Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: A5YjlJ0Ewx1D5Kd+2NUzt4bDceowv5kesmNx2b8+aLY=
Subject key identifier: 0C:93:D6:73:09:FD:FC:3A:F5:1A:16:3D:70:B2:2C:7E:84:2E:A7:CF
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 019358E57CE9C777AED1076E2E59F8484FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 12:00:54 +0000
Manifest this update: Sat 23 Nov 2024 12:00:54 +0000
Manifest next update: Sun 24 Nov 2024 12:00:54 +0000
Files and hashes: 1: 6PekkHOMSZ2AiLQOQDsOlvMVdLk.roa (hash: NZNVzvxCYyNd0tWKZ8jIzf8wSpogp4X+FHycyVNMxpg=)
2: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: LEmXnd51xCl301i5mWgAWa4FVsc9MQFaYm5+lhOQ/7M=)
3: TbN4VKE4v985VMv3pPaAdKy9jj0.roa (hash: dblxh2G+whQXDnZbcjljUcZ8T2kghpZpXNXycrwMt1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:e5:7c:e9:c7:77:ae:d1:07:6e:2e:59:f8:48:4f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Nov 23 12:00:54 2024 GMT
Not After : Nov 24 12:00:54 2024 GMT
Subject: CN=0c93d67309fdfc3af51a163d70b22c7e842ea7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:c1:52:06:be:e4:e7:98:d4:82:92:3d:4d:
6e:cc:8b:38:d3:6c:4a:50:7b:78:b7:75:9e:39:e5:
f3:81:45:70:20:c4:8f:b9:f3:ad:34:bb:de:85:c8:
9c:6b:c7:1d:0a:19:ad:26:9f:e6:9c:50:66:78:2a:
d7:78:b9:16:9e:80:9e:16:ed:e4:c9:df:03:77:c9:
94:ea:92:e8:36:a4:e0:e3:94:24:a7:9a:1e:d3:01:
25:51:3a:ee:8d:38:90:1a:aa:f8:90:46:f4:f1:a7:
8e:ee:15:c7:d9:2c:15:95:23:d1:8d:de:8f:cd:12:
2c:86:8d:72:f5:3e:69:3c:c2:2a:20:97:bf:2e:ea:
c5:ad:4e:a7:80:01:85:9a:b8:94:3c:bf:c2:7b:ef:
e6:3a:ec:43:02:cf:90:81:74:80:0d:70:f5:84:78:
a7:bc:e5:cf:38:95:dc:2d:54:2f:34:13:96:8c:44:
fb:71:33:42:14:f4:3e:50:30:46:93:19:f8:37:4f:
a6:1b:83:2c:aa:18:00:16:4b:f2:19:b5:15:82:1e:
73:2f:1b:09:52:d8:d5:1a:79:fa:8e:21:9e:9d:73:
f9:fb:62:fc:17:78:e3:84:cf:4d:6c:d6:fa:35:e0:
00:24:1c:01:1d:a8:34:5d:53:54:1c:75:a5:d2:8a:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:93:D6:73:09:FD:FC:3A:F5:1A:16:3D:70:B2:2C:7E:84:2E:A7:CF
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9e:d2:1c:5d:a1:45:49:fb:8f:ae:74:53:93:d8:d5:61:6c:
67:35:76:e4:73:65:3a:38:0b:8e:3e:47:76:a3:33:86:85:cb:
2e:2b:e0:6f:8a:d9:07:6e:97:dd:86:07:f9:fc:5e:d0:5c:3e:
63:e6:65:10:66:28:a1:7e:bd:d8:2e:29:e7:e3:19:70:94:bb:
4f:50:7e:6d:12:30:e9:ef:25:8e:55:21:54:45:e8:4e:83:26:
71:7f:a1:b7:c4:ad:b8:78:df:b7:49:3f:e1:87:65:c1:b1:df:
e8:f7:fa:a5:49:04:8f:c1:94:f5:9e:2b:7b:86:9a:2b:1f:35:
8e:71:65:05:a9:f6:89:cf:e5:f7:64:b0:fe:69:b0:00:dc:dd:
ac:f9:31:48:bd:c7:8d:66:2a:0b:a6:61:a5:e3:e9:e5:6a:02:
7a:09:ab:d5:78:97:62:f8:99:6c:be:28:aa:0e:07:47:c3:fa:
19:75:58:17:96:88:0c:cd:ab:c9:00:4e:a8:c6:26:1b:37:0c:
b5:4c:05:36:46:58:eb:6f:04:02:0b:51:7c:0c:86:46:fd:87:
7c:80:4a:26:ab:a1:73:f8:7f:2c:dc:b4:17:de:55:13:20:af:
75:1b:f4:cd:85:24:24:aa:6b:c3:a7:9d:2e:ea:45:d5:45:ab:
a4:5d:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:51:39 2024 by rpki-client on console-ams.rpki-client.org