Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: ygvqafAecHfwKznhWmStqhP60cNA2Y00qxQTnRdMvRQ=
Subject key identifier: 8F:E5:22:F8:9A:C3:F7:29:46:A5:FD:8F:5B:50:F7:A3:C8:E7:1A:C2
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 0193696AA14CD780D764E24863C7C4BBA302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 1381
Signing time: Tue 26 Nov 2024 17:00:15 +0000
Manifest this update: Tue 26 Nov 2024 17:00:15 +0000
Manifest next update: Wed 27 Nov 2024 17:00:15 +0000
Files and hashes: 1: OR63RjEMQusyrkjmZy0Oa_XTK7g.roa (hash: FCK7R1JwdBdV/T7ybRhMByQsSn72rXetpigVStHSXy0=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: /gsA7rYHKYKsWxHrt8VUE16bk80PfBatd4E4+70GagI=)
3: oc3_si9kuMMvjCZ-NlfRI1KJwAg.roa (hash: 8LmNaCSTJaJpCgiNTo7B29mAaWlinuhbECk3Plmw2ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:6a:a1:4c:d7:80:d7:64:e2:48:63:c7:c4:bb:a3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Nov 26 17:00:15 2024 GMT
Not After : Nov 27 17:00:15 2024 GMT
Subject: CN=8fe522f89ac3f72946a5fd8f5b50f7a3c8e71ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a0:81:11:7e:0f:ee:7b:7a:fa:6d:97:9e:ba:
8b:cb:96:75:67:c7:54:fc:c7:29:27:11:59:56:bb:
6e:16:89:0d:62:97:d6:b7:ec:0e:83:27:7d:47:de:
48:55:8f:ed:59:a9:c7:55:d0:83:46:38:d5:07:e3:
79:c1:f0:6a:46:8f:09:f4:87:7c:3d:5a:1d:dc:7b:
9a:53:61:a9:81:19:a4:5c:ab:46:07:6a:ef:22:6c:
d1:c0:d5:0d:a4:e7:ce:f7:da:6f:04:f9:62:91:97:
3c:0e:58:33:64:95:5c:ce:ca:a5:e6:77:98:a5:2d:
43:35:4b:cf:4c:65:00:44:0f:97:bd:fb:77:e9:6e:
e7:4e:0f:1d:3c:27:4a:6e:d6:ab:6a:f2:2b:d3:ce:
9f:91:ec:c9:b0:65:ca:8d:0b:ab:25:6f:80:94:ef:
80:90:ba:41:43:a5:63:49:b5:a1:95:fc:65:b6:a1:
b7:56:c3:bd:0c:d3:1d:f9:97:12:1f:98:54:a3:62:
a0:2e:ed:5c:36:b9:9a:ca:08:7a:85:e0:8e:b6:02:
fe:30:b4:68:35:56:c3:90:35:a6:06:db:cc:e3:b2:
cc:16:ea:b7:d7:1a:c7:06:1e:25:fb:e2:b1:f6:05:
55:0e:df:40:67:78:73:02:0d:01:c0:99:5f:6a:5b:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:22:F8:9A:C3:F7:29:46:A5:FD:8F:5B:50:F7:A3:C8:E7:1A:C2
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1f:63:d6:3f:9c:6e:34:3a:66:6b:15:e7:6b:79:3a:15:9b:
49:7d:8b:96:0f:b8:53:43:12:f4:9e:a0:82:71:b2:9b:cf:b2:
37:91:c2:fe:92:63:73:6d:c9:0a:30:e5:2f:b2:17:26:ae:62:
4d:0b:b1:67:70:2e:27:0d:31:1a:bd:18:8c:96:d7:c4:50:a7:
db:5a:04:2e:8e:44:0f:26:8c:6d:5b:00:78:80:9e:a6:1c:f9:
85:fe:cc:5a:27:69:68:07:91:6f:cd:55:22:f0:17:bf:61:f9:
89:44:3b:b9:c7:63:cb:84:98:1a:40:40:3c:1e:5f:8d:6c:ec:
46:8c:83:f8:bc:a4:74:86:31:82:76:77:f0:d0:31:55:04:6f:
92:78:1e:0c:f5:9c:a9:30:d4:33:aa:4e:23:1c:56:03:9b:21:
47:15:c3:67:fd:89:9c:e9:7c:f5:91:b0:57:a4:08:00:75:9f:
fc:e8:b0:c3:b1:00:1d:98:b0:91:87:f7:3c:8d:dc:03:2f:a1:
0f:65:53:af:63:43:0a:82:ca:8b:61:43:83:e8:eb:e3:29:d1:
ec:6c:91:b5:03:22:ff:72:cf:3d:d4:a0:ec:1d:ae:a0:36:23:
5e:0c:58:69:51:64:4b:7a:20:dc:4d:c5:bb:41:64:55:5b:03:
02:0e:42:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:47 2024 by rpki-client on console-ams.rpki-client.org