Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json)
Hash identifier: 7RzP5i8u3cmP2lZn0OWb4KFcHno7CbBYd+A7HNPQr2c=
Subject key identifier: A2:41:59:10:D1:90:9C:36:2C:B0:E7:4C:D2:CA:2D:B4:80:88:67:DC
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 0193527500348036A66CA87BFEDF69217CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
Manifest number: 1115
Signing time: Fri 22 Nov 2024 06:00:19 +0000
Manifest this update: Fri 22 Nov 2024 06:00:19 +0000
Manifest next update: Sat 23 Nov 2024 06:00:19 +0000
Files and hashes: 1: Hura5xYE7L9AySQAWRkppCNZte4.roa (hash: GZ2i6D5W+o3EAP6fS5YmSLfpgkiMWLMKAGZAaMMjUlg=)
2: S8hTDaLNJfFKV_Q5kH4xG0zYGIQ.roa (hash: ng644q+iQ9iIjEgaMsCa3UlSI9OUSgDNntgRdP9zLzU=)
3: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: kbUnHxpp2ygHZ1i2Zpag6zSE/HotL1qF6Tw9dY9Q8d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:75:00:34:80:36:a6:6c:a8:7b:fe:df:69:21:7c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Nov 22 06:00:19 2024 GMT
Not After : Nov 23 06:00:19 2024 GMT
Subject: CN=a2415910d1909c362cb0e74cd2ca2db4808867dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:15:62:9d:34:f2:79:11:34:b0:31:1f:70:
b3:34:0c:38:56:01:77:0b:76:1f:26:d0:b9:82:e3:
9f:05:a1:96:e3:a6:ae:a3:75:6a:3b:f5:75:df:1e:
f6:41:46:94:55:93:10:93:cc:c2:3c:70:79:9a:72:
0e:f9:b0:bb:ff:f8:5d:0e:ce:98:d7:84:0e:0f:0e:
e8:5e:bd:b9:45:cf:41:d4:a3:15:6b:ba:dd:a3:c3:
cb:71:c8:4b:c6:36:87:dc:be:c2:94:01:14:bb:52:
b4:04:f1:92:b6:7f:0a:69:e3:2e:5a:19:06:f7:ed:
a3:3f:e4:e9:ca:4e:79:0a:ec:b6:f9:62:95:87:73:
d9:e4:5c:3a:a1:05:08:c8:48:8c:ef:af:e0:ea:8f:
dc:45:f2:da:2e:4e:45:b0:73:25:c3:99:a2:15:50:
7d:b9:84:23:1f:09:5e:9f:63:a9:75:8c:52:7e:ad:
95:4b:a5:59:ce:54:bc:58:6d:b7:31:fe:10:c3:0f:
64:68:7c:24:5c:82:77:2f:a6:42:fd:68:18:fe:05:
0b:86:c1:aa:88:0b:06:0e:60:4a:9b:97:87:d3:0e:
c7:6d:ce:9f:e5:83:a7:12:93:a5:d7:a4:a3:4e:52:
d4:76:a2:b0:e2:a8:e4:50:d2:10:29:94:72:ef:e1:
e7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:59:10:D1:90:9C:36:2C:B0:E7:4C:D2:CA:2D:B4:80:88:67:DC
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:59:20:58:e3:d3:10:b7:18:40:96:b4:bc:33:bb:cc:ae:1e:
87:04:f9:23:5b:e5:ff:a3:6f:58:da:4d:fa:0b:b1:4e:7f:c2:
09:e0:60:06:d2:94:c5:cf:8f:fa:e2:ab:a6:be:1c:3f:7d:8e:
ce:64:ea:83:0c:9e:9a:53:ed:40:3b:82:b8:ec:cb:b4:1c:9b:
0b:7b:30:9a:f6:a7:7e:9b:16:9c:1d:24:d7:91:b7:10:91:04:
ca:ef:e1:24:94:fc:5a:11:06:d1:ea:b1:c9:24:e3:d9:a6:9f:
f0:36:5c:87:8f:16:a7:6b:ee:89:ec:47:db:2d:cf:16:48:52:
db:bb:6a:3d:9e:60:29:42:4b:eb:36:3b:bd:a7:97:be:1a:8c:
bd:41:9a:c1:df:1a:45:03:b6:8b:1b:f4:d5:2b:73:ab:c4:d6:
96:5e:33:2e:56:83:89:89:e9:66:6f:bb:b5:a3:c7:e6:69:47:
9e:1c:4b:c5:ef:c2:e1:c1:89:84:c8:af:31:c8:36:c7:54:2d:
91:e7:a4:d3:23:fb:c7:b5:1f:81:56:60:b8:06:21:49:5f:dc:
05:73:78:39:30:48:0b:32:fa:8b:1f:6b:2a:9c:2a:7c:b5:e1:
56:85:c9:60:c4:a4:bc:3f:d9:a9:a8:59:08:55:c5:5a:cb:26:
f6:d8:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:02:46 2024 by rpki-client on console-fra.rpki-client.org