Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
File: t2AdfMgg3HGRXqkwZz70fyQaccg.mft (raw, json)
Hash identifier: RUnaRl+t4LMaebVTk8pTPZmx/sFPtUh7B+QaTf3XsqA=
Subject key identifier: 32:77:B9:D0:68:D7:7D:F7:6F:4A:05:2E:0B:4D:B1:93:75:61:1E:84
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 0193549B15DAAAA9FEDF2530A3563CA07D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 16:01:09 +0000
Manifest this update: Fri 22 Nov 2024 16:01:09 +0000
Manifest next update: Sat 23 Nov 2024 16:01:09 +0000
Files and hashes: 1: Hf4Z68jGWKGsctmkCddFCx-_rkQ.roa (hash: AYs54YuahU47W3ufWTPFdWolo1KxORage57OLCRBPok=)
2: sU57-kAFS3RBv5oa4nnSUQuKBpA.roa (hash: yYkIUdShAboEAMGur19e8gKBwgA6CPtPSAFxBOcGHrU=)
3: t2AdfMgg3HGRXqkwZz70fyQaccg.crl (hash: fz5mdUEFR+/KpA1BzcadIgfvTYCp5FC+4Om/vQE149w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:15:da:aa:a9:fe:df:25:30:a3:56:3c:a0:7d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Nov 22 16:01:09 2024 GMT
Not After : Nov 23 16:01:09 2024 GMT
Subject: CN=3277b9d068d77df76f4a052e0b4db19375611e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:4b:52:d8:95:60:84:4c:3c:9c:bc:d0:ca:
f5:c4:d0:0a:7a:07:5a:0a:e8:bf:2e:e2:71:13:1e:
0e:2e:5e:df:f1:92:7c:52:a6:9a:5a:2b:56:96:e4:
9f:82:84:73:d2:c0:10:93:36:8a:eb:21:16:2a:18:
f2:7d:5c:e0:38:8a:58:a4:db:0c:19:d6:59:08:e7:
20:6f:d2:9a:c1:98:04:be:a6:64:6f:23:bb:d3:1b:
be:81:bc:20:5b:3a:78:57:66:69:b1:82:07:f6:c0:
72:0b:c2:c9:d1:62:4f:84:9e:14:e4:2e:e1:87:ab:
9e:3f:dd:91:39:4e:25:62:4b:90:58:42:8a:8c:f9:
b8:e9:84:66:a3:6d:78:65:00:af:53:80:90:6b:d8:
25:73:39:f7:6e:8b:e0:f0:d9:95:85:ed:6a:a3:71:
f7:c3:20:f0:78:1a:a8:95:44:6b:c6:e6:94:6a:b8:
05:51:8a:14:9a:cb:07:35:2a:a6:59:77:64:54:79:
e7:6c:f4:d7:6b:25:55:15:b9:fe:3c:85:20:7f:57:
10:51:ed:6b:e5:e6:e1:63:4e:e3:72:d7:ec:45:eb:
69:14:4b:b9:fe:31:71:ac:54:be:d9:bc:46:e2:40:
b4:0e:c6:12:ba:6a:39:38:5d:a3:4a:93:26:4c:cc:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:77:B9:D0:68:D7:7D:F7:6F:4A:05:2E:0B:4D:B1:93:75:61:1E:84
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d1:6c:c6:22:e3:6b:a2:f9:9a:1d:73:87:b2:c9:d9:f9:63:
b4:e7:6f:b0:ed:c7:de:ec:9b:51:ce:d0:fe:b3:9b:f0:7a:71:
d5:6d:2d:d2:51:51:af:15:71:5d:ee:2f:d5:ca:1b:99:4c:f9:
0b:80:df:d7:4b:c7:9a:83:e7:9f:3f:d7:15:c5:b9:6e:95:a7:
a5:05:41:89:ac:81:a0:5b:de:ff:b5:5b:19:7d:9c:2d:11:0d:
af:7a:6c:fd:14:99:60:8f:83:50:27:21:86:df:7a:c8:0d:34:
9d:6e:43:6e:41:a2:b7:1e:78:73:06:30:c0:ca:2f:c6:20:1b:
2d:93:a9:9f:1f:8b:78:8b:d3:37:f6:3b:e9:29:ae:b4:b9:5f:
9d:93:fc:4f:7e:fc:60:c4:f6:19:21:d4:e9:0c:34:b3:84:1e:
f1:b5:ea:33:16:15:f6:8c:6e:0b:a3:4e:5b:8a:b7:bf:7a:37:
08:67:8e:39:96:31:68:8c:fa:3f:e3:6e:f4:03:26:c4:11:e3:
e9:fe:d2:5c:fd:a7:09:82:5e:c1:54:b4:d6:3d:59:c8:53:bb:
b5:a4:2d:a0:2a:d3:7e:5f:14:2e:e8:59:48:a1:77:8f:3a:94:
b1:6b:0f:e7:e8:c1:af:51:90:26:f2:d0:58:94:af:db:f8:e0:
92:f3:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:15 2024 by rpki-client on console-fra.rpki-client.org