Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
File: WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft (raw, json)
Hash identifier: ebsRWnqiAaykzzbu1V4AnO6TGI1M3ZP8mdciOwtVGxA=
Subject key identifier: 22:09:25:9E:9F:85:BF:D2:36:82:B2:DA:71:80:78:45:BA:2F:C7:CF
Authority key identifier: 58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
Certificate issuer: /CN=588db30c807839cc534dd6d11ab90420f873d639
Certificate serial: 0193572DAC964D0C897352E40D5C32A6761C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
Manifest number: 040C
Signing time: Sat 23 Nov 2024 04:00:31 +0000
Manifest this update: Sat 23 Nov 2024 04:00:31 +0000
Manifest next update: Sun 24 Nov 2024 04:00:31 +0000
Files and hashes: 1: WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl (hash: TjFhRpdFrCDv9T88wbHnorh0U+xTRkdl0Kt4Q+WfvjM=)
2: qjGUPXc_PEeELmkdntoQg5QskLs.roa (hash: 9oI4kftv9JEIB3aby9ZD6p11JSOKtfj7BLjPTZ7ve90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:ac:96:4d:0c:89:73:52:e4:0d:5c:32:a6:76:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588db30c807839cc534dd6d11ab90420f873d639
Validity
Not Before: Nov 23 04:00:31 2024 GMT
Not After : Nov 24 04:00:31 2024 GMT
Subject: CN=2209259e9f85bfd23682b2da71807845ba2fc7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:34:1b:a5:71:ba:57:d3:d8:b4:0c:d3:ed:
34:23:91:18:6e:d8:10:58:56:84:3a:98:a4:4f:7d:
33:13:ae:b1:34:02:10:1b:4e:16:0f:d0:ac:5c:38:
07:41:4f:1e:25:c5:0a:fd:1e:6b:81:40:98:6a:05:
9b:2c:6c:11:01:8b:33:32:3f:d6:b9:10:08:61:27:
b5:23:c6:e7:35:ea:28:94:d3:5f:89:94:21:f1:1c:
fb:17:1c:c3:66:ad:e3:26:76:43:0c:22:5d:1e:7d:
c3:91:cd:af:c7:cf:a0:ee:f7:7f:da:de:e4:b8:56:
ab:a8:11:33:e4:c1:e1:5d:04:a9:f9:a9:a1:de:5c:
51:6f:98:12:dd:07:41:05:98:19:bf:af:3a:45:e5:
af:64:e4:59:28:83:16:d7:61:c6:44:1d:db:e7:d2:
3c:28:88:31:67:19:64:0a:cf:63:5b:78:1b:9f:bc:
d2:ce:f2:e6:88:46:f6:1f:95:ec:95:d3:d3:80:2b:
c3:df:ce:61:fe:f3:20:b2:c0:c9:f1:e3:ff:8d:83:
92:b5:f2:84:2a:4b:5a:04:f0:4b:f4:ba:59:3e:20:
6c:cb:36:62:03:b4:65:32:2e:a8:91:57:de:b6:26:
d3:14:c0:0b:5c:f1:6e:a4:84:49:91:26:a1:85:d6:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:09:25:9E:9F:85:BF:D2:36:82:B2:DA:71:80:78:45:BA:2F:C7:CF
X509v3 Authority Key Identifier:
keyid:58:8D:B3:0C:80:78:39:CC:53:4D:D6:D1:1A:B9:04:20:F8:73:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WI2zDIB4OcxTTdbRGrkEIPhz1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/85ec1c-e97e-422e-975c-1f54b80ce020/1/WI2zDIB4OcxTTdbRGrkEIPhz1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f8:e0:d6:be:cb:df:fd:07:30:67:f0:99:45:91:b7:48:e9:
cb:71:87:58:ef:31:99:82:a2:d4:54:e1:87:6a:48:c9:d3:e6:
28:32:67:4a:73:e5:38:18:74:65:b4:db:87:07:3e:6d:db:5c:
31:bf:4a:1a:8b:01:cf:36:df:e2:d7:69:45:a1:9d:0b:91:94:
92:cb:b1:9f:53:0d:58:f1:bc:cc:31:54:04:52:18:d7:ea:0d:
c6:df:fc:d4:48:ec:f6:9d:16:b8:70:d6:1a:3c:41:c3:78:27:
8e:ce:37:e7:2b:c6:42:d3:fd:ba:75:3f:7b:81:04:fe:2d:a6:
a7:e2:9d:c3:1c:9a:05:66:d3:7f:4c:dd:db:c5:b2:df:f5:43:
e1:20:3c:ff:63:e7:f3:47:3f:16:bf:e6:a4:fe:36:b3:4a:21:
5a:d4:61:75:c4:a5:15:62:26:eb:50:6f:24:30:2a:ea:23:d4:
14:8e:fc:5a:3a:18:66:68:b8:0c:14:45:13:9f:83:18:73:66:
cc:b3:9b:d3:b3:91:2a:9d:c5:15:93:74:26:07:5b:1c:a9:03:
62:8b:6e:b2:d3:21:12:a9:01:5d:61:f7:a1:63:2a:a6:27:3a:
e1:df:a2:8b:02:d6:9f:f5:f7:00:a5:d5:28:0f:b8:4c:80:2f:
6e:08:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:19 2024 by rpki-client on console-fra.rpki-client.org