Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: EAS7JPMtGukyGuehzKCNKQ9ccuiDOmr+Sqhqz7AzT7g=
Subject key identifier: 3A:21:C9:D7:11:BE:BE:8B:A7:12:CB:B2:8F:9A:35:67:35:99:23:39
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 019356F6C46AE1DD8DA200C2C37D464B8169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 0F68
Signing time: Sat 23 Nov 2024 03:00:32 +0000
Manifest this update: Sat 23 Nov 2024 03:00:32 +0000
Manifest next update: Sun 24 Nov 2024 03:00:32 +0000
Files and hashes: 1: 41vTqrC9I3EfPNR-13a6WBV_Yzs.roa (hash: 8Dp+2jNYHJ1oq1GljISTDoMsjca2C2jcphxrhjnKHf4=)
2: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: hhRv/bhBWsP3xD3OowQX2bXkeiQ0Em7mTptaTZT2uCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:c4:6a:e1:dd:8d:a2:00:c2:c3:7d:46:4b:81:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Nov 23 03:00:32 2024 GMT
Not After : Nov 24 03:00:32 2024 GMT
Subject: CN=3a21c9d711bebe8ba712cbb28f9a356735992339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:b8:27:34:7a:72:75:8f:ae:a7:58:7a:a4:
c9:25:5a:5e:6e:5d:bf:5b:d4:cd:90:4e:df:a1:e5:
45:93:c9:ab:f5:5e:87:65:9e:0a:85:c9:ce:c3:76:
13:9a:6a:7d:47:2d:f0:ea:f5:e3:4d:ab:92:f1:fd:
a8:c6:d8:61:1f:5d:53:fd:0b:74:af:ba:fd:b5:37:
cb:27:37:8b:ca:a8:5b:8b:cd:81:27:b9:bb:41:9d:
8e:81:ec:c3:6b:bc:57:8b:9b:49:98:bb:5e:98:be:
b9:55:58:5a:63:bd:41:11:15:ce:a8:25:ff:ce:7f:
85:09:50:fd:ed:df:b6:4f:6f:b5:79:f7:f8:74:f9:
c8:1a:ea:f7:d3:03:1f:76:d6:68:1e:2e:b6:c8:ce:
aa:ef:d1:cb:33:a0:07:a0:77:be:89:3f:18:82:fd:
fc:18:4c:e3:79:b5:b1:e2:38:b6:ae:4c:40:5b:27:
78:08:ee:16:6c:47:81:e8:15:9a:0f:75:30:52:29:
13:e5:61:83:26:61:a9:f5:6e:22:f8:68:d1:de:15:
be:ec:b8:05:48:4e:fd:99:38:65:fb:64:68:58:1d:
96:14:41:f8:c0:77:ba:87:02:14:7a:02:cb:15:30:
b5:1a:8f:4b:a3:ee:13:e8:23:43:a2:a6:22:d8:9a:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:C9:D7:11:BE:BE:8B:A7:12:CB:B2:8F:9A:35:67:35:99:23:39
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8f:0f:b8:09:33:2f:d0:4a:8e:22:95:7e:a3:7e:60:2d:1c:
8d:b6:3a:f0:cb:10:96:54:9f:27:63:fc:64:b9:7b:d3:aa:63:
78:97:10:0f:55:f2:36:94:3b:98:47:46:77:78:cf:77:95:a9:
1d:ff:3d:43:b9:a6:62:b2:73:8d:a5:a1:f5:ae:a9:0b:f2:d3:
c0:c5:2f:95:96:8f:08:47:f2:2d:38:98:2b:8c:cc:bf:73:54:
c8:a9:c5:92:3d:a5:31:e7:67:97:18:58:8f:60:af:e9:41:62:
61:b6:24:d7:76:22:f3:9c:7f:9c:8d:38:42:07:fb:40:37:c3:
4f:d5:d5:33:43:78:51:8d:50:f4:b4:aa:db:28:e5:61:5f:44:
95:e3:e6:6f:43:c2:08:97:ea:84:50:8f:3b:ea:3e:5e:61:23:
94:eb:7f:7d:10:17:95:8c:9c:2c:3a:7e:b9:57:0d:12:9e:f4:
73:57:58:61:2d:2b:71:a4:20:59:d4:05:f7:f6:60:1b:15:89:
73:e4:cc:09:92:29:f2:25:a2:27:f5:74:c1:50:ad:dc:0b:36:
06:e4:5a:18:7b:b7:4b:95:ef:e9:76:53:79:27:ad:e0:67:bb:
96:5e:8a:86:a5:88:f5:4d:8e:0b:f3:a6:33:f9:e6:ec:4f:93:
67:02:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:00 2024 by rpki-client on console-ams.rpki-client.org