Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
File: lZmz54I3DcKBT1JcHW7OhNj3DzY.mft (raw, json)
Hash identifier: 8k4WotamC6aqJiw6lqiPgWTPQy3NN/Y+exnT1v4Uahk=
Subject key identifier: 9C:19:97:C3:A5:AA:FD:71:28:02:9A:21:29:5C:5C:5E:15:E5:AC:9E
Authority key identifier: 95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
Certificate issuer: /CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Certificate serial: 019359C1306260B177F662E6707F409E8A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
Manifest number: 10
Signing time: Sat 23 Nov 2024 16:00:53 +0000
Manifest this update: Sat 23 Nov 2024 16:00:53 +0000
Manifest next update: Sun 24 Nov 2024 16:00:53 +0000
Files and hashes: 1: 82ISlv6lBx8dA9P-81N8V-LR25g.roa (hash: yh7d8e+idi+BfjnnFo/2dsQb/Y7Vb+YgrEo6XD/5wyw=)
2: GAjcmqDja0Ch9gTV9uBoX2UHUXU.roa (hash: of8PwfObhOIfEMmuHEaZncVkBzQp+8FuhLtTULNgspo=)
3: VejNM3EuJ92N5ByVgfXcUSPauwo.roa (hash: 7aoWoJ6SPFIWd5nsWtsZyWB1vtnYn2YJ3PozOvjDFRQ=)
4: lZmz54I3DcKBT1JcHW7OhNj3DzY.crl (hash: kk2Exn/prxf7YTDPkjMLlSxCgDyXxB5/BfrqYOekowo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:c1:30:62:60:b1:77:f6:62:e6:70:7f:40:9e:8a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9599b3e782370dc2814f525c1d6ece84d8f70f36
Validity
Not Before: Nov 23 16:00:53 2024 GMT
Not After : Nov 24 16:00:53 2024 GMT
Subject: CN=9c1997c3a5aafd7128029a21295c5c5e15e5ac9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:2c:26:41:d4:a4:8e:87:5f:16:1d:0f:86:
e2:e7:f8:2d:7a:f7:12:0c:3e:c9:9b:78:fd:24:16:
c7:75:81:b7:4a:30:99:d4:a9:95:ba:7c:75:50:fa:
06:74:45:37:1b:7b:10:96:14:15:4d:1e:b8:79:eb:
90:84:79:be:33:80:22:5e:07:ae:ee:77:f3:f6:1a:
fc:80:0c:d9:72:92:46:29:d7:17:bb:5a:84:d2:2e:
1f:6c:aa:f4:9e:a7:30:58:89:d1:3e:0d:03:cc:7c:
b1:6e:45:ea:83:aa:aa:0a:5c:79:47:60:6a:b5:00:
4f:55:1f:68:c9:75:9d:71:bd:f9:07:56:e7:3b:c4:
8a:39:0f:f1:f5:e7:f4:e4:7e:db:74:37:6b:dd:20:
a5:54:82:b1:29:98:e8:bd:dc:a3:f5:8a:5c:5c:fd:
14:c6:d1:2e:a5:ad:66:7f:f9:37:32:ce:9f:d3:b8:
d0:8e:84:31:a4:62:6b:10:98:81:4c:a2:32:39:cd:
6d:bd:82:78:b9:21:56:3c:c0:78:56:48:1b:c0:e8:
fd:44:4f:d4:bf:ab:13:08:33:37:4c:21:db:b1:5e:
61:37:43:12:a7:ce:19:67:dc:28:f6:b6:fb:cd:29:
fd:4b:95:75:a9:69:74:5c:6d:5a:d2:ea:da:bf:07:
4d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:19:97:C3:A5:AA:FD:71:28:02:9A:21:29:5C:5C:5E:15:E5:AC:9E
X509v3 Authority Key Identifier:
keyid:95:99:B3:E7:82:37:0D:C2:81:4F:52:5C:1D:6E:CE:84:D8:F7:0F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZmz54I3DcKBT1JcHW7OhNj3DzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/40a102-efcd-4fd2-9373-d06aa518aa6d/1/lZmz54I3DcKBT1JcHW7OhNj3DzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:22:f5:8e:82:fd:e4:de:50:d1:1c:20:d4:b8:69:df:65:77:
cd:f7:d9:0f:4a:74:da:18:31:53:5a:bb:28:8d:63:f7:3f:18:
db:04:67:57:99:3f:07:7a:f2:d7:19:4d:2f:66:2f:ac:49:af:
ca:32:4d:c8:ca:14:1d:3a:c3:b1:ca:2c:e0:69:55:16:07:cc:
3a:9e:f8:71:a6:ea:94:7f:f5:8c:ed:a6:92:45:6d:7c:ed:4a:
d4:0e:19:0c:19:3b:97:9b:fa:a1:12:e6:b2:6a:1c:d9:48:e0:
df:cf:2f:20:2d:cc:21:50:c9:f1:53:6d:34:73:3b:8c:3d:18:
af:3b:16:bb:28:ff:0c:41:59:53:b4:3d:f8:bb:b7:ad:18:ff:
d4:d8:75:b6:06:cc:70:92:6e:51:d4:e0:19:96:12:72:c8:f2:
65:75:39:74:fe:2e:91:89:49:3e:86:75:fe:fd:48:fb:ce:9e:
d3:9a:2c:f8:fa:c0:a3:02:91:db:02:6c:26:34:2a:c4:0b:b1:
e7:a0:2a:ce:85:43:c6:3d:4b:fd:06:af:12:33:d7:f8:e0:a1:
6a:d6:48:39:ee:76:84:3a:3f:29:eb:7e:27:26:f5:88:aa:29:
2c:5b:11:38:d6:22:4f:01:b4:5b:3a:af:8a:91:91:60:3b:de:
4e:c4:c3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:57:00 2024 by rpki-client on console-fra.rpki-client.org