Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File: mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier: uuXsP9v7nP66qA/psynfC7EZr8M18lWnrAeP0RhZR/Q=
Subject key identifier: 22:DC:6C:DA:24:79:AD:8E:45:B9:A7:B1:8C:88:9A:32:EC:D4:6A:E0
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer: /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial: 01935350E2D6EFD371AE420AD5A67F3BBD7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number: 11F7
Signing time: Fri 22 Nov 2024 10:00:29 +0000
Manifest this update: Fri 22 Nov 2024 10:00:29 +0000
Manifest next update: Sat 23 Nov 2024 10:00:29 +0000
Files and hashes: 1: kwxedtgCJvQ2TeENH934cKYAzRc.roa (hash: 8fLdkKHQI/BHnYw/WMlq17+ogPOIxjP/0fIIgxIHLMg=)
2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: 5BakXfHHWQ6pa9cSrpZ5jXN/5os+cLAL7Slec6a1s2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:50:e2:d6:ef:d3:71:ae:42:0a:d5:a6:7f:3b:bd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
Validity
Not Before: Nov 22 10:00:29 2024 GMT
Not After : Nov 23 10:00:29 2024 GMT
Subject: CN=22dc6cda2479ad8e45b9a7b18c889a32ecd46ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:86:ed:f7:68:d8:c1:bd:17:a6:95:b5:44:
d4:ea:81:22:ed:26:5a:2c:83:b2:cc:90:e8:19:96:
02:2d:42:e2:7e:9f:38:1e:ee:46:6e:06:96:eb:d8:
4e:20:cc:99:b0:62:0a:2e:ec:11:b4:aa:27:aa:a5:
2f:22:88:a5:ab:a8:3e:c7:1a:73:85:20:8b:fe:05:
ad:89:8b:e3:48:5f:42:57:82:e5:ff:a0:f7:34:4e:
a2:c9:2a:ba:fe:d7:fd:2b:b6:ff:d0:c2:62:fb:3e:
8e:78:e4:56:56:e2:1e:74:9f:ad:14:e1:b0:0c:32:
d7:9c:1f:b2:9c:9c:8d:5d:be:48:3a:1a:0c:8c:a7:
72:60:29:a1:ca:4c:e5:2c:be:6e:84:29:6a:35:c3:
fe:ce:43:43:0e:58:3a:1d:0b:f3:67:78:4d:47:e6:
61:c7:dc:ed:a8:20:61:a4:3b:f9:05:87:c3:11:22:
12:a9:fd:54:dd:d5:63:7e:c4:17:9c:09:19:d1:90:
ea:46:71:cb:e6:6d:c9:5d:63:82:f6:88:24:2a:1b:
e0:72:79:ab:dc:ea:e7:fc:4d:dc:77:bd:dc:bf:d7:
ca:79:cc:bf:b4:50:51:aa:fd:a8:01:25:3b:e1:58:
fa:41:47:3b:af:e6:af:16:d8:20:f8:17:b7:a7:ef:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:6C:DA:24:79:AD:8E:45:B9:A7:B1:8C:88:9A:32:EC:D4:6A:E0
X509v3 Authority Key Identifier:
keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:da:a5:e4:2d:1d:77:90:2a:a6:1f:b9:c9:35:18:d2:b8:f1:
f3:92:9b:ce:3a:22:47:7c:9d:e7:23:04:e1:7d:78:75:01:ef:
3e:47:16:72:db:d6:af:d7:e6:cf:a3:ac:f6:25:35:df:b0:b8:
c0:ac:69:9c:75:f0:33:23:f6:7e:2b:0a:3c:ca:c7:8a:b8:04:
c7:07:39:42:d3:7f:28:0b:24:72:64:64:0e:02:3b:81:ba:f6:
02:5e:4d:59:da:f4:b2:1e:1d:f8:6e:fd:7b:24:bf:fa:0f:fb:
d8:2b:ff:c5:e1:bd:42:8d:c1:8e:ff:ec:ce:9f:00:d1:84:18:
9a:b1:f1:2b:bc:c3:c9:3d:e1:91:79:4a:91:24:e9:8a:fd:7d:
49:f2:cf:ca:13:ca:29:ac:2a:9b:61:e3:ce:95:56:12:f7:c5:
7e:bd:c6:17:41:c7:d2:d5:db:d3:55:03:93:3e:a4:3d:e5:9d:
ce:b1:e2:15:8b:3c:52:b5:18:1f:35:1e:3f:77:ec:91:ed:aa:
29:7c:b7:bb:dd:7a:65:bf:30:30:0c:5a:2f:df:8c:36:a5:a4:
45:7a:84:31:f8:e1:cd:14:1a:8d:13:a0:02:5d:4e:a9:dc:fc:
61:cd:b4:ba:c4:71:a9:a1:b5:5c:8c:d1:4d:e1:88:bc:94:e2:
15:19:48:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:21 2024 by rpki-client on console-ams.rpki-client.org