Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: DOOiVBk9bjLRKMR6tfqPkQ8FMhsHw/JYPwh/U4SHZG0=
Subject key identifier: FF:3F:B2:FD:1E:43:F1:66:D8:9B:97:38:71:C4:0E:39:B0:D0:AD:28
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 01935576889CF14CBD78253DB792D4F29D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 10AC
Signing time: Fri 22 Nov 2024 20:00:51 +0000
Manifest this update: Fri 22 Nov 2024 20:00:51 +0000
Manifest next update: Sat 23 Nov 2024 20:00:51 +0000
Files and hashes: 1: gbma0zCcoMPi16meHVVHvJ9PzbY.roa (hash: jZhcRhNWNnm2ZaHjBQqccrXMwv9PWlV2cSEWnUJtSpE=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: nZmrB7y+nqYojMZay8iqXrazEmPZOior1FEUaOUO3/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:88:9c:f1:4c:bd:78:25:3d:b7:92:d4:f2:9d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Nov 22 20:00:51 2024 GMT
Not After : Nov 23 20:00:51 2024 GMT
Subject: CN=ff3fb2fd1e43f166d89b973871c40e39b0d0ad28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:86:06:f1:dd:dd:92:de:e9:20:c6:18:29:
fc:39:3a:1f:83:ea:d5:1e:c1:51:ab:ef:96:0e:b6:
a5:4e:a9:79:87:a3:8d:74:c9:02:fd:a6:bc:3e:ac:
b4:54:ff:ae:30:88:30:f9:cd:66:99:6b:fb:3c:b2:
da:dc:3d:ad:b6:7c:18:ee:df:f1:8b:2d:55:ee:7f:
19:9f:3c:00:78:5c:50:bf:89:a2:14:37:a1:21:26:
3e:89:cf:39:60:9e:99:b9:e6:08:1c:91:0e:da:4c:
a3:ae:e2:86:f5:4a:dc:d8:85:2b:c4:32:d5:6f:4f:
49:1e:39:b4:15:07:70:52:70:40:a9:67:20:dc:f8:
ca:d0:2d:79:8d:04:35:bd:20:8c:64:f4:03:5b:81:
a4:95:ca:98:bb:cc:8d:ac:de:41:4f:fb:6b:d5:f0:
26:cd:15:de:eb:ba:20:5d:79:27:4b:bc:75:c9:3d:
b2:94:b8:85:2a:50:85:a9:7d:f4:32:13:54:69:2c:
91:46:74:77:98:74:b5:10:5a:73:a5:c0:19:4a:83:
38:fb:37:ee:9d:7f:0b:d0:3a:8e:60:e2:6d:8f:8d:
5c:2b:43:c9:fe:45:2a:17:db:9b:84:2f:34:7a:4d:
cd:a8:14:06:9d:a9:ee:c7:cc:bc:86:3c:44:44:62:
57:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3F:B2:FD:1E:43:F1:66:D8:9B:97:38:71:C4:0E:39:B0:D0:AD:28
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:21:1f:ad:4e:e5:14:a5:a5:3f:6a:ff:af:6d:6b:5f:7d:7e:
e3:95:03:92:e9:01:1f:96:3c:14:d8:cf:a3:0c:31:c8:24:32:
5f:bf:d1:81:13:e0:59:fb:d1:9b:8f:f7:44:f4:27:b4:75:55:
62:02:b7:3d:84:7e:57:cf:82:df:d3:51:d5:26:74:48:8d:6a:
b4:b4:6d:24:6b:bb:6b:1e:db:8d:fe:5f:12:7d:15:0e:29:73:
01:19:90:da:ee:76:78:72:a7:72:b8:a5:50:f8:e2:28:f7:c4:
9b:84:00:98:4f:2b:1c:1d:47:17:db:22:b3:3e:69:79:95:f3:
eb:1f:86:3b:0b:ca:68:b7:76:70:b5:6a:17:41:50:14:cc:a6:
79:ba:50:be:44:6b:6a:62:a2:d8:a6:e5:ec:65:40:43:d8:57:
a5:70:18:8d:2c:3f:12:1c:2c:9a:cd:05:dc:58:69:9f:1d:9d:
04:04:55:73:d2:9e:cb:8a:7c:08:8a:f0:08:f1:8e:d4:66:1a:
6e:72:c4:f1:43:0f:a8:38:72:1e:c5:d7:03:bf:b5:bb:3c:ae:
ff:18:ac:ff:2b:f2:80:3d:93:e2:44:43:e4:03:c1:5c:25:6e:
72:a8:12:91:53:f9:40:4a:0b:4a:47:e7:93:0a:b2:fb:ca:a8:
49:71:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:14:05 2024 by rpki-client on console-fra.rpki-client.org