Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: 2lyPvsgAmbU7YaLGmNUMHoEl91wNgXyXKVGNaEsIp00=
Subject key identifier: 4D:C9:E3:6B:15:34:7C:FA:8E:9A:03:3F:AE:BD:08:B9:F7:A9:DF:28
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 019356BFA3F81DD92DB5CEC218C0B595AB8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 06A5
Signing time: Sat 23 Nov 2024 02:00:20 +0000
Manifest this update: Sat 23 Nov 2024 02:00:20 +0000
Manifest next update: Sun 24 Nov 2024 02:00:20 +0000
Files and hashes: 1: X2OUTpbQfsZw-VIkUy7-7rL1GFM.roa (hash: eakXgaR2/mZNtoxszg3Zo1L0ErbEH4AY5ajuWmbZt3I=)
2: jkV6lPcn3ZhNbYk3eVydOBP6nYk.roa (hash: 7B4yoGTkbwjXl6RRIOpoE3WoiYeXRd17dyl2U3Fe+7Y=)
3: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: X9TJLP2Rjxp49gsDRw63TxSi/G32Zf8S6XfUfMBT2e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:a3:f8:1d:d9:2d:b5:ce:c2:18:c0:b5:95:ab:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Nov 23 02:00:20 2024 GMT
Not After : Nov 24 02:00:20 2024 GMT
Subject: CN=4dc9e36b15347cfa8e9a033faebd08b9f7a9df28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f5:f3:e9:e4:a2:60:3a:30:f8:a6:d3:63:8a:
14:b2:85:7f:36:bc:8e:61:a7:e8:c8:c0:1c:1c:d4:
c2:bc:a2:0d:50:34:fc:cb:4a:f0:16:f7:7b:f5:90:
cd:5a:a9:a3:5e:51:56:81:5a:d0:3d:05:7c:47:79:
74:99:5a:83:04:1b:3f:77:b7:90:2a:7f:ce:a4:b9:
f1:50:54:a7:49:66:66:9f:b8:ce:84:e5:20:ee:63:
7b:cf:9c:2a:d4:1f:ad:a6:07:08:3d:4c:ef:4e:6f:
31:1e:ca:ed:66:91:7f:5a:0e:f5:2d:bd:18:0e:8c:
b2:21:70:53:c5:2e:a9:38:73:dd:a3:d7:37:38:8f:
dc:42:80:c5:c6:32:c3:c4:14:5c:b6:5b:bd:18:52:
08:80:6e:bc:2a:93:56:37:2a:38:2f:8e:81:91:b0:
58:87:83:be:cb:46:11:09:23:a5:c8:e9:b9:2b:b2:
b3:b1:a1:7f:21:f2:ef:46:44:50:2c:77:66:23:44:
f1:bb:17:6b:41:c6:e7:f3:0b:07:58:a7:1f:fa:21:
9e:ff:69:bd:4a:4c:08:a5:fb:15:5c:09:c7:77:70:
e0:10:f7:a9:27:60:73:79:61:d5:e3:cf:b5:75:5b:
f2:e3:37:75:47:dd:ee:9c:b3:31:32:1c:39:16:c0:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C9:E3:6B:15:34:7C:FA:8E:9A:03:3F:AE:BD:08:B9:F7:A9:DF:28
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:32:61:b4:b6:40:10:9f:f1:ac:be:92:fc:d0:c1:db:82:61:
dc:42:a0:f3:ef:47:5c:94:ca:02:f7:60:31:85:48:c6:e3:a9:
34:f6:5f:af:eb:8b:76:69:8c:d4:84:6e:ad:e2:30:07:bd:4e:
85:c2:72:fc:d2:d5:48:6a:2a:da:c7:31:70:b7:bb:51:3d:0d:
15:40:53:72:54:80:6c:81:ca:52:8a:5a:79:46:a9:03:5a:fb:
47:87:8e:e0:74:94:a0:fc:0f:ea:69:c1:03:17:be:c0:50:71:
60:84:f1:2c:5e:1a:48:08:9c:65:27:a7:32:89:b5:9f:fc:e5:
f6:26:1d:8d:c1:36:8d:05:70:6e:42:4e:e0:4f:74:64:27:40:
c0:b3:8c:21:e5:c3:58:cd:e6:7c:4f:f1:1c:cc:56:df:5f:a8:
31:d5:64:10:42:93:29:19:44:95:16:57:1e:de:cc:c4:fc:81:
08:43:5d:cd:1d:78:ff:93:3e:e3:53:97:c9:2b:e9:c4:0b:86:
a0:8c:51:de:c0:0c:8f:bf:5e:7e:3e:63:30:0b:11:2c:d6:06:
00:ce:fa:9e:43:bc:4d:cc:c6:da:96:46:db:58:21:1f:c1:41:
64:bf:07:04:f8:2c:e9:26:82:f4:23:78:b2:68:4a:fe:f6:36:
36:f4:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:34 2024 by rpki-client on console-fra.rpki-client.org