Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: tExNPOhzPmbdeTAXqAnT0hm0Y/G+AZ0xVygSxyNAMwc=
Subject key identifier: E6:1B:22:7F:F3:40:E3:36:16:F7:B3:66:50:BB:F6:5C:38:C2:7B:0F
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019352AC197958D7B54679592F0120513738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 05BD
Signing time: Fri 22 Nov 2024 07:00:30 +0000
Manifest this update: Fri 22 Nov 2024 07:00:30 +0000
Manifest next update: Sat 23 Nov 2024 07:00:30 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: bGaHWT/EOIVKEK/txL6LkN7UgWrGmQFeCUb95y27CQ0=)
2: 2gmmvuFlRhOZLHqOMiz56fV8jss.roa (hash: /evxrOguyJ4XordpyBySMjBh9YL47E7QN+T4npofl8M=)
3: EEpVLr6-9isxoASUwtFOw3dPetw.roa (hash: H5ihgWRJ7n4+YSEpiVpzWCYRe21+YPsbVn4JxQF5MzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:19:79:58:d7:b5:46:79:59:2f:01:20:51:37:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Nov 22 07:00:30 2024 GMT
Not After : Nov 23 07:00:30 2024 GMT
Subject: CN=e61b227ff340e33616f7b36650bbf65c38c27b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:d1:37:38:54:0d:bc:5e:93:60:d0:c8:c1:
a7:4b:ad:d9:fb:8e:16:d4:dc:32:25:23:51:a1:f9:
80:80:34:47:6e:e8:15:d1:ed:e3:15:84:17:94:90:
48:76:c9:0d:76:c3:8f:73:d7:66:b1:0b:d2:3d:6b:
71:a4:44:28:dd:5a:b8:fb:b7:28:36:6f:6a:5c:89:
9e:9a:7c:e2:0f:9a:76:f4:87:cb:db:15:bf:cc:00:
8c:4e:23:2f:83:a3:00:95:6d:ce:89:a3:b6:41:75:
3f:e0:ef:3d:3b:4d:3b:7a:e0:d7:e6:f9:bb:70:cf:
cb:75:9d:0f:21:04:63:81:09:ac:de:bc:00:a5:2c:
6b:f3:e3:db:53:d7:ba:30:2b:72:64:d7:41:8a:15:
6c:6c:08:ea:a0:77:b1:42:96:c7:7b:6a:8e:29:b1:
44:e7:6e:da:a9:38:f4:09:ad:15:f7:0d:ba:65:80:
c6:37:1d:0b:03:46:bc:8f:50:b3:1c:e2:07:7f:ed:
9b:75:c4:58:d3:9d:79:6f:44:ac:df:89:0c:38:c3:
bb:0b:41:54:37:ff:bd:4b:a2:25:b8:2e:51:e6:2c:
5f:49:2c:4a:f6:a0:af:f0:b7:a6:2b:97:26:54:cf:
41:19:92:6e:f5:f8:8a:49:81:be:78:6d:5c:bc:2b:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1B:22:7F:F3:40:E3:36:16:F7:B3:66:50:BB:F6:5C:38:C2:7B:0F
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c1:f6:8e:91:12:35:87:7c:1a:28:90:73:27:69:56:8f:90:
78:28:1c:20:82:2e:98:41:07:a2:0d:8f:a4:89:39:fe:ca:07:
c6:f9:fa:f9:ea:36:82:7f:32:60:f8:d9:ba:62:6e:e1:e0:2d:
ad:eb:cc:7f:01:d6:0e:55:66:96:ea:77:b0:01:e6:5a:9c:7b:
13:1a:32:e4:87:92:ce:c7:1e:91:5e:a7:0a:d0:57:9f:8b:c7:
b8:b8:d0:56:62:9d:35:4a:42:69:4a:e7:6f:5a:51:06:b2:b5:
97:fc:2f:bb:66:e1:da:65:a4:79:63:10:c2:e7:d6:aa:dc:87:
7c:0c:3c:e9:16:31:2a:bf:9d:64:0f:da:6f:5f:30:e4:1c:22:
7e:44:31:19:55:8c:f6:8b:e6:d7:13:29:8f:24:df:71:b2:c4:
00:3a:fe:77:dc:7f:5f:9c:04:ea:d8:f0:8a:2b:5f:9f:bf:5b:
ef:06:ab:84:1b:93:78:86:c4:76:f1:9f:2b:8e:56:31:41:4a:
b9:12:c6:41:74:db:a6:80:af:b2:61:b1:df:fd:cd:07:87:9f:
95:7d:ab:84:01:fc:ed:8f:16:4b:a2:3b:69:11:63:33:6d:b2:
35:f4:b6:cb:a8:55:5f:e5:00:9a:2a:05:3b:d1:08:93:94:9a:
a9:f6:6b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:36:55 2024 by rpki-client on console-fra.rpki-client.org