Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: 8iE8icWmfyWpKTpxJEx3d1KLfyJEWMRxyMvQWlLff/g=
Subject key identifier: 4A:CC:B0:4F:7C:93:46:04:A1:B3:06:E6:97:93:03:90:77:83:8C:55
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 01935764D65D610D1C07E7BE2A4F09DB60F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 05:00:46 +0000
Manifest this update: Sat 23 Nov 2024 05:00:46 +0000
Manifest next update: Sun 24 Nov 2024 05:00:46 +0000
Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: vBZ0j0tmQrPcnV+ZWiUBMmoSH5CWLPh+v7LzaGW/kMY=)
2: TqwTSrBzrTYmNyo8T1t8BDlT1f4.roa (hash: w+XCCT06YsgjpDolNno8LnRxzdvXMfW6wcI2e+xABDk=)
3: aQeMD2vXO5xniZKYX0r8QdxEzo4.roa (hash: 0qRmgNnpnRbtWA+DNew1+ZGHFACyhgPR0D4jdV8UoeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:d6:5d:61:0d:1c:07:e7:be:2a:4f:09:db:60:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Nov 23 05:00:46 2024 GMT
Not After : Nov 24 05:00:46 2024 GMT
Subject: CN=4accb04f7c934604a1b306e69793039077838c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:38:15:1f:3d:80:36:09:d0:e4:05:99:3c:5a:
de:10:e8:a4:86:7d:12:cc:81:f1:c6:3c:d5:55:04:
33:28:e7:e2:88:ca:4a:9a:6e:e8:fd:f8:de:4a:12:
e5:e9:56:d6:bc:fc:5d:14:e9:c5:d5:d9:ef:b3:0c:
ed:04:f6:fc:10:c2:b6:c2:b5:05:8f:05:3a:5a:da:
f6:3d:b2:66:88:19:05:fb:e2:e6:48:dc:4a:e8:88:
1f:22:d0:d0:3f:ee:b8:6c:87:3f:38:cf:ab:ea:c0:
6f:cd:d9:0c:a4:2f:a8:f4:dc:dc:e8:ff:0e:8d:7a:
09:c6:8f:9c:f6:83:83:0e:1e:1e:d4:91:c6:5e:85:
a7:21:01:dd:c8:83:19:50:8e:8b:04:a6:40:3f:f0:
a7:68:8c:f4:cc:0a:5a:5d:14:36:6c:e7:dc:6f:47:
12:6a:0e:94:7e:af:e0:44:66:dd:17:37:0e:b8:34:
89:65:32:33:c5:ed:3b:ba:09:28:f7:9c:fd:77:90:
6e:53:36:4e:d6:26:8b:e1:32:fc:cd:cd:4d:48:15:
46:c1:51:34:0d:08:d1:54:78:6d:e6:6e:e1:0e:5b:
84:a5:cc:9e:f0:8d:ae:7e:1e:fb:21:28:66:2e:a2:
1c:4f:81:64:40:1e:7b:23:78:da:68:82:e3:4d:17:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CC:B0:4F:7C:93:46:04:A1:B3:06:E6:97:93:03:90:77:83:8C:55
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8c:ee:8b:f6:98:d2:ef:ea:08:c1:b1:03:be:cd:56:f2:c9:
3b:c6:09:9b:04:d4:ea:ce:fd:fa:bd:ee:c6:25:64:d3:14:3e:
b9:05:c4:65:2c:ff:fb:5a:e2:04:57:fe:80:b1:1c:56:a5:32:
d2:8f:71:e0:4d:a7:38:d5:ae:59:30:f2:40:3d:85:cd:5b:0b:
e7:f1:5a:99:3a:b5:5c:b1:56:42:cf:4e:7c:1f:78:30:27:66:
a8:f8:5f:bc:1a:32:4a:b2:3e:89:07:1f:ef:0f:c0:ed:83:95:
8b:6e:d6:1e:7f:2f:5e:77:6a:6a:57:4a:2e:c2:2f:71:1f:f5:
c8:b2:1e:c2:24:b1:15:a2:5f:93:65:15:64:86:64:86:2d:8c:
90:16:90:ff:cc:b6:29:d7:9f:71:e3:84:2d:33:65:74:d7:30:
2b:ee:44:e5:67:90:60:f9:0a:f0:b9:b2:c3:2f:6b:22:2f:f6:
5b:c9:14:1f:e9:d0:09:b2:19:ce:a5:7f:74:98:b8:e0:b9:98:
66:9b:23:a7:2f:e5:3f:8f:a2:64:12:37:c9:ab:59:c5:3e:37:
07:a9:8e:5c:5b:a5:da:8f:ff:ad:22:49:d8:79:d2:af:3d:ad:
f3:f5:5c:8b:7a:17:27:08:30:8b:43:e1:d8:96:08:34:f6:48:
a5:75:14:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:24 2024 by rpki-client on console-fra.rpki-client.org