Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: 6OCyqSMNE42DxazkvGSMldA5gIKNS+4z22eWpe945p8=
Subject key identifier: 68:8C:4E:BF:C4:1A:1A:7F:F0:08:4D:74:36:09:57:AC:9B:F0:19:57
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 01935877280534252687BF05C76963E7700D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 124D
Signing time: Sat 23 Nov 2024 10:00:24 +0000
Manifest this update: Sat 23 Nov 2024 10:00:24 +0000
Manifest next update: Sun 24 Nov 2024 10:00:24 +0000
Files and hashes: 1: gMXKuYY3VUIeAtmGhOy7amjQBjc.roa (hash: /ZXDIIFpfz3sPGstO361xbkLo1P5DyMJp94M8/NceMQ=)
2: kg-X3vXZg48bU6ImsIztKmS_FzE.roa (hash: nRM7rXh74ZxW2a1memTAGXkFe+xQ7LRRqBUOffrqzOw=)
3: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: Gybu0+eIPStPfF+GSC6kI8Q8zvmSL1lQoWaMSE2TWtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:28:05:34:25:26:87:bf:05:c7:69:63:e7:70:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Nov 23 10:00:24 2024 GMT
Not After : Nov 24 10:00:24 2024 GMT
Subject: CN=688c4ebfc41a1a7ff0084d74360957ac9bf01957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:f4:4d:f5:5f:30:59:41:0c:28:06:2c:03:
c6:22:a3:8a:32:bd:6f:ea:21:d8:b9:ba:5d:4e:7f:
54:43:8c:ed:dc:38:3a:4b:1d:70:0e:66:53:07:55:
3f:79:ee:64:d5:ac:47:82:c8:b5:15:2c:b7:0b:9f:
61:bf:be:e2:4d:fd:83:45:4a:57:5a:6b:1a:1b:3a:
06:11:a6:91:dc:d5:ca:c8:99:75:55:d8:e4:50:c2:
0d:9e:ce:7f:6d:d9:aa:26:c5:f0:62:76:e5:18:11:
da:cc:bc:1c:d2:7d:2f:4d:02:3c:97:1a:c8:72:b9:
ca:9e:d0:7a:f3:54:ca:07:6e:d0:3e:9e:de:a9:63:
4e:6f:2a:0e:e8:fb:70:a3:63:6c:40:08:01:d6:71:
e3:f2:a1:be:ab:d7:6b:a2:53:73:30:3a:f9:a3:25:
a6:d8:7a:90:d8:87:d0:1a:92:b4:77:f8:79:de:09:
2a:8e:15:35:6f:86:cd:34:71:59:b4:50:89:00:7f:
3d:58:44:0e:1c:9b:af:8f:cf:25:b1:57:31:d7:ff:
0b:04:8f:b2:2c:42:eb:61:3e:12:47:54:9d:a8:42:
42:b8:60:b7:92:be:80:6d:50:86:37:d2:af:76:eb:
2e:d6:d1:f5:6b:2d:43:1a:23:99:39:7b:3b:28:3f:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8C:4E:BF:C4:1A:1A:7F:F0:08:4D:74:36:09:57:AC:9B:F0:19:57
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:62:af:5b:d2:ed:e9:bb:84:0c:16:40:1f:a7:f6:32:bf:55:
cb:c6:25:0e:bf:d4:0c:46:ab:32:74:c8:98:d4:2b:1a:8c:01:
5a:36:a5:5a:75:d8:f3:8a:34:29:b0:7a:5c:d8:f8:4d:fa:eb:
50:b0:dc:41:38:0d:78:3d:98:d8:a6:17:04:ad:ab:bb:6e:d2:
8c:ac:6b:e7:49:cf:6e:9e:d5:b5:78:94:34:81:a0:80:ba:ac:
c6:69:bf:f6:7b:c7:88:50:c1:f9:90:b8:84:29:81:b9:9c:e7:
3b:8d:28:4c:b2:cb:2d:5a:76:a2:c7:c1:21:54:62:c5:c0:aa:
18:44:8b:70:c6:59:59:c2:d7:36:1c:90:4a:c1:fd:fe:05:86:
12:75:b9:6b:03:45:50:31:e2:60:88:fc:92:77:d0:0b:33:0c:
e7:6b:4b:20:e8:27:e3:61:f9:b1:11:71:9a:c2:4f:75:65:0e:
8c:c0:8c:9c:92:6c:06:98:29:18:3a:d6:aa:62:d0:89:0e:3f:
ef:2e:ff:c6:33:49:77:27:77:d7:c0:b9:7d:88:67:11:ca:a9:
46:ba:cf:5a:78:45:93:a0:44:e6:47:40:de:54:5f:09:e3:38:
09:ef:ba:97:51:74:a6:bb:18:66:c4:2f:c5:90:46:06:a2:56:
e6:0b:93:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:00 2024 by rpki-client on console-fra.rpki-client.org