Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
File: mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json)
Hash identifier: xyiCUU69nOiALmL0RlTjyOijAj+fCqLYejZssuBw7II=
Subject key identifier: 2E:80:77:A9:0D:22:CE:15:C4:B6:D7:6F:0D:76:4B:2F:F7:D2:99:6F
Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
Certificate issuer: /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Certificate serial: 01936AB4C6D3ECE3A266D1F6C7B9D30F2588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 23:00:52 +0000
Manifest this update: Tue 26 Nov 2024 23:00:52 +0000
Manifest next update: Wed 27 Nov 2024 23:00:52 +0000
Files and hashes: 1: iklvQYJBlRgGQxIwewtM1N1H65U.roa (hash: QiZEKft9N0VrGSCIPjU3kCmrlD7PY/S8sVNOXdg2VRA=)
2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: vW9zGNuuzHcxGQLlbP4NujJyhucpFRKzX7GfrYUdfbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:c6:d3:ec:e3:a2:66:d1:f6:c7:b9:d3:0f:25:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f
Validity
Not Before: Nov 26 23:00:52 2024 GMT
Not After : Nov 27 23:00:52 2024 GMT
Subject: CN=2e8077a90d22ce15c4b6d76f0d764b2ff7d2996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:f2:bb:94:3c:9c:ce:4d:2b:dc:37:40:e2:
45:8d:eb:f5:5f:35:db:99:ac:91:75:33:96:f5:bf:
fc:9e:40:fe:95:f2:d4:df:04:b2:f7:6c:16:c3:d7:
39:05:1a:59:1c:6d:94:2f:e6:78:1b:06:68:2a:cf:
57:95:c3:a6:2c:66:70:9a:e3:ac:6d:3e:17:9d:61:
6f:7d:68:ab:36:c9:bc:fc:62:f5:ea:6b:f1:7e:2e:
c7:3e:a3:08:46:5f:c8:6e:e3:42:62:f2:1b:62:83:
1f:d3:22:13:f5:b2:82:1f:e4:c8:34:2e:67:6a:5a:
97:dd:9d:b6:e0:ed:bb:5e:df:f2:c4:36:41:d7:db:
e5:5e:62:60:4e:56:06:09:c7:fc:eb:40:51:f7:92:
dd:3a:81:ba:55:64:74:6f:d7:90:0f:e9:77:14:bd:
fe:7f:09:53:a8:62:83:69:f7:10:83:92:84:25:f4:
7b:06:c3:74:f5:08:e3:b5:a6:a7:6b:4e:f2:85:d4:
10:6f:e6:3f:39:a3:cc:6b:12:27:15:45:b4:a7:36:
36:ae:a3:04:3f:79:3d:7f:82:64:f6:f0:4b:ee:63:
ae:86:7e:5d:99:3b:de:23:f1:9c:03:73:87:56:0b:
fd:3f:c6:7e:1a:fa:34:96:36:a7:7d:4d:25:ee:76:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:80:77:A9:0D:22:CE:15:C4:B6:D7:6F:0D:76:4B:2F:F7:D2:99:6F
X509v3 Authority Key Identifier:
keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:50:df:ba:e3:5d:97:52:cf:22:4f:37:50:e6:cc:cb:eb:c9:
2a:c0:4d:ab:ef:e5:73:54:8b:8c:70:6f:4a:84:b5:56:70:bc:
25:a9:e4:bf:97:98:08:41:80:de:b1:0d:0f:3a:95:7b:06:3a:
17:fc:9b:67:86:c7:0e:a4:bd:94:dc:c6:44:e6:9d:bb:79:90:
ca:cb:6c:6a:ac:fa:d6:76:b6:b7:63:9c:ae:0e:9e:f9:b7:14:
50:d7:f4:e1:f2:9e:1c:85:96:1b:53:49:c8:a1:81:f9:fd:78:
1f:7c:b7:e1:73:0f:9f:c3:32:c5:e6:ef:4c:b8:11:22:12:32:
a9:56:c9:cb:33:0d:19:0f:03:85:ea:eb:06:48:8b:36:0d:53:
31:6c:ff:ff:f4:cd:e3:33:4c:a4:b0:e6:ff:8d:f6:9b:4c:7a:
dc:24:70:73:d9:d0:c9:51:4c:3d:99:5e:df:a8:20:18:a3:87:
9b:1d:c2:2b:6e:be:a8:77:fb:91:bc:2d:fc:bc:76:ab:79:e3:
e0:c4:f2:14:86:b2:de:e7:22:ac:18:ea:73:6f:14:4c:4c:7e:
8a:7f:ed:79:86:51:d5:c0:27:6a:6c:02:d3:72:c7:b9:0a:34:
3d:15:f2:fb:24:ca:c5:9a:4f:ff:a7:3e:4e:d7:bf:40:ac:64:
aa:e1:16:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:13 2024 by rpki-client on console-ams.rpki-client.org