Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: HiDDUYMGK1C9Rw/oMrcLBBbOjycDWdI8xkDo5LOZZ24=
Subject key identifier: D2:7C:52:71:9F:FF:82:FF:2D:BF:70:6E:6B:56:78:51:EB:0E:20:C1
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 0193568A1D113A71914C505A228F2F59AFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 0D1A
Signing time: Sat 23 Nov 2024 01:01:52 +0000
Manifest this update: Sat 23 Nov 2024 01:01:52 +0000
Manifest next update: Sun 24 Nov 2024 01:01:52 +0000
Files and hashes: 1: 2YAMIz1FL7qnfFMbleSl-mVu4MU.roa (hash: kH8KMzoHXsqv0hosFwSNuVfeEyXmkfCp0HWmXgZNLxI=)
2: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: aG/iR1ZcOIOFlIYzCaQHYmwos7bgfPfKe3J1lvGMxjI=)
3: wYfHdL-XH7LF5SGVgMP-qXtKpM4.roa (hash: kwFaH+14/fqrQcJWuG9v/9Mjt2QxzkzARnFdk9ZonjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:1d:11:3a:71:91:4c:50:5a:22:8f:2f:59:af:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: Nov 23 01:01:52 2024 GMT
Not After : Nov 24 01:01:52 2024 GMT
Subject: CN=d27c52719fff82ff2dbf706e6b567851eb0e20c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:21:9c:c8:2f:8d:bb:df:80:79:9e:9a:1d:
97:82:a7:39:22:1e:36:20:ee:c5:1b:c5:3c:cc:fe:
9d:93:68:7a:31:72:eb:99:8e:db:d0:fa:5a:dd:26:
58:6d:ff:19:1c:7b:7f:b1:79:bf:dc:52:14:fe:4c:
ad:20:f3:83:76:ae:26:d9:d7:48:f1:97:00:c7:26:
71:b9:17:13:30:63:96:21:c2:e0:ab:45:00:f1:2b:
b1:30:8d:06:5b:4e:01:81:f8:b3:d8:16:5a:21:a8:
a6:fe:fb:4e:b3:63:79:ff:2f:58:10:4d:12:44:f3:
87:db:1e:07:ee:76:18:21:25:a6:8e:ea:de:99:53:
1f:87:b7:0d:b8:9b:2d:41:24:94:f6:3a:64:43:d9:
32:e9:10:b5:51:26:6e:23:e2:3c:0c:9a:85:3c:49:
51:ed:d2:90:90:18:90:74:ea:8e:dc:f1:c1:0a:84:
f0:be:57:9a:f3:7c:9d:ea:14:b1:56:6b:d4:4b:56:
f3:88:07:cd:ca:2a:b7:04:15:d6:f8:9f:89:0c:68:
10:62:ca:94:48:10:23:7e:eb:97:9b:58:95:46:46:
3d:6c:b5:b4:5a:c4:87:0f:bd:26:0e:10:de:07:f1:
89:06:43:7c:3f:3d:f5:bb:bd:50:60:0b:92:e0:aa:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7C:52:71:9F:FF:82:FF:2D:BF:70:6E:6B:56:78:51:EB:0E:20:C1
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:18:89:95:5c:66:50:1e:0c:db:fa:09:bd:36:7b:f4:a2:17:
3a:e4:aa:5d:0a:d6:38:61:34:4c:3a:a9:a0:db:98:c9:13:cd:
08:d2:81:56:f4:70:8b:09:6b:39:5b:39:91:18:85:1f:45:01:
b5:77:11:b0:bf:e0:ad:ad:da:14:a7:c7:df:24:22:bf:d3:f8:
99:eb:8d:60:29:b6:36:7c:9a:59:21:1e:b0:bf:a0:ff:83:95:
a0:9a:f1:e3:39:52:f5:1e:5a:d4:2e:ef:97:2a:92:25:8d:6d:
79:c6:cd:d9:76:b2:0d:9d:c3:80:12:c1:e8:f0:10:8f:57:76:
5c:61:5c:fd:aa:4b:09:94:d1:5f:94:7c:9c:02:f5:23:33:4d:
fd:a6:0a:3f:02:20:25:1c:aa:7d:8e:f6:f2:03:e3:9d:01:e9:
75:f7:3d:47:e9:71:2b:80:f3:04:26:b1:6a:c6:3a:a7:fe:69:
08:ab:da:d4:44:82:c1:f8:8d:35:93:53:b0:e5:bb:6f:e0:9d:
c1:4c:0d:8f:b6:48:7d:dc:f5:43:7f:0c:86:e5:49:a8:6a:74:
2e:3e:6f:03:92:db:09:99:2d:ff:49:15:9c:49:16:85:78:49:
ec:9d:20:61:68:1e:90:82:85:18:d5:f5:41:fb:06:2f:54:fe:
d6:d7:ab:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:44 2024 by rpki-client on console-ams.rpki-client.org