Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: oW5igIdMW1BMwFQ/y76X603RnX6O9dpM2fFFXzgW3Ts=
Subject key identifier: C4:2B:55:9A:32:91:3D:7C:A7:2D:62:AA:89:E3:2B:31:73:10:45:22
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 019353F5EF99CF05EC570BD9FC1AA6C6CE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 0264
Signing time: Fri 22 Nov 2024 13:00:46 +0000
Manifest this update: Fri 22 Nov 2024 13:00:46 +0000
Manifest next update: Sat 23 Nov 2024 13:00:46 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: PyCno6+hSCSBkkQEplW3FtR+G6OurWSWs4s7xusbljY=)
2: lRnPs1I47AaVBHetem50cN-N1rc.roa (hash: RrwoBbU+dZTWc8siwD6Ur6HWVvBcKfKLArLWeVhU/vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:f5:ef:99:cf:05:ec:57:0b:d9:fc:1a:a6:c6:ce:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: Nov 22 13:00:46 2024 GMT
Not After : Nov 23 13:00:46 2024 GMT
Subject: CN=c42b559a32913d7ca72d62aa89e32b3173104522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:39:88:2f:73:36:f8:68:d6:fd:c6:f5:04:8e:
5e:75:68:9d:3b:1b:22:1d:eb:e4:a1:08:40:a6:8b:
c2:f3:65:23:e1:8e:4e:26:16:7f:02:15:b7:e0:1d:
0b:24:fa:97:70:ef:db:2c:63:22:27:b1:ba:c4:e2:
7f:2c:87:3f:39:90:c5:e7:5f:85:13:8e:9f:aa:7b:
50:59:92:a4:ec:b8:1f:2e:98:57:10:d8:1e:7f:b8:
40:74:b1:ef:f5:06:df:68:bf:ef:81:d0:93:1b:33:
bc:18:8d:34:50:f3:69:c8:3e:66:bb:e0:54:c8:3b:
90:7c:25:30:d6:12:2f:ab:49:f1:aa:68:1a:79:b2:
90:f4:b8:16:3a:97:e9:82:99:12:07:a8:51:1c:4b:
e7:97:b4:95:0c:76:02:0e:ca:c4:41:39:29:fe:41:
c5:40:f0:a8:fa:c1:cc:fc:0d:d3:30:bc:95:86:f6:
f0:5d:9d:8a:db:19:5a:b6:25:45:e9:81:50:5c:87:
7b:78:44:6f:d6:9f:07:50:0d:d6:e8:b6:97:f3:9f:
5c:a4:43:2f:6f:e2:34:9f:35:7f:ae:c5:ef:be:8b:
4d:51:bb:1b:85:76:af:cf:bd:e5:96:90:06:f6:19:
3d:0f:d6:f5:92:fe:bb:e7:ca:46:9c:6c:db:19:cd:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2B:55:9A:32:91:3D:7C:A7:2D:62:AA:89:E3:2B:31:73:10:45:22
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1d:7e:f7:bf:09:9c:59:80:47:d7:13:77:2d:a4:a8:c4:24:
43:3a:ad:1a:bf:39:67:74:09:eb:ed:eb:6c:f4:85:be:30:e0:
6e:17:bb:96:d8:9b:df:54:0e:0f:bf:3e:bf:9f:e3:d6:e9:2b:
61:ed:f7:bd:c7:56:6e:65:23:a7:cc:61:38:3e:54:25:d7:b7:
f4:a1:17:fc:a8:84:2f:56:a6:26:f5:b0:15:aa:ec:2d:54:98:
e1:a8:1c:f7:e6:4f:5a:37:73:0a:89:e1:24:be:4b:32:10:a5:
7f:a1:82:44:0a:3f:98:f1:e7:d5:ff:e5:74:20:f3:41:fe:e4:
8f:71:58:3a:47:85:d5:38:8d:19:0d:16:50:33:84:06:1a:c3:
a8:7c:71:f1:df:9f:21:db:ad:29:88:c4:3e:07:56:81:74:44:
3e:c9:b9:70:7e:07:87:ec:19:07:1c:a5:22:3a:ba:6b:8c:9e:
5d:2b:63:1b:af:b7:3e:78:76:54:aa:a7:f2:c0:28:a6:89:06:
14:dd:6d:75:a5:3d:2c:29:0e:2e:19:38:25:d0:44:27:39:bc:
8c:5b:c2:39:d6:22:1a:29:79:ae:89:25:b9:32:bf:90:0f:e2:
85:f2:b9:3e:d0:21:ac:35:7c:f8:a2:7b:8a:2d:ad:f7:69:b9:
d8:b0:35:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:06:52 2024 by rpki-client on console-fra.rpki-client.org