Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: JHpOSHgdwCYFJAMtsuqvXlOr9RKmzZBA8xbrs7hZKLs=
Subject key identifier: 1B:5C:BE:72:C7:24:C8:40:04:73:5C:43:0C:F6:8E:24:AB:F8:B1:8D
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 019355086DA4ABB9FD0D3D93E6E21F650CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 0531
Signing time: Fri 22 Nov 2024 18:00:35 +0000
Manifest this update: Fri 22 Nov 2024 18:00:35 +0000
Manifest next update: Sat 23 Nov 2024 18:00:35 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: e5TV5jMoQ5KMXROkicBLo643uycOreU6fCiDJ4jgp0c=)
2: Sl3PMNZKT9Cn6zW3HG1M5j7obck.roa (hash: 0HcmJ5HYwv5vzfI+e2ODYPwmyWRlf9mbX/T0YFHRvYI=)
3: f4XJPptoS0MG0JSxtDoEZGnZaDA.roa (hash: 6F2VIiKs6IEuCiX61Bwh3SEfzZ+N9WtpAiGSkuR5NPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:6d:a4:ab:b9:fd:0d:3d:93:e6:e2:1f:65:0c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Nov 22 18:00:35 2024 GMT
Not After : Nov 23 18:00:35 2024 GMT
Subject: CN=1b5cbe72c724c84004735c430cf68e24abf8b18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:b9:21:a3:86:c3:f9:81:9a:4f:02:c6:60:
a3:55:19:cf:fd:d0:f8:fb:e8:4a:89:68:71:5d:ec:
97:f9:2b:e2:c2:13:27:da:3e:f9:99:1a:82:47:da:
23:d0:79:33:2d:45:de:55:8e:fd:ed:78:68:53:4b:
51:2a:92:46:13:fa:8c:80:16:4c:fe:f9:48:dd:37:
dc:5b:24:89:63:8b:a8:3b:f1:63:03:9b:0a:89:12:
9e:25:66:7d:03:45:46:1e:00:b5:fa:80:4a:1a:63:
c2:2d:c9:0e:11:d1:8b:69:5c:65:2c:e7:2b:26:f6:
2b:8f:4e:36:f2:4c:23:fe:9c:c3:d5:23:bd:48:e3:
37:ce:30:00:eb:18:71:d1:5c:1c:47:fc:bf:83:88:
02:9f:aa:d1:21:a1:ea:cd:ec:b0:29:38:97:5b:8a:
ec:48:74:89:7a:29:c8:1b:b9:32:98:d2:bc:74:8c:
77:a5:6a:a2:0c:f4:22:55:7a:92:5e:43:ba:26:fb:
30:0c:54:1c:57:5d:9f:23:a5:3a:9d:4b:0e:72:ab:
4b:58:50:b2:95:e3:4a:30:f4:ea:7d:03:07:f0:f6:
1b:fd:f5:7a:01:76:6b:48:01:ff:bb:45:70:29:d7:
cc:62:5e:f8:98:6b:61:b9:da:c8:52:85:cb:72:94:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5C:BE:72:C7:24:C8:40:04:73:5C:43:0C:F6:8E:24:AB:F8:B1:8D
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0a:25:5e:94:6b:e7:49:1e:b5:b1:9e:24:68:09:93:b3:88:
56:18:d6:82:06:b1:25:69:62:d6:c5:78:f3:84:80:1c:28:03:
d4:01:60:f4:81:4a:06:15:a3:71:91:66:07:00:02:a9:f5:14:
80:dc:8a:08:ab:21:5d:de:3e:ff:ab:19:ea:4d:de:85:ef:d5:
cb:53:de:e3:fa:bb:78:f0:e6:3c:a5:2c:44:57:c1:ad:9d:43:
7f:0e:11:a6:9e:91:8e:ca:8d:f7:80:c7:ba:7f:f3:6d:48:d8:
28:59:a6:6d:96:c2:45:d0:20:6e:b4:86:fb:3f:08:5f:88:ac:
45:93:d4:08:09:df:ea:9e:02:e4:07:bb:73:2b:d5:19:97:b4:
5b:1f:86:1d:83:ab:53:a7:23:7b:bc:c8:3d:7b:0d:79:ce:6d:
fb:46:14:eb:f8:e0:9f:f7:cf:66:b9:26:6b:de:4f:34:e9:da:
a6:1c:24:6c:17:d9:8b:2d:7e:dc:da:58:8c:e2:1e:c3:72:76:
cd:02:40:33:9f:ae:b0:71:e7:23:8d:26:99:5a:dc:0d:88:57:
df:c0:46:c3:e3:e3:f8:ac:25:b9:14:76:cf:51:49:6e:0f:d0:
83:62:1d:fa:32:d4:23:10:26:e0:3d:56:4c:34:8e:d2:9f:fa:
b2:39:2f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:55 2024 by rpki-client on console-fra.rpki-client.org