Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
File: CWbgXRUnUN-q3l-veRutOR3G0tQ.mft (raw, json)
Hash identifier: LNfsnV2o84dXEE8idcvHzm0CsEjuLfq/v/+SoxP/XOI=
Subject key identifier: 44:83:29:25:E4:3D:25:81:EA:C7:6B:4A:71:0C:44:95:A5:43:72:10
Authority key identifier: 09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
Certificate issuer: /CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Certificate serial: 01936632CE1C818B502479CC3053EFAF231D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
Manifest number: 0BBA
Signing time: Tue 26 Nov 2024 02:00:25 +0000
Manifest this update: Tue 26 Nov 2024 02:00:25 +0000
Manifest next update: Wed 27 Nov 2024 02:00:25 +0000
Files and hashes: 1: 0heJYBg_UJC-339eX1MJZRZg3LQ.roa (hash: rZfWvfCsnUFNRjnCMxYLKud+0lwTCIIJvWQNluhppbQ=)
2: CWbgXRUnUN-q3l-veRutOR3G0tQ.crl (hash: p5F918PdNJeRXAjSZzoWBewHsRx1mNZE00RbA6kf6Y4=)
3: LYTp8X12s5N_vo730amJTIVWTWs.roa (hash: Qy/lR3s++0R9/IIj990LNuiktgWK9khMcuKkMpGQK7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:66:32:ce:1c:81:8b:50:24:79:cc:30:53:ef:af:23:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0966e05d152750dfaade5faf791bad391dc6d2d4
Validity
Not Before: Nov 26 02:00:25 2024 GMT
Not After : Nov 27 02:00:25 2024 GMT
Subject: CN=44832925e43d2581eac76b4a710c4495a5437210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:20:5d:be:10:09:d7:31:e8:f6:15:23:c4:
6f:a1:8e:88:5f:1c:fd:44:2f:17:78:70:dd:21:39:
f2:79:5d:6c:77:47:36:ad:39:53:78:12:0b:e6:01:
1d:20:67:6c:8c:16:a3:39:f8:db:d2:ad:d4:28:f8:
69:af:62:6d:1a:ab:91:48:5d:e2:c1:8c:d6:a0:b8:
a8:75:be:a6:fb:c5:19:81:ed:6a:14:82:0e:fc:38:
37:2e:fe:6f:c9:f3:8c:84:45:5f:27:5d:d5:17:dc:
64:cd:9a:4a:1f:c4:c6:b1:e3:7e:53:e6:85:2c:7f:
ac:77:4e:e8:62:13:4e:77:65:5a:c9:2d:8a:6c:99:
e2:46:9d:2a:c4:c1:25:17:80:ee:30:df:e1:92:21:
58:e7:7a:ee:96:df:39:b3:cc:9b:04:eb:c3:37:4f:
8c:8d:3d:60:ec:75:f3:39:b9:3e:93:cc:52:cf:9f:
05:03:54:2e:be:45:cd:f1:74:af:c4:4c:43:cc:ed:
88:a7:f9:21:e7:2b:4e:c4:d2:13:e2:2e:b1:26:e5:
6e:b8:b2:9f:f3:b8:cf:8b:e5:43:66:45:b4:6a:45:
8b:26:12:73:a8:e4:8d:48:39:48:ba:5a:52:51:e8:
dd:44:2b:a2:86:2d:0f:e1:36:25:bf:7b:9a:dd:ae:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:83:29:25:E4:3D:25:81:EA:C7:6B:4A:71:0C:44:95:A5:43:72:10
X509v3 Authority Key Identifier:
keyid:09:66:E0:5D:15:27:50:DF:AA:DE:5F:AF:79:1B:AD:39:1D:C6:D2:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWbgXRUnUN-q3l-veRutOR3G0tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4e1bc8-f810-4182-a6e3-721bb4fc8c16/1/CWbgXRUnUN-q3l-veRutOR3G0tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:58:35:79:87:78:91:ac:dd:2f:ed:25:e7:a1:38:4a:3e:3c:
d8:94:66:c0:d3:f9:3f:62:8c:98:d2:ce:6a:5d:17:4e:ab:90:
ed:fd:7b:b7:6d:e4:81:75:f8:97:1a:87:54:a0:dc:9e:7b:8c:
48:1a:f6:de:dd:54:74:6f:4d:01:ce:46:5a:73:91:70:cf:59:
50:8e:12:68:cf:81:0f:8d:a5:fa:34:60:ac:ce:7e:bc:e9:45:
bd:f3:ef:3d:c2:bb:36:dd:f6:07:1d:c8:8c:28:5d:3e:19:0c:
70:84:8f:54:fa:10:7e:91:9c:63:36:81:69:f0:5f:86:58:20:
64:28:bc:41:6b:8e:cf:e3:bc:28:49:6f:f1:39:1b:d7:d4:77:
41:12:7a:58:51:67:96:09:01:f1:79:5d:45:32:aa:ff:86:f3:
8f:59:07:b1:1a:0d:02:c2:58:c3:bd:90:75:49:d1:ea:15:c0:
e8:d7:7d:19:72:8d:3a:c3:35:8b:d8:c0:71:5b:bb:e4:fb:26:
2e:53:b9:dd:62:d1:34:e4:fa:c0:41:34:48:b1:d8:4d:5f:f4:
de:ba:d5:3a:21:bb:28:22:d5:22:79:56:1f:2a:1b:71:32:2c:
76:c5:25:3b:ab:41:5c:a7:98:0d:93:9b:80:84:75:44:9d:70:
32:26:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:16:07 2024 by rpki-client on console-fra.rpki-client.org