ec:
99:7f:32:fb:84:c4:fe:88:ab:56:1f:52:2a:c6:06:
4f:6d:48:5f:0d:36:5a:78:d2:ff:09:5e:ca:52:7e:
95:90:6d:02:75:5e:5a:04:ea:8e:db:08:2b:08:52:
cd:5b:27:22:3b:54:85:d6:01:62:bb:e3:5e:4f:c0:
50:2c:f8:e9:5a:9f:ca:05:0b:ad:4f:06:60:ec:f8:
b4:b5:57:6e:19:70:95:1b:08:b3:04:b9:0a:1f:3f:
c5:d7:f0:ee:32:5e:c6:43:07:d8:76:99:aa:56:58:
b4:c6:c9:d7:92:d9:fc:5c:e1:20:fd:76:a5:e1:24:
03:be:19:5e:de:7f:a7:a5:8d:a8:d5:a5:ba:d1:bc:
02:99:be:12:50:87:68:b1:57:d2:40:29:90:bb:c8:
f6:3d:5f:05:eb:f4:c8:27:0c:4d:f9:40:52:c3:39:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AF:BE:0D:E3:36:1E:2E:83:B4:6E:69:A8:E9:B7:A8:84:0D:C0:CB
X509v3 Authority Key Identifier:
keyid:48:76:89:02:4F:16:E7:BC:2E:90:97:06:C0:6D:91:90:3C:5C:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHaJAk8W57wukJcGwG2RkDxcfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c7afb1-f00f-49d7-9f11-6e6361bea989/1/SHaJAk8W57wukJcGwG2RkDxcfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:89:02:6a:80:c5:21:de:3a:60:fb:22:2b:2b:2d:a5:1b:7e:
08:48:75:7c:8b:05:ed:2c:d5:23:b7:07:ee:ee:3a:b8:02:f8:
d1:38:ca:93:62:a2:99:00:d8:a4:2b:e5:13:51:26:07:1a:eb:
44:14:1a:54:ff:a9:0d:5f:7e:2c:95:10:62:bf:8c:48:c1:7e:
44:bd:f4:b2:d8:89:8d:c7:c0:8c:e7:49:e8:28:07:36:4b:65:
0b:92:f6:32:9b:0b:35:63:2f:28:37:14:4b:de:2f:4a:bb:61:
c1:b5:6f:a8:9e:e4:f4:1b:e9:5f:00:3c:11:cb:22:83:55:a2:
2c:6e:a5:43:52:3f:eb:45:b4:8b:75:b8:93:eb:c0:95:ec:ea:
ea:f6:5f:3b:31:85:8a:21:05:91:5f:0d:22:a8:ca:70:aa:bc:
23:2d:b7:73:df:bf:b5:cf:4c:d9:ef:82:b1:ec:c8:ea:c6:fb:
92:6c:eb:fe:65:fe:d0:bb:7b:e4:50:c3:2c:de:11:da:18:ed:
9d:ea:2f:3a:e8:fb:d8:41:4f:7c:84:c7:24:cb:29:06:dc:4b:
89:27:23:7c:5c:48:58:9e:8b:8f:67:78:fc:f9:70:c5:94:1c:
e7:8f:3b:2f:6b:59:ea:2a:a1:d6:df:53:80:2f:3c:25:b6:2b:
00:50:f9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:16:47 2024 by rpki-client on console-fra.rpki-client.org