Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: CU1EcpahzLuF3SsGkMMSJeNIsop6ENnJGtMtC2qdM4Q=
Subject key identifier: D1:63:D8:B2:12:9C:AB:AF:69:D3:B5:4E:91:06:0E:A2:DF:C9:70:D3
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 0193568B21B8D8111C3CE227C56CF1157AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:02:58 +0000
Manifest this update: Sat 23 Nov 2024 01:02:58 +0000
Manifest next update: Sun 24 Nov 2024 01:02:58 +0000
Files and hashes: 1: 2WfNa7eHv-vnanINgiVCStxqrVM.roa (hash: cyUGPojhw148GTwg+sjtF3ANybiNjWSQinoLXDVghS8=)
2: DnXZnG6dbV8hX1ypgelURh4VOU0.roa (hash: q0eVpiT5VIpCxan+ZryeRWbPQ27Kvtez3YL4EVVcKLo=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: gFQc54fm6VZWKBUYGhkIGN9aNLIkq5uPtj1FZj1N340=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:21:b8:d8:11:1c:3c:e2:27:c5:6c:f1:15:7a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Nov 23 01:02:58 2024 GMT
Not After : Nov 24 01:02:58 2024 GMT
Subject: CN=d163d8b2129cabaf69d3b54e91060ea2dfc970d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:d9:b1:b3:ee:ac:21:56:5c:9e:95:cc:ef:
82:d7:40:64:86:eb:55:04:e8:95:38:d5:3e:e3:04:
59:56:96:d5:b6:19:7b:25:cc:cb:7c:bb:b8:50:9a:
d4:16:00:01:2e:be:39:0f:29:a1:8d:46:09:96:ef:
b5:89:a6:83:cf:cf:08:86:36:31:c9:46:12:5d:a9:
7c:10:9f:3f:f3:fe:b2:81:71:77:17:f5:08:c6:37:
b6:3d:f4:98:4e:ea:7c:4d:63:24:87:ef:df:0f:4b:
a7:04:56:db:6d:56:64:73:69:52:30:94:ea:d4:1b:
83:1a:47:ec:d1:ec:4d:44:b7:3f:a6:ac:08:09:66:
c9:0e:bf:e1:a0:b7:92:9c:fa:e8:29:33:dc:12:67:
8d:b4:f4:3d:5a:b0:e3:bf:5b:8a:be:9e:7d:ea:68:
21:ab:6e:b3:03:30:61:82:c1:14:74:bb:65:97:15:
79:3f:e2:40:a5:cc:35:cd:79:5f:ea:5c:8c:17:80:
31:15:32:49:af:c2:8b:f6:9d:a0:a2:d3:ce:83:6b:
17:36:a2:e2:e2:21:46:de:8f:f0:01:0b:f0:08:b0:
d4:ee:91:e8:f5:29:a9:15:96:30:a3:b2:4c:ba:b8:
e1:55:97:f1:d3:5e:cf:34:c8:9b:ed:dc:b8:b9:3f:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:63:D8:B2:12:9C:AB:AF:69:D3:B5:4E:91:06:0E:A2:DF:C9:70:D3
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:6c:ce:9c:17:cc:b4:f3:71:6b:50:d9:c2:80:c6:4b:15:3a:
40:6f:2a:5b:c1:d9:d5:03:fd:af:e0:c5:4e:14:b2:4f:bb:0f:
53:55:80:cb:50:5e:2b:db:a1:a1:33:dd:c2:6c:ba:6d:d0:fb:
f1:9f:ac:0f:9a:ca:bb:66:8b:b7:b8:49:56:f5:10:27:45:55:
03:df:6e:62:d3:fb:1f:59:5b:fe:77:99:7b:58:b7:ca:1b:20:
bd:5d:7d:82:23:c2:a4:57:f6:36:1e:21:17:30:cd:60:a5:42:
66:84:df:93:c9:90:f7:cb:2b:4c:22:e3:62:30:55:f0:20:d4:
7f:55:73:84:07:69:60:e0:65:cd:69:31:90:2e:df:9a:5f:72:
98:e3:e6:4b:50:6a:21:c2:ea:e8:93:9b:b2:ec:9d:e4:6b:5c:
55:73:20:c9:25:93:f3:03:9c:a7:40:73:9d:cc:d0:9d:0a:99:
e5:91:b0:71:45:c8:a7:8b:d3:b1:40:96:31:37:a9:fb:31:e6:
2b:76:d3:bd:7e:ab:b6:44:d7:21:3d:c8:71:67:20:af:c8:ca:
e1:31:20:7c:b7:7c:2d:52:16:86:26:35:86:6d:28:de:3f:f9:
b6:26:54:ec:01:8d:09:e2:e5:6e:8a:31:66:9d:58:24:42:25:
7c:32:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:26 2024 by rpki-client on console-fra.rpki-client.org