Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier: bMY71aJWUGDXHZLgC92/hk9Mm+UWAG1vd09RYd3NEJM=
Subject key identifier: B6:96:92:46:63:5D:F7:0C:4C:BC:AB:85:79:85:A4:91:F4:FB:68:A6
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 0193639FA723A9BB8D7B01EE462E99EFD3E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number: 02DF
Signing time: Mon 25 Nov 2024 14:00:27 +0000
Manifest this update: Mon 25 Nov 2024 14:00:27 +0000
Manifest next update: Tue 26 Nov 2024 14:00:27 +0000
Files and hashes: 1: 36Z4NHiJjkw8u1gyM3uXav3N_q0.roa (hash: 70s5MhzaUieFgzIl5DGANPhyAqGePXS0Qqfq6VhTm+o=)
2: AQEy-BvD2l884GUMbvHopBGUv5A.roa (hash: hm2LvSRCgWBLaI4eeZJgCrEExjzuYWrsCC2UJaweG9E=)
3: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: 4rW6kgur3OEjGbsXNuj77HntvzXF7fYJeRw+pGeTq78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:9f:a7:23:a9:bb:8d:7b:01:ee:46:2e:99:ef:d3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Nov 25 14:00:27 2024 GMT
Not After : Nov 26 14:00:27 2024 GMT
Subject: CN=b6969246635df70c4cbcab857985a491f4fb68a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:98:43:f3:17:37:a8:f4:40:ae:e5:5a:37:
fa:21:04:99:7e:f1:cf:d8:df:d6:04:38:22:e0:bd:
15:97:76:9d:31:3a:04:f7:fd:c0:b5:ce:9f:17:5d:
17:8b:77:1b:ea:3a:60:be:b2:cb:45:77:12:85:e2:
9b:b5:63:d1:41:a4:08:27:a6:c9:4f:d1:e2:69:b9:
8a:ab:d5:81:5a:d5:27:f3:2d:25:97:0e:cd:34:00:
1b:8a:4d:42:0d:d9:bc:f4:c3:2a:0b:53:e5:2b:d7:
c1:fb:35:c0:b4:25:a8:a8:7c:09:55:ff:61:51:95:
3c:b3:85:b6:60:55:7b:fb:68:24:41:b1:bb:09:13:
56:5f:a0:1b:d5:34:de:75:a8:75:10:01:01:f8:8c:
fe:f7:2c:5f:5c:6f:ea:0b:f3:4c:b1:c5:ba:d2:23:
25:04:74:34:ce:0e:c1:4e:8b:e0:e7:e4:e4:62:d2:
a9:fe:84:bd:5b:2a:e6:d3:36:85:93:c7:ba:4c:40:
d5:11:91:a0:c0:3b:a9:83:85:e4:4f:06:fe:4d:47:
55:82:a7:66:06:d7:2b:56:f7:b8:87:ef:a6:7b:4c:
e5:60:9e:ac:8d:31:6b:85:36:03:38:8b:42:ba:ac:
0b:a6:8d:f0:06:bb:21:4a:be:73:69:b8:ff:40:59:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:96:92:46:63:5D:F7:0C:4C:BC:AB:85:79:85:A4:91:F4:FB:68:A6
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:84:d7:4c:ec:23:8b:d8:c7:5c:16:f1:6c:a1:a8:63:b6:
8e:40:89:a1:af:92:ab:7d:b2:29:87:d6:65:30:91:e3:63:d3:
20:a4:ff:0a:f2:89:f0:f9:cb:f6:dc:87:8b:eb:97:0e:a1:67:
a0:4d:a1:73:93:1f:38:52:8c:65:aa:f9:97:e1:4b:fa:b0:2b:
01:eb:49:c9:c3:aa:2a:79:00:e6:34:c2:74:36:40:bc:ea:79:
68:00:fc:d5:13:1a:d2:4e:d2:af:c5:f9:46:b2:9f:3f:6e:ec:
b2:22:e1:04:a2:f9:73:c4:ea:a2:e8:0d:e4:1d:40:f2:f3:bd:
5a:45:ad:c1:b1:b5:f6:08:a2:f7:c3:a6:02:33:5e:cb:65:de:
2a:8a:d6:fb:32:11:77:df:78:8a:95:d1:f0:a6:9b:05:8f:18:
56:a8:46:31:8e:94:45:65:ca:af:23:86:b2:3e:3d:39:72:9f:
a7:94:6f:92:61:89:87:9b:8c:3d:84:3c:cd:8f:ef:bf:2d:ee:
a0:64:7b:a4:d0:e0:f3:eb:db:84:08:bd:44:0d:a2:3c:e1:fd:
7e:ca:50:a3:32:e9:2d:de:79:d5:29:44:0f:8d:a8:3e:b4:3b:
90:4b:25:a8:2c:c3:22:27:8c:a1:e6:a0:47:ef:e9:47:7b:49:
ce:25:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:21:46 2024 by rpki-client on console-fra.rpki-client.org