Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: ASnQgEFUnIyGZFMt99v5c37RBFvwZyp7izAL+WibN+k=
Subject key identifier: 72:07:DB:08:ED:66:23:45:F9:43:34:AD:56:24:C6:75:FB:4B:20:C8
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 0193579B6E37C10F06D8F5B43E6EC07033FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 137D
Signing time: Sat 23 Nov 2024 06:00:24 +0000
Manifest this update: Sat 23 Nov 2024 06:00:24 +0000
Manifest next update: Sun 24 Nov 2024 06:00:24 +0000
Files and hashes: 1: KWoBZDUND2eOV85UcHTSr20Yfb4.roa (hash: w5aDhM9zhSNrwsJ7aoNcizT1zGlD9QFtoZj6rOKbUcc=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: tB8xRaCM37LH9KYBlo0xpyqxG7d4XopkOzXK7EsSTYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:6e:37:c1:0f:06:d8:f5:b4:3e:6e:c0:70:33:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Nov 23 06:00:24 2024 GMT
Not After : Nov 24 06:00:24 2024 GMT
Subject: CN=7207db08ed662345f94334ad5624c675fb4b20c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:27:ec:0e:85:c4:45:6d:f0:05:92:f5:9b:
65:ad:31:63:1c:6d:8e:9e:e7:16:5d:87:bd:b5:25:
cd:7a:76:3d:26:0e:b9:47:52:f0:e4:db:5e:bb:69:
3e:51:b1:44:a5:5a:b1:da:7c:b7:3a:35:ce:03:d6:
ff:1b:3f:63:3b:5f:45:56:a9:0b:0a:a0:2e:87:8f:
b8:80:af:17:dd:36:02:f7:7c:46:09:b0:ae:12:31:
c1:96:46:e6:66:6b:77:72:c8:5d:26:d8:fc:b9:df:
9c:d9:52:c7:02:11:5c:4f:f2:82:6d:70:a0:ba:0c:
54:5d:de:07:fe:50:78:02:64:3f:1e:f5:01:b9:10:
bb:12:2e:21:d3:ec:df:e0:70:df:b9:30:30:e4:3d:
75:f0:82:a0:a3:c4:a8:27:ff:30:38:2b:5d:f6:02:
5c:d0:7a:29:96:db:16:7b:66:22:5b:09:2a:32:ba:
f5:13:84:70:ed:e4:d7:48:9a:60:4f:28:a0:2d:d5:
89:4c:11:f4:ad:dd:71:5a:34:17:e7:26:f6:2d:a1:
bb:14:9e:ec:2b:c7:e9:35:17:66:f3:06:8c:54:1a:
a3:51:8d:64:5c:73:0b:d6:65:ca:40:01:a3:e0:d4:
24:fe:57:25:7e:dd:cd:c6:f2:07:b5:c6:30:f3:63:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:07:DB:08:ED:66:23:45:F9:43:34:AD:56:24:C6:75:FB:4B:20:C8
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:6a:66:06:9e:f3:4b:b1:20:a2:b8:85:bf:fa:61:d3:cc:31:
35:77:0a:0f:be:1f:c1:5d:46:cc:ea:17:ff:80:d1:71:50:e6:
17:39:5d:39:85:d8:04:ad:ae:1c:57:72:87:b2:de:1e:ca:2b:
b3:f1:5e:f5:b0:5d:f0:ce:1a:a2:ae:fb:15:02:e1:2c:25:32:
96:01:d5:96:11:f1:ee:8d:4b:59:eb:64:af:38:f5:20:a3:44:
2c:57:c5:b7:7e:a6:f6:45:80:27:8f:81:7c:11:56:48:4e:73:
70:7b:d3:fe:bb:10:b8:3d:e8:e7:e7:a3:52:02:ca:07:15:70:
bb:19:a3:17:19:ef:2b:43:9e:84:a9:f7:94:bc:41:ad:98:3e:
c2:f3:f1:eb:44:db:2c:f6:56:09:d4:f3:57:80:60:1e:9c:74:
b6:bf:1e:9e:7f:5f:36:a4:df:e5:6e:a7:24:3e:30:10:d9:08:
7f:3e:67:fa:aa:4d:28:00:f0:13:c6:06:6c:16:c6:11:d8:f7:
9c:1a:60:12:39:f0:bb:5e:70:44:f7:92:bb:d6:75:d1:e8:d2:
b7:f9:75:3c:8c:3f:32:8f:6e:9d:40:79:9a:2d:23:d2:93:90:
b8:f1:75:ce:ab:07:c8:9b:3e:62:9a:d0:a4:0c:9a:08:be:b5:
0e:33:16:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:44 2024 by rpki-client on console-ams.rpki-client.org