Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
File: EbxAvKtekFOrbbfRnio43xtvmks.mft (raw, json)
Hash identifier: 7tE1Mq+d5sL8vCloW35gq5qoBBiFjYqjx5EdbdBJfUM=
Subject key identifier: F9:F7:C5:32:92:F8:3B:E3:6A:6B:8C:19:6D:FA:C2:0D:43:00:89:3A
Authority key identifier: 11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
Certificate issuer: /CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Certificate serial: 019355AD8434D698EEDBEDD29FABA47D4914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 21:00:55 +0000
Manifest this update: Fri 22 Nov 2024 21:00:55 +0000
Manifest next update: Sat 23 Nov 2024 21:00:55 +0000
Files and hashes: 1: EbxAvKtekFOrbbfRnio43xtvmks.crl (hash: YHCOLb/GZPbTMRegX7gMPZSrDksPdrh5Mg5wnpP+qbQ=)
2: ksmr9XcQYTChg1tow_fB1UhgnwQ.roa (hash: CzsRXJ//ITu8APFy1Gf0X43idXjOtUT3v8VL2zBCih8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:84:34:d6:98:ee:db:ed:d2:9f:ab:a4:7d:49:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bc40bcab5e9053ab6db7d19e2a38df1b6f9a4b
Validity
Not Before: Nov 22 21:00:55 2024 GMT
Not After : Nov 23 21:00:55 2024 GMT
Subject: CN=f9f7c53292f83be36a6b8c196dfac20d4300893a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:6b:f9:b4:ab:7c:86:35:06:02:35:6d:88:
61:bb:ff:b4:a4:b4:69:2e:6c:bd:7e:b4:02:2e:5e:
3b:99:21:98:dd:12:aa:74:99:cd:0f:e2:c1:8b:69:
bb:71:4b:6f:07:50:59:49:3d:6d:6f:7e:da:a7:2b:
24:9c:a1:99:a3:48:2d:0b:07:07:f6:0c:2a:00:33:
7d:f3:ac:f4:1d:8f:41:8a:e7:ee:9d:d9:f4:82:b0:
cb:14:5a:2d:09:34:37:bb:35:6d:c2:3e:dd:7d:a5:
dd:8d:7b:7c:cd:70:79:cd:c9:5c:48:76:85:69:5a:
71:9d:4f:81:6d:ab:b0:35:24:93:c3:7c:e4:23:d9:
f9:6c:79:2d:50:0c:1f:65:b4:97:41:8d:8d:9b:d8:
66:e4:78:09:c8:2d:ac:f1:02:b3:24:15:42:42:f5:
c8:a0:8e:19:31:c2:30:34:86:f9:5e:ed:29:46:fd:
32:e1:50:ee:2d:0b:a2:55:67:bb:13:4f:e8:a1:92:
57:fb:4d:50:3c:db:d0:74:1b:d0:87:2e:4b:ac:81:
e2:20:ab:bb:59:f5:9a:ca:ed:a1:de:18:eb:97:8a:
00:02:07:e6:a7:a5:4b:9d:e2:db:2a:4a:c0:0e:58:
69:9d:08:e6:47:de:e2:20:d1:31:a7:4b:d6:3f:9d:
73:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:C5:32:92:F8:3B:E3:6A:6B:8C:19:6D:FA:C2:0D:43:00:89:3A
X509v3 Authority Key Identifier:
keyid:11:BC:40:BC:AB:5E:90:53:AB:6D:B7:D1:9E:2A:38:DF:1B:6F:9A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbxAvKtekFOrbbfRnio43xtvmks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/daffb6-8bdf-411d-b6c4-ae4f84e16ca1/1/EbxAvKtekFOrbbfRnio43xtvmks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d4:a4:17:5d:42:f8:eb:10:55:06:5a:55:84:6f:2f:be:e3:
10:67:05:30:86:28:1c:ae:4f:49:4e:69:3c:9c:c7:5f:7f:64:
5d:be:45:cd:12:64:42:29:80:c3:42:68:4e:31:2c:2b:e0:b5:
cd:55:36:d6:68:e5:49:63:d4:e0:e4:e7:34:60:b0:34:cc:ef:
1a:c7:f7:45:b6:06:96:ee:b0:8a:56:ce:e5:2f:29:74:7b:c8:
f9:db:45:aa:b5:a1:27:94:99:77:be:86:ba:5a:f0:c0:b4:e9:
23:01:2a:0e:95:c3:d3:bb:08:2b:44:d6:cf:fe:f0:71:24:0c:
59:55:cd:90:b2:89:90:7e:fb:b2:be:46:2f:ca:d6:9f:5d:31:
ac:ad:eb:ef:07:56:65:4a:99:0e:6e:52:3c:f0:d2:ac:b9:b4:
1d:ab:ed:ab:b4:c3:9c:35:15:ba:e0:2f:2d:6f:2f:63:23:d1:
33:44:dc:69:f8:12:62:02:34:b4:50:4f:e2:cb:04:e1:20:34:
9e:66:7d:89:81:77:cc:03:75:10:a6:13:36:6b:cf:95:ab:74:
49:e1:4d:d1:25:d4:ed:fc:15:15:f8:94:9c:91:86:e6:23:77:
99:4b:1a:04:58:4d:88:9e:62:88:c0:25:36:6d:24:41:31:0d:
fb:1c:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:39 2024 by rpki-client on console-fra.rpki-client.org