Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: sQLews28g++cT7/cxNpS2J2WSyiHjXoPdyqjfyXqCvc=
Subject key identifier: 06:1F:3B:4A:B5:3C:9B:84:0F:F7:DC:0F:78:C5:A2:55:7F:D5:AE:16
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019350C001E5D8491AD5D8F4A2DCA7CCACF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1374
Signing time: Thu 21 Nov 2024 22:03:00 +0000
Manifest this update: Thu 21 Nov 2024 22:03:00 +0000
Manifest next update: Fri 22 Nov 2024 22:03:00 +0000
Files and hashes: 1: Pkh9Gq5RtL3DJ7LKJyHpMSbW8Wo.roa (hash: +EFcCzSSPEHdejmzwh6R4E0f2/7MJ93UUlD5525RfZ8=)
2: S9_aEzIET9Tl2hp9m5pRg183KsU.roa (hash: 9m6tHjFEEuvSIfG+FMLnPi7J/36F9zimXFG5478uO0I=)
3: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: jjf+ZLTgUV3Njt/VugHOyd6gXljbEvWvTKtHrM+RWrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:c0:01:e5:d8:49:1a:d5:d8:f4:a2:dc:a7:cc:ac:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Nov 21 22:03:00 2024 GMT
Not After : Nov 22 22:03:00 2024 GMT
Subject: CN=061f3b4ab53c9b840ff7dc0f78c5a2557fd5ae16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ee:15:3b:24:7f:60:9b:6b:a5:5a:83:fe:76:
33:24:be:5e:97:f7:18:e3:10:a6:1c:ea:ed:a1:47:
19:d5:a3:7c:f0:c6:9a:61:4a:33:52:d6:43:4f:4f:
bc:af:6f:78:1c:1b:2e:c8:5b:bf:60:e6:4a:4b:d0:
a1:e0:c7:91:87:27:ce:fe:af:93:c8:c8:99:df:51:
23:34:c6:12:9c:f1:db:ce:0b:12:b9:fa:2c:cf:4c:
12:e8:17:55:f0:04:4f:7b:32:52:f0:ef:4f:c2:76:
1b:5b:52:8c:4e:ae:60:02:2b:a2:73:aa:54:0d:4a:
33:b6:63:5d:2f:e8:27:da:cc:dc:59:9a:bc:83:f3:
3e:45:97:7f:68:d6:cd:89:e0:c7:5d:5d:b4:ee:52:
90:76:24:2e:42:83:65:2b:ae:63:46:d8:52:21:f1:
0e:f9:32:84:92:a4:09:33:82:f3:8e:6d:6b:8a:33:
9e:06:35:1d:9e:68:c1:f4:9b:d5:06:cf:d2:a6:ad:
18:b8:bf:e2:0f:c3:c6:2e:15:e3:f1:16:d1:b7:84:
bf:87:e3:2b:42:db:c1:c2:42:c9:c8:ed:b2:47:8e:
64:8a:6b:f1:84:fc:e6:8f:f5:0a:2e:1f:a6:da:ae:
d1:32:f5:37:a1:f8:d0:06:75:d7:e6:c1:02:5b:e7:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1F:3B:4A:B5:3C:9B:84:0F:F7:DC:0F:78:C5:A2:55:7F:D5:AE:16
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:32:e9:10:fa:0e:5c:57:90:b0:a7:10:82:ac:0a:15:a9:fc:
e4:5f:53:a1:d1:b9:5e:e1:8b:04:e5:34:23:89:f2:d0:96:47:
ca:aa:b0:8b:74:d1:10:10:a3:03:d5:cc:44:d2:f5:57:5b:57:
05:87:53:10:39:f5:ab:e0:fa:e9:04:8b:e9:9c:8c:51:d6:2a:
6b:28:9c:9e:b6:44:d6:60:6f:89:99:76:49:73:21:e0:dc:8c:
b1:16:b8:70:01:bd:ab:3f:f9:28:d2:9e:23:6b:e7:bc:8a:45:
ac:db:0e:0f:d2:9f:89:d7:f9:85:ec:23:75:77:96:a9:5b:e7:
a9:54:72:2b:f8:7f:1e:f7:6f:ad:c9:1f:22:aa:46:7c:24:34:
a0:5a:b0:70:ef:43:b3:14:99:cf:9e:95:86:65:c0:0c:86:ad:
2d:59:e6:6d:a6:bb:82:1f:a6:07:7a:73:53:1a:c8:07:71:d0:
03:ff:34:ca:fa:40:b7:ea:18:2c:37:9a:93:05:89:8c:c0:3f:
d1:26:32:e1:17:32:79:96:0b:d6:eb:6d:10:ff:af:f5:09:94:
14:e8:09:14:83:5d:43:ad:8c:c3:57:17:4e:cd:07:2c:b5:af:
bd:73:8e:5f:b7:02:ec:fa:0b:17:6d:63:38:9c:e7:c7:5f:50:
4d:59:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:23 2024 by rpki-client on console-ams.rpki-client.org