Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: WNcLj1Ox5iKmCtJpAxv/CM58GzKxT5wcbQh4ZbJXXzY=
Subject key identifier: 76:D7:51:D2:2B:CF:41:3A:A6:0A:2A:EA:15:0D:55:24:BC:03:40:32
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 0193579B7F6000762AB072B5E8F8EDDBC287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0964
Signing time: Sat 23 Nov 2024 06:00:28 +0000
Manifest this update: Sat 23 Nov 2024 06:00:28 +0000
Manifest next update: Sun 24 Nov 2024 06:00:28 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: wzoD+cV/iOBz8qX1UitBGNCT2j1UHNsEsPR7+Q20uvg=)
2: qlLxpm32xr2I6Mnyr9sxTUj-5Ys.roa (hash: /iuk7ks/0LwmjAi9X5Ct+RK3xmw5ka0D358QH3DA7xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:7f:60:00:76:2a:b0:72:b5:e8:f8:ed:db:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Nov 23 06:00:28 2024 GMT
Not After : Nov 24 06:00:28 2024 GMT
Subject: CN=76d751d22bcf413aa60a2aea150d5524bc034032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:59:e3:7d:85:1c:46:1b:47:63:bb:26:fe:
94:dc:18:3a:9b:1e:65:ce:f6:19:14:1a:06:9a:1c:
cb:db:6f:74:f3:d8:c6:8d:82:19:ee:45:79:4b:f6:
32:83:a2:90:47:22:8a:37:69:8c:52:54:3e:b8:c4:
81:46:45:69:7d:66:f6:84:af:ae:9a:25:e1:2f:c1:
75:6f:fa:3f:78:ec:ee:2a:77:bc:aa:cf:58:a1:98:
08:53:7f:f4:f9:9d:45:1a:d2:6b:97:7d:af:fb:13:
87:ab:0a:be:f5:11:65:49:b0:e4:3f:7d:e2:41:89:
23:53:a4:c4:77:ea:fb:64:bf:0b:f3:85:53:4d:0d:
ae:37:ab:53:7f:e5:13:f1:e2:ef:bc:f5:e3:49:ef:
ee:9e:23:0d:13:57:92:00:22:70:8a:63:80:cf:10:
ca:ed:d1:cc:c2:f7:ed:d1:32:52:11:89:2f:3a:46:
c6:af:62:c4:b6:27:15:07:4b:3e:1d:e4:82:6c:03:
31:c9:02:c5:f6:48:59:13:a9:a0:26:bb:48:29:6c:
b2:39:ee:98:9a:ff:68:69:34:50:ec:cf:72:8d:7c:
a9:43:aa:bb:a3:5c:cb:2a:05:06:2d:05:b3:a7:44:
ae:ef:22:2b:e5:c1:51:09:45:47:81:e9:d3:5a:0a:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D7:51:D2:2B:CF:41:3A:A6:0A:2A:EA:15:0D:55:24:BC:03:40:32
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:86:cf:07:c6:84:d1:f1:2e:65:46:d1:c8:95:7c:d9:81:91:
ac:a4:28:f3:ec:20:3f:b0:09:80:e3:36:35:1d:d1:16:1d:e2:
f5:da:c7:a3:27:fd:3a:f7:2e:60:23:36:74:55:92:f1:1b:27:
23:21:49:1f:3c:56:03:1e:39:f7:41:8b:4c:61:ae:62:40:b0:
65:b7:a9:90:e2:ff:a6:6f:b3:09:34:c6:17:1c:e1:c7:aa:a1:
e1:0e:9c:5d:36:74:e6:58:61:d6:b7:19:a1:94:c4:f8:73:67:
de:64:55:e0:c8:a1:14:5d:78:cb:37:34:17:98:26:5e:ea:0e:
29:33:93:0d:40:6d:8d:16:a9:14:c9:2d:f1:33:4b:a3:a9:5f:
fd:78:05:86:b4:4e:41:ba:43:d2:18:b5:00:b2:e4:6c:4d:e3:
8f:bb:fa:2f:20:a8:40:65:6a:a8:03:fd:0b:fd:bf:ac:8d:cc:
c4:28:59:99:54:74:d5:51:d2:c8:ac:25:c0:ec:f5:9b:b8:8f:
e9:d3:0b:05:d4:0b:5f:fa:fb:0f:b7:cf:3a:01:a9:83:7b:5e:
b9:bb:ef:fc:40:7e:1f:73:42:30:8e:ef:2b:31:0f:6a:71:9a:
8a:29:43:8a:50:32:56:88:ac:90:98:02:86:30:8f:66:1f:9f:
14:3c:05:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:20 2024 by rpki-client on console-fra.rpki-client.org