Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
File: lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft (raw, json)
Hash identifier: OSxF8TNp0hSOFF4FFeTGfnrr5MClbzr2G/lhonRckk0=
Subject key identifier: A0:48:CF:81:24:2F:EC:8C:AC:0E:1A:6E:74:3D:8F:C2:97:44:55:67
Authority key identifier: 94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
Certificate issuer: /CN=945efd6c477806bd6b45267558d6828feec61ea6
Certificate serial: 019364B21FAB3AB0A3BBD8C2F4CCFB54D246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
Manifest number: 1047
Signing time: Mon 25 Nov 2024 19:00:15 +0000
Manifest this update: Mon 25 Nov 2024 19:00:15 +0000
Manifest next update: Tue 26 Nov 2024 19:00:15 +0000
Files and hashes: 1: jmjTSzl-e7Xb3CuSN1FHCKU9pkI.roa (hash: y6WcG/y2iu5DGpt9mZnYtfuka82pWFl4gPsyaq3sXMk=)
2: lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl (hash: aCG97XuP+jFl8CM2ay0OJY53REchWw4l6dHVF7A3MFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:b2:1f:ab:3a:b0:a3:bb:d8:c2:f4:cc:fb:54:d2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=945efd6c477806bd6b45267558d6828feec61ea6
Validity
Not Before: Nov 25 19:00:15 2024 GMT
Not After : Nov 26 19:00:15 2024 GMT
Subject: CN=a048cf81242fec8cac0e1a6e743d8fc297445567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:44:93:8a:93:0c:b9:21:9b:9e:01:46:9f:
7b:81:c0:a9:ed:d2:f2:f6:a2:6c:93:00:5d:b8:1a:
c1:af:7d:ae:45:3b:ea:96:06:47:bf:58:a1:57:00:
33:d5:f2:27:27:3c:42:f1:7b:0a:eb:dc:4a:c7:31:
7a:4b:22:ad:e7:27:0b:86:96:1d:a6:2b:c6:37:d1:
53:47:7e:85:46:fa:7d:50:91:f1:8d:4f:5f:01:e8:
bd:75:15:19:8a:4d:6b:0a:ea:b8:d0:6a:69:14:fd:
1c:9c:77:b8:bd:cc:76:31:c6:5d:6b:71:cc:f4:60:
af:6f:98:e8:bc:af:dc:f0:44:66:f1:a1:2e:ce:0b:
73:a7:c9:48:ce:ad:35:04:6d:ab:9e:d9:a0:87:9e:
b4:62:e4:78:1c:ed:03:cd:43:20:cb:9c:2f:a3:c4:
34:e9:0e:af:9e:15:da:16:61:d6:ad:c9:21:1b:62:
c6:2f:8e:4d:90:ed:0a:19:09:04:cc:16:b1:00:8a:
10:df:5e:83:7c:2c:4d:4f:55:4b:12:e9:78:fd:25:
3b:1b:10:8f:74:24:89:55:a6:e1:56:12:a6:25:51:
da:1b:29:0d:74:6a:6a:b2:9f:4e:c4:9c:7e:74:70:
02:e5:cb:0b:18:4f:2c:e6:e6:e7:4a:c1:13:58:db:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:CF:81:24:2F:EC:8C:AC:0E:1A:6E:74:3D:8F:C2:97:44:55:67
X509v3 Authority Key Identifier:
keyid:94:5E:FD:6C:47:78:06:BD:6B:45:26:75:58:D6:82:8F:EE:C6:1E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lF79bEd4Br1rRSZ1WNaCj-7GHqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/328fab-4ebc-4e1f-840e-bc424349a16e/1/lF79bEd4Br1rRSZ1WNaCj-7GHqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9c:5e:03:23:fd:01:f3:2e:34:be:7a:7c:57:29:6c:05:d3:
16:91:ed:87:89:de:b5:02:49:03:c1:2c:f4:b7:a2:a9:98:26:
cb:80:68:fc:90:29:e3:a8:d5:5d:fb:1d:d6:94:f3:2f:30:88:
6f:26:9c:c5:90:79:cd:67:86:ca:30:eb:3f:90:e4:6e:ab:11:
b0:4c:f9:7e:c1:6e:8f:64:f2:bc:d1:12:b8:cd:5e:a9:3d:12:
84:e0:7f:0a:fc:3f:9b:7a:45:09:c2:d9:f8:5b:98:a7:f1:e7:
55:99:9f:9d:7c:a9:66:e6:da:1d:54:b7:0f:a0:d3:15:5f:30:
b8:ed:eb:c4:52:01:df:94:1d:06:b9:bb:8b:ff:fa:06:e2:20:
df:a3:4c:e9:7d:46:8f:d7:34:12:db:9c:b0:5f:c1:c3:62:8e:
41:90:79:80:32:74:09:ea:3f:f9:9f:eb:a9:af:00:bf:6e:50:
92:ba:e7:82:fe:f8:ce:c0:fc:31:66:1f:55:93:68:cd:ee:19:
35:13:79:9f:40:e6:40:c0:8c:47:79:f1:b2:3a:85:a7:d4:de:
f0:5a:d4:dd:bb:2f:23:62:e2:c6:4c:1a:e2:68:86:83:68:a1:
d7:aa:b5:dc:9f:87:38:79:34:d1:a9:72:e2:63:3e:d6:a2:74:
54:25:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:50:41 2024 by rpki-client on console-ams.rpki-client.org