Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File: pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier: zByNNS/FFSGGA5MaN4n2ragtirlfvnRW1gFU+Y6jNmM=
Subject key identifier: 5C:BC:34:B4:EA:03:A7:89:9D:E9:2C:86:F8:28:2E:F9:C8:73:4A:8E
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer: /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial: 01935387F3C3191A4D8826B748C84BEB190D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number: 0A0A
Signing time: Fri 22 Nov 2024 11:00:38 +0000
Manifest this update: Fri 22 Nov 2024 11:00:38 +0000
Manifest next update: Sat 23 Nov 2024 11:00:38 +0000
Files and hashes: 1: 53ZaxLsRIiEzv9Hw7VjvtE-IIgc.roa (hash: wYHPXTY/tLsUNlMkH+E6dFEiDiIXXnknwUPetUHFymU=)
2: Ndj0ofR7Im6hXhXtW7EmVsSGucU.roa (hash: aeLRFhoyda/N9rmXYlgCEJelQLvDDQjl6J1v/5aaNvQ=)
3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: XKI3IDCvaS31RjhIK8ebTy+FnpBQRydQCzb1ADOpEus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:87:f3:c3:19:1a:4d:88:26:b7:48:c8:4b:eb:19:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Validity
Not Before: Nov 22 11:00:38 2024 GMT
Not After : Nov 23 11:00:38 2024 GMT
Subject: CN=5cbc34b4ea03a7899de92c86f8282ef9c8734a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:ea:fd:ca:6d:94:76:08:29:59:b8:07:60:
19:59:50:63:a0:83:42:0b:fe:46:bb:8f:52:33:4c:
3f:d3:5d:68:02:23:3a:01:7a:89:6b:7d:2b:e2:cd:
8e:01:ff:a0:60:90:2d:eb:15:d2:82:a6:f0:e7:15:
c3:36:32:9a:9f:0f:35:09:44:4b:88:b8:58:50:72:
b4:85:b5:8c:a5:8a:e4:c7:eb:87:4f:86:2e:ba:86:
6f:5d:7a:25:b4:b1:47:6b:e0:93:ec:a5:6e:26:02:
33:f6:d9:ec:c7:c0:9b:76:2a:40:9c:36:2b:b8:d8:
6b:dc:0b:50:c2:21:3f:78:01:8f:86:5e:35:43:40:
6b:9a:cd:ac:c6:0f:67:19:2a:c7:fe:c0:e6:3d:4b:
25:8c:6e:9c:f1:f1:d4:61:00:4d:f1:36:11:c9:10:
92:9b:90:73:98:87:bd:82:5b:bd:27:fb:a2:3f:b5:
9f:df:ee:83:fa:20:30:78:ac:3b:54:f8:55:79:eb:
7a:fc:87:a3:17:d5:b4:a9:76:4b:f4:38:0f:c7:30:
58:2c:cd:d9:8d:5f:28:f1:81:ff:19:1b:7f:ea:b7:
b7:e2:e2:44:8d:52:4b:fc:8d:71:ba:60:3b:d5:c7:
94:c9:7d:95:2b:f7:f5:0d:9e:db:79:7d:ed:79:35:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BC:34:B4:EA:03:A7:89:9D:E9:2C:86:F8:28:2E:F9:C8:73:4A:8E
X509v3 Authority Key Identifier:
keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b0:65:b6:aa:2c:90:1c:3a:3d:b8:09:3f:0d:76:54:27:9b:
b5:e6:f0:ec:a0:ee:a0:cd:74:c1:56:3c:0b:4e:73:9c:0c:be:
0c:e5:ef:fc:69:e7:7d:5f:6f:20:d5:a7:f5:69:bb:f7:74:f8:
bc:82:49:a6:cc:dd:69:70:a5:4a:aa:d8:71:d6:3c:45:d1:56:
50:36:c3:a2:e7:c6:a5:9d:8f:7f:77:ed:66:e5:b3:12:0a:e7:
ab:54:57:6c:b3:52:d6:59:b7:ec:1d:3f:ee:86:b3:f4:e8:b9:
df:18:96:c1:6e:bd:93:fe:64:eb:5a:2e:58:ba:69:7b:b5:72:
91:00:cc:9e:d0:b0:1a:05:af:7d:48:36:df:27:73:fd:3f:b2:
87:3c:06:9a:16:df:ab:53:22:83:a5:80:03:1d:a4:47:93:91:
03:fb:2d:5a:3e:ad:c2:33:57:11:91:1f:25:0e:33:50:ac:7c:
6c:5b:17:55:e7:0b:c3:4f:3c:7a:5e:d0:f2:d7:e5:b9:33:4b:
92:be:24:52:41:e7:de:0b:08:d1:cc:10:77:69:8c:36:0d:17:
da:1e:3d:6f:13:64:31:c4:47:d4:b3:af:58:1e:0a:86:a1:df:
cf:dd:4e:1d:73:43:64:93:12:7e:cc:8f:7f:55:50:10:c8:01:
ee:4c:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:38:59 2024 by rpki-client on console-fra.rpki-client.org