Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
File: 42Op1wI7PLADKRLcqsnFY8kKl3I.mft (raw, json)
Hash identifier: qXDrog8JeHDyU+HDoI0MhC6Yd75+h/MhDmFKZQRejc0=
Subject key identifier: 9F:A5:CE:BE:7D:F4:0A:03:08:86:D0:BD:D8:99:3F:FA:48:90:7A:48
Authority key identifier: E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
Certificate issuer: /CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Certificate serial: 0193579BBCC99130CC2A665ABC74C755E53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
Manifest number: 07C4
Signing time: Sat 23 Nov 2024 06:00:44 +0000
Manifest this update: Sat 23 Nov 2024 06:00:44 +0000
Manifest next update: Sun 24 Nov 2024 06:00:44 +0000
Files and hashes: 1: 42Op1wI7PLADKRLcqsnFY8kKl3I.crl (hash: uQiewdTtuwEFLiHDXyC9mgStuvr5H07fG5d3f3BRr1g=)
2: Ibyte-tjE3QUzwaz7tIHIx4O7Vg.roa (hash: f+M4uxkuB9wS0xBVznRZhg0WIHyPQdZz3TeUVc46eBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:bc:c9:91:30:cc:2a:66:5a:bc:74:c7:55:e5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e363a9d7023b3cb0032912dcaac9c563c90a9772
Validity
Not Before: Nov 23 06:00:44 2024 GMT
Not After : Nov 24 06:00:44 2024 GMT
Subject: CN=9fa5cebe7df40a030886d0bdd8993ffa48907a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:a0:67:41:74:49:64:61:09:73:b1:d5:f6:
a5:c3:d8:e7:3d:f6:8a:5e:9f:fe:2b:10:b2:b8:5b:
bc:4f:bf:00:c1:31:1c:c3:02:58:34:0b:f6:e3:23:
8c:f6:54:35:eb:ab:f0:cc:17:e4:75:0b:0a:2f:e6:
59:d9:e8:bb:5f:5e:e9:61:d8:5e:9e:ff:c2:e1:f7:
f5:24:69:79:4d:e0:25:98:eb:ec:e0:90:72:dc:73:
02:8e:72:c4:cd:b3:81:06:8f:7d:83:90:17:f5:e9:
4c:2f:da:c5:d2:35:4d:00:06:6b:44:2e:6a:49:13:
3e:81:c2:60:b1:68:45:42:7b:81:69:99:68:83:ce:
c2:d2:ab:35:3b:e2:2d:29:70:f5:9e:2d:3d:df:67:
f9:c7:34:4c:95:96:c6:2b:74:04:6c:f8:55:b4:4b:
e2:60:af:b5:35:77:48:f7:ea:76:74:f8:21:35:2d:
15:a5:cb:56:0d:ed:00:07:04:ef:54:e0:c7:68:37:
45:aa:b9:87:35:ed:4c:f3:36:d7:de:4d:27:09:51:
4a:69:3b:07:ec:8f:aa:1d:5b:1f:1a:cd:9b:17:60:
31:9a:74:d4:05:72:c1:dc:9f:a5:b9:cd:f2:15:b3:
dd:69:dc:8d:f8:06:4a:35:bb:7b:34:55:f0:4c:56:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A5:CE:BE:7D:F4:0A:03:08:86:D0:BD:D8:99:3F:FA:48:90:7A:48
X509v3 Authority Key Identifier:
keyid:E3:63:A9:D7:02:3B:3C:B0:03:29:12:DC:AA:C9:C5:63:C9:0A:97:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42Op1wI7PLADKRLcqsnFY8kKl3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2d5337-da24-4ce8-a3b7-c302c10ec5c0/1/42Op1wI7PLADKRLcqsnFY8kKl3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:46:8d:10:bc:00:db:9b:7a:07:61:80:58:ae:9c:cb:c0:27:
1b:54:f4:4b:99:67:49:1a:5d:7d:9b:ff:8f:e5:4e:12:e2:7c:
2b:55:5e:50:a8:12:d0:73:ef:9f:b0:e8:5c:f4:c5:7b:47:6d:
7c:71:59:e1:93:21:cd:cc:62:c4:2d:e8:e5:7d:02:5b:4c:47:
8b:b5:9e:22:cd:46:bc:dd:21:f4:bd:31:47:24:fd:e1:39:6b:
22:50:95:49:23:5a:82:ce:c2:f1:16:9b:85:36:89:eb:0f:83:
a7:01:dd:27:3e:72:ce:bc:6d:1f:57:ea:78:35:4d:0b:ef:75:
62:cf:40:e8:84:64:35:8c:b6:22:1b:fd:b4:b3:b1:58:ca:ee:
5f:7e:86:6e:6d:57:12:33:80:81:53:50:d6:2c:ef:50:04:b6:
05:7f:d5:e6:2b:2c:85:ea:38:8f:4e:65:83:80:28:05:ca:a6:
80:e3:d2:89:0e:e2:71:fc:a3:93:b8:0b:34:b8:14:28:bd:d3:
db:a1:4c:72:06:aa:77:bf:fd:4d:b3:0c:61:35:25:d1:18:a2:
5c:a4:54:a1:41:dc:78:6b:3a:de:c3:6b:57:18:3b:8c:d9:76:
32:46:52:33:96:da:e6:43:0d:81:e2:53:eb:86:f4:c8:6c:ad:
15:37:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:02 2024 by rpki-client on console-ams.rpki-client.org