Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
File: Iavg4GkA17lgdsALtQ1PncA5L1k.mft (raw, json)
Hash identifier: XnXvkSkaRV/yRm5+7ze27dAv43JQsx5Ppemy93N7+IM=
Subject key identifier: 53:BB:CD:23:5A:59:37:77:9E:F4:5F:7D:FE:FE:60:69:77:ED:C8:0D
Authority key identifier: 21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
Certificate issuer: /CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Certificate serial: 01936A0F62D2A6112A077EBE608C72252306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
Manifest number: 02DE
Signing time: Tue 26 Nov 2024 20:00:13 +0000
Manifest this update: Tue 26 Nov 2024 20:00:13 +0000
Manifest next update: Wed 27 Nov 2024 20:00:13 +0000
Files and hashes: 1: ENl-lExvFxp1Az6gm2DFpNRC0m8.roa (hash: /NZxYsXba0biaj1cXoka2win4iDEdWrjnnHXcaKKWko=)
2: Iavg4GkA17lgdsALtQ1PncA5L1k.crl (hash: VR5ZEjPS9bU4qOcUAe8DaGX2bYFWn7MX1FnoT40+7Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:0f:62:d2:a6:11:2a:07:7e:be:60:8c:72:25:23:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Validity
Not Before: Nov 26 20:00:13 2024 GMT
Not After : Nov 27 20:00:13 2024 GMT
Subject: CN=53bbcd235a5937779ef45f7dfefe606977edc80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:ab:77:e8:36:93:d5:39:ac:eb:04:ab:00:
21:63:c9:16:85:dd:c0:56:df:4c:88:c7:e5:40:23:
b6:1d:49:f3:34:73:5d:b7:7e:84:76:91:13:04:0c:
61:b8:cb:15:4e:6e:5f:dd:b2:c6:a7:a4:87:dd:00:
ce:74:43:49:6b:fc:c4:67:95:05:e4:96:f5:21:ec:
95:fb:de:80:e6:67:27:05:01:10:47:fc:95:ca:98:
42:f2:41:56:c2:ac:c1:e9:c9:85:20:d0:8f:68:f2:
4a:62:b4:e3:78:e8:34:b3:37:8b:73:09:5a:6f:78:
c2:25:66:a8:c6:1f:05:7a:eb:b8:d5:b7:4c:6d:33:
49:bd:a4:69:89:03:f8:09:f8:08:cf:a2:a4:b7:66:
50:0f:e4:e1:0a:57:2d:7d:bd:5c:fa:fa:e4:16:d0:
56:ee:77:3d:3b:e4:c8:e5:05:07:a9:87:36:36:e3:
50:86:a8:7d:ed:f0:c5:76:85:d6:c1:a1:6e:a2:69:
1c:74:f8:e3:4d:5c:77:a0:4d:95:f1:a7:fa:a1:4e:
a8:54:bd:96:bd:8e:f8:dc:5a:27:d1:bd:a2:24:95:
18:46:52:11:fe:b2:db:5d:09:71:50:80:f6:e8:37:
71:56:18:08:99:6f:1f:73:a8:e5:92:0d:e4:87:12:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BB:CD:23:5A:59:37:77:9E:F4:5F:7D:FE:FE:60:69:77:ED:C8:0D
X509v3 Authority Key Identifier:
keyid:21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:df:ae:68:57:a4:8a:45:c9:9b:c0:9b:f2:88:0a:0b:3a:7d:
ef:98:ee:38:8c:7c:05:b1:13:93:da:c0:3b:12:50:26:20:a9:
13:f5:f5:83:fe:be:6d:47:32:00:bc:b4:72:50:1a:8a:d8:24:
91:83:0d:a9:cf:86:85:e5:55:85:2f:89:50:fd:97:67:5b:30:
4b:cb:e5:29:4c:d3:b8:e6:9a:e7:cf:11:a1:f7:34:e8:3c:00:
e4:d4:c3:34:d7:36:a0:a6:d8:25:70:12:08:8d:5a:5b:3b:f9:
14:f4:fa:32:80:05:1f:85:dd:3a:de:83:4d:15:b2:d3:a1:b0:
69:c5:54:8d:a5:8c:69:1f:9c:47:ae:23:90:6b:f7:e9:2e:4c:
3a:e8:e6:71:36:ff:ec:0c:d8:b8:9a:f1:53:d8:2e:c1:43:e5:
92:66:c8:39:ec:93:d0:bb:78:2f:8e:ba:bb:97:59:67:33:53:
8d:6e:ea:fa:fe:32:fa:92:f7:71:7a:ec:5a:32:37:7d:3e:6e:
23:af:f5:cb:0e:f8:11:91:bf:3d:af:92:e2:cb:fc:23:d8:e4:
fb:47:f9:18:53:c2:a2:7a:fc:ad:4f:61:bf:7a:e8:90:2d:a6:
ca:7b:b0:99:cf:53:08:72:29:20:c0:eb:bc:9d:25:cc:6e:6f:
72:0a:e0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:40 2024 by rpki-client on console-ams.rpki-client.org