Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File: 71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier: LHN3escz67ODVBrJYWWV/4h5MXBo6lxkCs6n2niEbAM=
Subject key identifier: 62:51:82:84:2E:15:43:17:4D:E5:4B:29:17:71:29:83:35:65:0F:8A
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial: 019352E2BB552DE84C068D08663DA17637FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number: 46
Signing time: Fri 22 Nov 2024 08:00:10 +0000
Manifest this update: Fri 22 Nov 2024 08:00:10 +0000
Manifest next update: Sat 23 Nov 2024 08:00:10 +0000
Files and hashes: 1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: gf88Molw8Zzs6Fzcvrm8ZkboPlSMkgKlEGnmzPcA06w=)
2: Y4rkJ9M6Bql9qJXZJpGNOXhrUoU.roa (hash: MMWA95usVkOo/ULJ7fq+aOftoicurzhnf/O0QzrElUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:bb:55:2d:e8:4c:06:8d:08:66:3d:a1:76:37:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Validity
Not Before: Nov 22 08:00:10 2024 GMT
Not After : Nov 23 08:00:10 2024 GMT
Subject: CN=625182842e1543174de54b291771298335650f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:50:ef:6f:43:62:eb:65:73:70:2b:99:59:
8e:72:51:cf:cd:4b:69:05:c4:2a:40:2b:ff:85:72:
f1:49:e6:89:ae:a1:4d:09:25:79:e8:cb:1c:0f:6f:
1e:dc:f1:4a:91:3d:55:7c:d2:79:0a:d8:9c:07:c5:
f4:27:b1:da:da:ac:2b:4a:54:eb:16:df:c2:56:69:
b2:30:48:6a:79:95:48:23:27:80:67:4f:53:9f:c3:
2c:a5:54:e0:c2:95:f2:fd:da:99:d9:99:ea:0f:2a:
25:6e:3c:cf:c7:f7:af:b7:29:e5:f5:89:3b:65:bb:
56:0f:83:1f:78:90:9a:e0:a4:6b:2e:71:4d:06:c5:
0b:43:ab:66:ec:66:19:0c:3e:cb:95:20:4e:e6:bc:
c0:46:7e:f3:83:b0:c3:93:f1:75:54:84:2a:27:d7:
4b:5f:be:f0:e0:23:20:98:85:94:25:5a:80:3a:35:
f3:67:9c:a3:24:83:d0:d6:a9:e3:22:74:77:d8:ab:
59:07:0b:ab:ca:4a:89:49:20:21:7a:b1:77:97:d7:
89:d9:07:8a:90:9d:42:75:e9:4d:dc:dc:bb:86:2d:
8a:5f:d8:2d:da:2d:b0:bd:a8:bb:f0:ea:7b:81:b3:
a8:d8:76:b6:d0:5a:89:bf:7a:6c:95:ae:e3:25:8b:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:51:82:84:2E:15:43:17:4D:E5:4B:29:17:71:29:83:35:65:0F:8A
X509v3 Authority Key Identifier:
keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c6:91:89:20:a7:18:39:87:9f:a2:0e:34:d5:c0:19:99:f7:
42:e7:40:0e:46:7e:f9:06:26:84:52:b3:82:82:1e:b4:18:72:
5e:aa:e0:18:1f:ab:8d:07:49:bc:71:5b:55:41:23:94:3b:dc:
3a:0a:47:22:2e:bd:76:92:f1:6a:4e:83:12:51:81:21:04:d6:
9f:d3:aa:e1:22:c6:e1:dd:29:f6:5f:31:3e:ae:50:00:a8:d6:
b0:ce:3e:ba:19:17:5c:03:27:08:22:e3:c8:ac:83:98:e4:d6:
59:8e:d2:15:94:bf:6c:41:7d:84:2e:2e:33:c7:6f:45:a3:1b:
79:f5:70:fe:03:1e:48:53:ff:4a:b0:0e:7a:ea:ff:9d:9c:26:
08:f6:fe:f2:44:a6:6c:c1:4c:ee:2e:1f:c2:f4:7e:04:ff:c2:
de:4f:d5:19:e6:49:82:da:29:d9:4c:1a:b2:01:fa:89:9f:93:
8b:ce:8b:a2:af:01:0e:ed:af:81:7d:b9:9b:a5:d5:f7:d6:a4:
81:a8:33:cc:e4:80:7a:69:e9:95:e1:73:29:99:f2:85:5c:e2:
80:c9:da:42:19:85:a3:ab:af:60:c8:03:18:de:48:1b:50:1a:
7b:ef:aa:9a:9d:47:1f:e3:7d:9c:fd:c5:98:b7:31:97:23:b9:
e8:b6:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:09 2024 by rpki-client on console-ams.rpki-client.org