Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier: /6Y7WTfcLZ+QOfPV8EgFbjVRJNMldUW0X/SjjowSIbA=
Subject key identifier: A5:29:3E:A7:00:E3:24:5C:DE:DC:DD:CA:F0:CF:A2:A3:3F:9C:44:49
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer: /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial: 0193549A976A9E49564084C07CB59DDD7179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number: 1303
Signing time: Fri 22 Nov 2024 16:00:37 +0000
Manifest this update: Fri 22 Nov 2024 16:00:37 +0000
Manifest next update: Sat 23 Nov 2024 16:00:37 +0000
Files and hashes: 1: 7UGv7o15mgOwlWOS_538YlNivqw.roa (hash: LGtT9u2qu7uuwfFLG+c8hMRwzbkpXGqXnrHinjE0Hi0=)
2: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: p/KzF6KYpnJSFdxwqwPJRpzBrMFUMRMIIDpjxgEJXuI=)
3: gkGEO5xuLate9S5eiC1ZlLAF5IU.roa (hash: sZdoIKD+OGVMpI1aBavUKpzg7jKpNaMUgF/1lKW4jd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:97:6a:9e:49:56:40:84:c0:7c:b5:9d:dd:71:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Validity
Not Before: Nov 22 16:00:37 2024 GMT
Not After : Nov 23 16:00:37 2024 GMT
Subject: CN=a5293ea700e3245cdedcddcaf0cfa2a33f9c4449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:b8:69:7e:ee:f7:1a:39:df:60:c7:0a:8c:
74:d0:1f:ff:79:a1:19:f5:f4:d5:e7:9f:b2:e5:73:
25:47:2d:79:04:93:1b:88:fb:b8:c6:ad:de:1d:3a:
ef:c3:27:05:b1:7a:4e:cc:8e:73:c0:87:d5:6a:af:
ad:98:4c:52:b9:89:00:8b:dd:06:3f:4c:94:35:4a:
22:e4:60:c3:71:2d:d7:4a:0c:29:28:05:46:12:8f:
b0:5e:c4:a4:a0:10:c8:9e:c3:62:cb:38:ae:2b:c2:
64:48:d0:01:19:48:47:d1:a3:fc:a5:4b:59:9b:12:
69:f9:0d:8c:41:f4:e2:24:f8:7d:b3:af:4b:b3:01:
58:44:f4:0e:b0:c9:66:c5:a7:fc:2f:20:f9:0a:98:
ce:a9:e7:62:3d:4c:99:bd:9d:c6:ad:47:03:22:17:
e5:1d:d9:88:86:93:f8:d6:bf:3c:fc:79:9f:82:ea:
63:6f:aa:1e:ff:66:01:38:a1:b8:0a:d9:80:35:14:
da:1d:84:da:38:00:b7:73:01:88:a5:b7:e1:4f:62:
d9:12:67:49:3f:97:db:7e:22:1c:2f:40:af:f1:eb:
03:1d:6e:c9:c1:fe:0b:0a:b9:c4:48:cf:62:e8:30:
df:98:da:b0:c0:e6:c2:c4:8a:e5:75:4c:09:4d:9b:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:29:3E:A7:00:E3:24:5C:DE:DC:DD:CA:F0:CF:A2:A3:3F:9C:44:49
X509v3 Authority Key Identifier:
keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c5:85:68:bb:19:52:b2:b9:83:19:28:fc:5e:db:f9:9f:59:
e4:9b:3a:52:1d:16:9a:3e:a1:a3:e3:a5:ef:75:04:18:b3:a1:
3f:f3:20:57:ec:68:ee:2d:d9:15:5f:30:75:96:30:95:4a:c0:
e1:c4:e9:9a:5e:62:c4:dc:af:5e:15:0a:6b:16:64:65:10:f0:
7d:5a:42:89:ab:79:32:d3:83:ef:29:f3:53:a3:ae:3a:04:08:
83:f4:ae:d4:e7:50:80:76:b8:8b:b1:91:b1:87:8a:02:90:ce:
ba:b2:26:61:c0:86:a5:12:57:9d:76:eb:d7:95:e6:69:93:ec:
8f:b9:f2:b7:2d:2d:96:31:68:83:0e:cb:64:68:e6:c6:0b:20:
47:a6:24:8b:14:60:da:11:55:fd:b8:d8:71:df:52:db:aa:cf:
db:c7:92:d9:f7:51:37:87:10:67:93:9b:25:11:44:4d:92:ff:
e5:d9:6d:a3:b2:77:e1:e7:0c:5e:3a:58:15:2f:6a:93:91:b9:
a8:11:0d:d6:42:51:ce:93:fb:66:8c:f2:af:ee:87:72:a0:9d:
9e:f5:34:78:d1:97:06:e3:7d:e5:24:58:b4:d4:eb:1f:b1:e1:
3a:57:20:1c:c8:b5:9a:be:ea:ce:9f:46:66:cb:12:4e:56:3f:
53:39:fc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:17 2024 by rpki-client on console-fra.rpki-client.org