Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: 3m91GTbbocOlXlKkQ8aEk3EW43aS2Lso6Rg8LeMJeMc=
Subject key identifier: 35:28:4D:71:50:1D:52:EB:2A:5B:F8:82:F4:EE:A4:7B:B7:69:35:49
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019354D14D81EC740B8D3243B0E0F7036055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1158
Signing time: Fri 22 Nov 2024 17:00:23 +0000
Manifest this update: Fri 22 Nov 2024 17:00:23 +0000
Manifest next update: Sat 23 Nov 2024 17:00:23 +0000
Files and hashes: 1: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: dn7K+Ff5aLRteWHpwDGyvn0xChc/MOXUbsL9ae2fWOs=)
2: 9MXzBC4F9-iY-VaS_MgEPMGWFQE.roa (hash: rCi7WiLxMNiIQoVcrCIA4neEyLDOT5UGIO7/tPaXXiQ=)
3: eKP131hUVAeM0I3R8CW0FAm_1oY.roa (hash: JXOQFNb9wqMSAa25wQcnpksW/mskB7mfI0F467dNLcc=)
4: sxEZEEWAU1EUn5MwZudFBV21m2o.roa (hash: 4IUTcmnihy5cGg5OJAyro4y8mptoSq2a9OAObZs3QI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:d1:4d:81:ec:74:0b:8d:32:43:b0:e0:f7:03:60:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Nov 22 17:00:23 2024 GMT
Not After : Nov 23 17:00:23 2024 GMT
Subject: CN=35284d71501d52eb2a5bf882f4eea47bb7693549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:87:b3:af:90:d9:78:a1:d7:1b:ea:e5:3a:
b8:ba:ed:31:90:1c:3f:09:9e:ba:b6:bd:19:77:f1:
e5:70:8d:03:29:86:34:3a:06:36:3f:0d:49:96:70:
6e:2e:9e:35:b4:d9:d0:56:d1:40:2b:af:29:fd:05:
76:10:01:bc:21:e9:16:8f:6d:fa:ff:2f:34:6f:45:
83:20:b7:9a:09:dc:81:64:53:3d:04:9e:29:1b:4a:
29:4e:5c:07:ee:a3:fc:96:ef:13:32:f7:3c:43:ab:
42:9b:4f:16:35:13:60:a8:57:7b:5c:a6:94:3c:c5:
a0:ed:05:49:71:bd:47:e6:f3:4e:6c:5f:d3:43:aa:
64:0e:82:1a:29:d8:0f:30:0a:2d:ea:53:0c:23:24:
69:04:aa:74:9c:1d:42:67:3b:03:11:46:4d:8a:3f:
77:14:05:4b:b6:a2:85:b9:13:fa:fb:3e:f2:27:22:
6a:e5:e0:7c:a3:12:3c:cf:b4:eb:2c:d8:4e:62:59:
18:e1:2a:0f:f0:95:ee:07:85:51:5b:3b:bf:eb:fa:
6f:13:ca:16:b0:ad:49:69:e4:76:ad:1b:49:6e:cd:
93:04:ec:c8:af:24:81:9c:fd:3d:e1:c5:59:11:99:
41:2d:2c:77:90:bd:16:5c:f2:e7:f6:da:44:b3:52:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:28:4D:71:50:1D:52:EB:2A:5B:F8:82:F4:EE:A4:7B:B7:69:35:49
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:58:d2:80:9f:32:e3:85:e5:00:81:1f:cc:c1:3f:a3:fd:7c:
1a:2a:4d:5a:b2:17:83:1c:fe:26:62:c2:e2:86:cb:c2:ff:dd:
e6:92:5a:af:5f:7e:f8:78:2e:08:fe:ae:9e:e0:d6:94:fe:bc:
c6:af:dd:e1:3a:3c:b3:fe:e8:22:a4:53:f7:81:ec:45:57:b3:
68:24:16:07:15:fd:a1:30:d3:0c:27:fb:b0:62:61:6a:2b:96:
74:45:99:12:8d:6b:00:e4:eb:61:82:6d:98:88:8f:ae:89:73:
78:79:8e:0e:6d:92:1d:e6:c6:93:d6:f7:af:c5:40:db:90:1d:
17:b4:06:49:c5:8e:a5:a9:2e:2a:ed:f6:3e:50:b9:37:10:39:
d1:d7:cd:99:3c:73:20:ff:a9:b9:08:fe:29:50:99:bc:77:58:
dd:33:ae:c8:0d:4d:c8:79:e4:c1:a2:bb:3f:6f:14:58:c5:d3:
f3:29:2c:9e:fb:10:13:de:88:bb:17:37:fe:8e:5f:63:37:fa:
a1:2d:ab:6b:6f:52:aa:47:cb:d4:29:5b:5f:c5:86:b3:dc:29:
90:4f:fc:ee:04:f0:fe:f9:88:c6:dd:2f:a9:f6:8a:4d:d5:08:
ad:64:6c:4f:97:23:09:78:e7:4e:61:43:77:ed:85:26:15:fa:
22:24:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:34 2024 by rpki-client on console-fra.rpki-client.org