Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: VRtVl/OW3dnasHQ7k1+7UmWRNtywHI2+OiA+B7bZLCg=
Subject key identifier: 8C:43:11:9A:DE:7B:C3:88:82:FD:17:92:70:72:C4:4F:D7:48:CB:1A
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 0193538812FF326214010C69FD58D0AC088C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 1382
Signing time: Fri 22 Nov 2024 11:00:46 +0000
Manifest this update: Fri 22 Nov 2024 11:00:46 +0000
Manifest next update: Sat 23 Nov 2024 11:00:46 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: BHjgZ5KEGbBR1mtx2AgtOpSYilyGX4ErODPKBCOmMdk=)
2: Wmv38dM35pDRft2yHZrloAdWarQ.roa (hash: jW2YZn90+7iJ6thmnXW7py36cI1D0TzW/nZvhxw4j/M=)
3: lmieNRMEAjnct4jRloIpt_ITj_Q.roa (hash: QdFNZdlosp0GUDraRk/9zsgb4YQh6ddMJb3pOfa6IjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:88:12:ff:32:62:14:01:0c:69:fd:58:d0:ac:08:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Nov 22 11:00:46 2024 GMT
Not After : Nov 23 11:00:46 2024 GMT
Subject: CN=8c43119ade7bc38882fd17927072c44fd748cb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:f5:4a:ea:d4:ed:97:d7:92:cb:f8:e6:62:
dd:0c:62:4b:68:1d:fd:80:d4:47:2b:c3:b2:93:ac:
9a:b5:2a:99:f5:e0:3c:ee:81:a2:e4:2e:af:ec:1b:
f7:9b:47:50:20:30:f8:e7:dc:9e:c2:f7:29:46:a2:
c3:6f:f2:07:aa:2b:36:8b:75:3b:d4:99:7b:fc:41:
b0:55:f7:2e:48:f4:1f:9a:3e:48:7b:8a:69:64:63:
46:e4:7a:9a:d7:fd:e5:35:9a:c2:7e:21:24:fd:d6:
40:65:39:2e:ad:ba:1e:a8:99:f8:11:d6:1c:a7:e0:
e5:90:b6:38:99:56:6b:ff:f3:c0:5c:ee:7f:f3:6f:
82:1c:f2:f0:87:ff:48:4b:28:db:a5:cc:3b:fa:32:
2a:22:c0:84:55:34:e0:fc:fc:14:24:91:a2:59:c1:
3c:33:22:1b:ac:d6:e1:53:74:2b:4c:48:0a:e0:4c:
ed:88:e1:f5:56:79:db:81:39:5c:d1:4d:ef:89:74:
89:13:7d:43:bf:95:d5:5f:ba:de:71:dc:48:90:25:
41:67:e7:2f:c2:dd:a2:71:2a:e7:bf:12:30:86:ea:
b2:17:18:ba:e4:d7:88:c3:ef:b5:0e:4e:bc:ae:2b:
ca:c1:86:4a:1b:b3:02:36:ee:85:e3:61:86:f1:42:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:43:11:9A:DE:7B:C3:88:82:FD:17:92:70:72:C4:4F:D7:48:CB:1A
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f9:62:b3:59:d8:05:95:b3:e7:56:55:c9:b5:05:86:8d:cb:
32:a5:8d:08:21:e0:c1:3e:fd:29:d8:65:ea:d4:ef:a6:ae:96:
e8:73:cc:7b:c7:d2:b0:31:7b:0a:d9:ed:09:d5:47:9f:c8:8b:
8a:92:e4:30:f9:c8:8f:16:f7:4e:35:bc:33:42:44:39:9c:f3:
53:ef:d0:17:d7:bd:87:46:29:0c:7c:5f:83:66:91:9c:32:cb:
79:e0:5d:ce:0b:0d:af:d9:5c:2b:f4:9e:66:3d:09:97:2e:68:
99:c4:a1:e8:0a:56:86:62:70:d0:cd:eb:92:28:b8:0a:0f:22:
8b:06:f5:24:8a:1f:47:8b:49:7d:fc:d9:b0:b5:f7:6a:af:76:
d4:a3:ac:03:34:ad:aa:91:12:8a:08:c6:84:f4:1d:ee:b2:45:
3f:2e:7e:04:99:39:fd:b4:bd:0f:8f:62:34:3f:eb:18:3e:36:
2c:af:7c:81:df:44:b6:9a:d9:1d:4e:00:eb:f5:2c:de:a4:2e:
60:d9:2b:f8:38:06:ba:76:8c:60:ed:0e:85:ed:68:6a:cc:f1:
ec:e9:c5:89:11:bc:c5:e0:e1:33:ab:75:c6:0e:a0:4e:87:69:
1f:d5:15:38:6f:38:b1:bb:23:e2:03:7a:4c:e7:41:a2:22:8a:
5d:41:3d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:07 2024 by rpki-client on console-ams.rpki-client.org