Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File: MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier: y30uYqtGpyJVDtLV48cXy+wTCPhE/mcvuBeGhZAI9pw=
Subject key identifier: 3A:AA:64:F2:BD:12:3F:55:FF:A0:6B:BA:56:D5:CC:CC:54:D4:32:BC
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer: /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial: 019369343A14394FDE67821743F8CDB72F04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number: 0AEE
Signing time: Tue 26 Nov 2024 16:00:50 +0000
Manifest this update: Tue 26 Nov 2024 16:00:50 +0000
Manifest next update: Wed 27 Nov 2024 16:00:50 +0000
Files and hashes: 1: CWyfJTXCx0wQPKhXzmdnE6MnYLI.roa (hash: ThzuhEBJzcI748xo+Izb5BAPSfY4SltGrbBWgAqnbtA=)
2: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: V9PC8mOEnzGAqYkl2+1EQDegbI8g8JdFCc4W/NIU+A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:34:3a:14:39:4f:de:67:82:17:43:f8:cd:b7:2f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
Validity
Not Before: Nov 26 16:00:50 2024 GMT
Not After : Nov 27 16:00:50 2024 GMT
Subject: CN=3aaa64f2bd123f55ffa06bba56d5cccc54d432bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:6f:8e:66:0a:15:79:cf:07:ee:9a:c1:b4:
d2:e6:0b:90:66:20:97:5c:d9:75:3d:19:7e:fd:2e:
c8:d1:02:2e:2e:71:19:6d:dd:18:38:8b:a4:84:1b:
66:06:44:17:59:92:92:e3:24:51:06:14:2c:bc:74:
e3:96:cb:fa:7c:49:97:be:d6:a1:14:fc:e0:72:83:
bf:15:fc:4d:d3:b2:4b:8f:7e:71:3d:02:b0:2f:32:
19:e0:89:88:da:7a:d5:62:e3:f9:9c:ba:71:c4:1e:
d1:97:91:d3:b7:f0:d8:d2:70:dd:6b:12:89:6f:93:
fa:8b:ee:bc:03:4a:b9:d3:6c:e6:6e:db:67:bb:4c:
ab:6d:64:11:e7:3c:89:14:50:ca:e1:55:c4:f4:6c:
f7:8c:33:a9:68:1d:2e:26:f6:96:70:6c:24:bc:15:
c1:3e:ea:91:d6:41:ad:9f:07:1c:f3:50:79:40:70:
af:c7:73:c2:93:3d:60:8a:5c:29:51:81:94:45:17:
d5:f1:72:4d:12:e0:3f:87:4a:b3:0c:1d:a8:a5:98:
9f:cb:8f:68:ce:1b:b4:b9:7b:4b:58:a3:10:38:d6:
98:61:4d:70:df:66:c2:d5:6a:16:78:1b:85:93:55:
e5:1f:f4:9b:7b:ea:11:7c:e9:e6:68:76:fb:55:d7:
da:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AA:64:F2:BD:12:3F:55:FF:A0:6B:BA:56:D5:CC:CC:54:D4:32:BC
X509v3 Authority Key Identifier:
keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2f:31:02:da:e7:eb:76:10:05:58:5d:b5:98:6a:56:0f:0c:
67:08:89:ee:f1:62:23:05:fb:ba:2c:f5:e2:dd:11:fe:55:d3:
9a:70:34:31:4b:37:bc:ce:ea:ef:9a:92:78:41:9c:18:21:b4:
4e:d3:cd:dd:fe:a4:64:14:9e:a1:84:fb:8c:9c:fa:72:18:d7:
8b:57:4f:8d:83:c4:07:90:23:c4:da:56:ef:11:dc:b3:44:1a:
c6:3b:39:23:4a:96:5f:5a:d9:97:19:a1:70:eb:eb:fb:58:0f:
63:68:29:3d:19:89:e9:53:8b:0d:3d:b1:b3:19:63:45:c1:88:
d6:05:71:8e:ca:53:d8:5d:d2:ea:aa:d9:d5:7d:18:89:df:ee:
d2:a8:3c:fd:10:75:a4:c7:a7:9a:ed:e3:82:b8:1e:3d:3e:5c:
e0:d3:72:7f:67:31:5b:8a:ef:8c:f0:4d:01:58:eb:b4:16:43:
e9:41:21:d1:ee:ae:77:ef:76:cd:78:7f:74:fd:10:e3:1b:98:
16:41:69:3a:b7:22:39:66:2a:e3:92:2b:65:a1:12:52:24:e2:
2b:5a:6e:ed:f9:48:70:ac:0e:01:87:31:67:7f:7a:c6:4f:9e:
41:dd:7b:c2:72:69:13:c0:6d:81:19:77:8e:dd:73:4f:cf:0e:
82:a4:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:34:59 2024 by rpki-client on console-fra.rpki-client.org