Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
File: 2pxnKeHomJmE3YAtGpDonOL-Nzw.mft (raw, json)
Hash identifier: 58Y6fK0B/h6YKBX74h3rxUqKPUsF4MnlC/8G24MnSn4=
Subject key identifier: 54:B0:1F:3C:5C:04:5A:65:B6:18:EB:E9:52:C2:C5:C4:12:3E:F4:AC
Authority key identifier: DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
Certificate issuer: /CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Certificate serial: 019352AD4B58D236877FA3A5CCB512AC03C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 07:01:48 +0000
Manifest this update: Fri 22 Nov 2024 07:01:48 +0000
Manifest next update: Sat 23 Nov 2024 07:01:48 +0000
Files and hashes: 1: 2pxnKeHomJmE3YAtGpDonOL-Nzw.crl (hash: NuhsbYp+1eLV0TS3eXcB+7nih4p0wYVFc2VHz4JHXGU=)
2: 3zGacXXj9sbOWIxn89EhG8JuFds.roa (hash: UqeuHEQdjCrowhpfx/QNQaY3C6rs0hSajDFK093SWIw=)
3: ZxMj6yPUzCdGjZ7O07Q0Jxdj1kA.roa (hash: IlT5kb6jZqjFn/bVCOu+rm8A+W7BQh4hgxlAHufRFfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:4b:58:d2:36:87:7f:a3:a5:cc:b5:12:ac:03:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da9c6729e1e8989984dd802d1a90e89ce2fe373c
Validity
Not Before: Nov 22 07:01:48 2024 GMT
Not After : Nov 23 07:01:48 2024 GMT
Subject: CN=54b01f3c5c045a65b618ebe952c2c5c4123ef4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:07:a1:1e:16:4d:92:66:61:3a:64:84:7b:
7f:2b:b9:da:e2:1d:5d:20:94:a7:2f:e2:e3:34:f5:
4b:de:73:4c:0a:01:bb:96:b7:a1:09:d3:3f:e8:f5:
56:9e:82:c9:13:f7:01:26:4a:88:b7:c7:41:78:b5:
5b:03:31:95:6b:3a:74:67:27:99:92:0f:10:62:98:
a1:44:6a:dd:eb:c9:83:19:11:2b:25:78:a4:cd:94:
7e:39:16:30:71:c1:2f:91:3c:da:37:fb:9d:b2:c9:
92:87:bc:0c:70:bf:3a:4f:16:bc:61:41:34:ad:bf:
c9:69:89:04:33:31:69:b3:8f:ff:9f:79:44:ec:25:
4b:3d:4d:1a:3a:ea:af:26:ff:75:6d:8d:a1:bb:49:
1c:97:33:91:05:05:17:97:e7:19:d4:15:47:b7:4b:
62:dc:c9:07:ff:c8:eb:4f:cb:a9:ad:03:d8:4e:c1:
01:72:b2:41:64:71:27:8b:14:15:fd:6d:f6:db:6d:
f1:54:a2:3d:81:28:fd:16:d8:99:45:2f:e3:05:3f:
36:8f:fe:fe:ad:91:e8:aa:6d:64:8b:45:c0:3f:da:
12:08:47:67:b4:88:8d:af:68:c6:5e:e5:5c:a9:c7:
60:94:5c:55:77:0b:ed:36:83:8a:26:99:09:5f:f6:
0b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B0:1F:3C:5C:04:5A:65:B6:18:EB:E9:52:C2:C5:C4:12:3E:F4:AC
X509v3 Authority Key Identifier:
keyid:DA:9C:67:29:E1:E8:98:99:84:DD:80:2D:1A:90:E8:9C:E2:FE:37:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pxnKeHomJmE3YAtGpDonOL-Nzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/755c55-c4f5-4cb7-871d-69c68e2ef27d/1/2pxnKeHomJmE3YAtGpDonOL-Nzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d6:43:ea:7a:19:d9:b6:05:69:87:1e:6c:99:da:c0:7d:cf:
94:17:57:e9:78:cb:06:53:9a:b1:92:f3:1a:d0:67:d9:33:4c:
18:03:53:6b:e2:e6:6b:62:ec:86:d0:d7:cc:4e:c2:f7:fc:de:
29:81:3b:5c:6e:98:f7:12:a5:d0:fb:8d:27:71:56:ed:6b:76:
4d:87:72:60:cb:25:51:97:a2:2c:14:6d:9d:50:ee:77:d5:f3:
72:25:d8:81:e2:8e:48:3b:f0:b4:55:1b:8b:0d:15:43:a8:80:
23:ee:ab:95:da:1a:4e:85:e6:52:84:b6:e8:e7:c4:9c:8b:1f:
d0:0c:ad:74:d3:3a:13:ba:78:6f:61:76:6b:8b:6f:52:f4:8d:
bd:9e:a8:a7:ff:36:89:5a:f5:4c:53:81:04:b9:4f:7f:c8:74:
36:22:80:37:0e:24:27:c4:a0:e0:ba:80:bd:63:02:e6:b5:df:
e5:55:5c:63:7c:71:b8:1f:e2:34:78:98:5f:89:1c:7d:3b:ca:
fb:d4:c6:af:37:b2:90:8a:df:7b:ea:09:b4:fc:ef:a8:58:c8:
bf:17:89:43:cf:d7:4d:c4:7b:2f:c1:5b:07:f4:17:cc:04:fa:
dd:f3:cf:43:4e:c2:3d:17:78:e3:aa:9c:ab:69:62:af:7d:e0:
5d:c4:d2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:41:30 2024 by rpki-client on console-ams.rpki-client.org