Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
File: A5gx97o94vvvFtRkn9SGDBXp1sM.mft (raw, json)
Hash identifier: Rsr3O5pztE95ofNDHmmcc0KztWegovrCTRMalhuPcps=
Subject key identifier: 9A:14:77:0F:3D:55:33:47:4B:5D:07:E8:3D:5A:9B:BF:C6:D1:B6:D5
Authority key identifier: 03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
Certificate issuer: /CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Certificate serial: 019356F722D43478F06333CE52E8E1ABF23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
Manifest number: 03DB
Signing time: Sat 23 Nov 2024 03:00:57 +0000
Manifest this update: Sat 23 Nov 2024 03:00:57 +0000
Manifest next update: Sun 24 Nov 2024 03:00:57 +0000
Files and hashes: 1: 90R5Nf1Jm6UudE3nKCmtk10Jn5Y.roa (hash: wxadMh5QQcKisorJgf2k0n82xKfaexZeg6bUX3IrtUU=)
2: A5gx97o94vvvFtRkn9SGDBXp1sM.crl (hash: AcBAoaR/pP3m7MXipF6cUEcOzhMhuwX6KAtHgjEg02w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:22:d4:34:78:f0:63:33:ce:52:e8:e1:ab:f2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=039831f7ba3de2fbef16d4649fd4860c15e9d6c3
Validity
Not Before: Nov 23 03:00:57 2024 GMT
Not After : Nov 24 03:00:57 2024 GMT
Subject: CN=9a14770f3d5533474b5d07e83d5a9bbfc6d1b6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:03:f3:8a:c9:2a:d7:db:e0:9d:00:da:71:
54:b8:7a:9e:6e:a4:69:49:9f:3e:0b:75:d0:37:55:
18:06:b0:28:fa:77:4e:c7:ff:8c:51:03:5e:3f:0c:
87:e1:35:96:ea:62:18:89:c0:bd:26:03:45:c7:54:
ad:78:2e:d0:56:a4:f3:e0:94:ad:9a:6b:22:c2:54:
ed:7d:3e:59:66:fd:3e:9b:f6:ae:94:80:87:92:e3:
df:9d:22:02:88:ac:dc:20:e3:da:ab:63:76:8d:ab:
df:ee:ec:a4:a9:c2:a2:05:ad:d4:99:5a:7c:83:af:
d6:6a:2c:bf:49:0c:d1:aa:b5:a5:08:37:40:50:cf:
7a:a0:ae:1d:41:a7:09:c8:dd:e6:de:d5:cb:be:de:
6a:91:6c:4b:97:cd:4a:f5:ec:a1:a7:bd:25:57:0f:
25:b5:30:d1:90:86:4f:51:08:a2:d8:9b:0f:2d:3c:
2c:87:c1:4e:d6:32:7c:68:57:5e:81:46:94:23:4a:
3e:bd:8a:37:da:40:97:67:b2:94:75:4d:5d:8e:e8:
79:fd:1b:3c:6e:a7:db:b2:78:38:99:68:df:ea:98:
b6:0f:21:43:15:39:39:42:a5:ab:06:01:42:1a:f6:
cd:c3:9a:36:27:4f:bb:68:81:14:4f:ad:64:78:58:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:77:0F:3D:55:33:47:4B:5D:07:E8:3D:5A:9B:BF:C6:D1:B6:D5
X509v3 Authority Key Identifier:
keyid:03:98:31:F7:BA:3D:E2:FB:EF:16:D4:64:9F:D4:86:0C:15:E9:D6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5gx97o94vvvFtRkn9SGDBXp1sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e4494e-1e33-4437-8433-037b5a7b9544/1/A5gx97o94vvvFtRkn9SGDBXp1sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:00:36:53:93:59:ed:90:34:65:fe:55:67:f6:63:7c:98:2e:
3d:25:60:16:6d:40:17:7e:a4:32:a4:ff:3f:9d:74:cd:87:38:
9e:f4:4a:0a:99:d5:f1:23:64:48:3d:8f:92:5c:f1:da:1e:7f:
62:1a:e5:08:70:d8:18:c9:7e:3b:34:b3:ec:4a:ec:6c:3d:18:
c8:91:d7:d8:74:10:8f:48:fa:87:41:ea:c0:08:71:38:5e:49:
bf:fb:cd:95:9b:be:83:be:50:ca:19:c9:7b:fb:f4:80:7a:ea:
0d:66:7f:26:2d:e7:e2:45:99:75:6d:42:26:fa:7b:1c:48:6f:
8a:01:b5:be:8b:74:16:ec:8b:01:b8:b0:b5:b3:4b:53:68:96:
3a:0a:b7:17:21:1e:ab:35:ed:05:0d:24:0c:a7:7a:f4:8f:1c:
2d:59:ba:33:15:65:4c:99:eb:5c:4f:86:e6:21:e9:aa:4b:84:
50:a8:7a:09:80:2f:05:f3:c1:40:13:7c:a9:cf:90:0a:11:35:
91:f0:dc:9f:30:c2:f5:7e:ee:e3:68:f9:8b:c9:47:47:31:a7:
39:dd:c4:b8:7c:c6:5b:30:2d:36:16:4d:96:c5:1d:0a:17:11:
fc:2b:ac:33:4a:5c:63:de:ce:48:3c:9f:4c:36:94:a9:86:86:
3e:78:1d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:46 2024 by rpki-client on console-fra.rpki-client.org