Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File: rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier: 0FRlt1MXbu8dtT0K7PDRL8RHvktfAOJjxWwWTJXtVQQ=
Subject key identifier: C3:2B:5B:F6:C2:53:72:D6:0C:77:55:A5:A7:CF:95:D7:4B:2F:37:45
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer: /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial: 01936669ACCD295870664F6926D0FF39F562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number: 1378
Signing time: Tue 26 Nov 2024 03:00:21 +0000
Manifest this update: Tue 26 Nov 2024 03:00:21 +0000
Manifest next update: Wed 27 Nov 2024 03:00:21 +0000
Files and hashes: 1: f75C-eTq_0EKgTYOGoFO4ittOsE.roa (hash: i/H4pWzbwylaFsZBa5QuEepfQLuTxubTgyGCX8GB8e0=)
2: m8IokWXXSsnAqYI3zMwdPZ6Ixfk.roa (hash: PfPTVlQUQsehNwHzlj5pw4ydjkZB/Va3s6HnI8C+g2s=)
3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: crJw/Y8e8xrZF13Q8qKhAM1afV5b03o7oBRmavBXSns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:66:69:ac:cd:29:58:70:66:4f:69:26:d0:ff:39:f5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Validity
Not Before: Nov 26 03:00:21 2024 GMT
Not After : Nov 27 03:00:21 2024 GMT
Subject: CN=c32b5bf6c25372d60c7755a5a7cf95d74b2f3745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:d6:0d:8b:59:61:0a:ee:13:88:b0:28:9f:
ab:72:cb:0d:0a:b1:d6:33:44:dd:5d:67:15:b8:19:
ec:e7:b4:69:94:6a:29:fb:87:88:8d:e8:23:86:b3:
a1:f0:b4:22:f0:7f:7e:0d:0b:f5:e1:95:8b:db:ef:
75:ad:94:4f:04:dd:e3:88:69:c8:0c:02:04:dd:bb:
94:cd:35:30:29:97:f7:77:dc:15:18:ca:62:13:ad:
7b:4d:45:00:e3:c9:5e:96:ad:10:e1:5a:1f:52:e4:
77:d9:85:84:34:1e:6c:e6:c5:eb:4d:e7:22:7f:1b:
5e:1a:0c:28:08:02:ce:c9:03:64:e5:ae:38:ba:06:
07:59:03:31:41:23:16:2d:33:dc:43:bd:cb:03:0e:
a2:11:97:c3:b0:92:58:b5:06:97:40:5d:d2:22:30:
4e:9c:ec:df:0d:b9:c9:b7:45:e0:32:57:bf:df:14:
c9:5d:fa:26:14:df:6c:a7:ae:d3:8f:dc:8c:a8:2f:
ef:37:bd:1d:67:f3:2b:9b:5b:f2:31:68:95:71:ee:
76:4e:36:50:db:24:36:d2:e7:d2:c3:57:d2:15:1d:
3a:8d:95:8f:92:c3:9b:2e:ca:98:aa:84:ba:36:72:
95:09:b4:f3:88:22:06:ee:9d:e8:8b:3a:36:8d:18:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2B:5B:F6:C2:53:72:D6:0C:77:55:A5:A7:CF:95:D7:4B:2F:37:45
X509v3 Authority Key Identifier:
keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cb:d2:91:6e:c1:cb:f1:22:80:d2:dc:57:97:21:65:3b:0a:
e4:69:0e:88:1b:90:26:33:70:68:d4:89:99:89:1a:72:d8:e1:
b5:59:f8:46:90:e4:b4:a0:1c:11:fe:33:af:cc:37:83:cc:4c:
8d:26:47:52:b6:01:da:70:55:3f:f6:ed:1c:a6:2e:dc:78:ef:
50:72:30:95:85:9e:39:78:9a:87:07:89:6f:a8:9d:9e:42:28:
f5:ca:2d:88:75:9a:9d:ec:4e:82:9c:97:d3:41:89:68:1a:3b:
59:c3:0b:f1:04:93:d0:36:83:ef:43:b8:f1:38:f8:e8:24:9c:
43:a2:77:a1:d4:f3:c8:a6:9e:5e:e4:84:ca:8a:d7:3c:2b:7b:
78:66:dd:7c:62:5a:ce:fd:bb:e3:70:0f:cc:17:8f:40:b8:94:
6d:77:c3:f0:68:38:b8:85:08:0d:b9:b3:d5:98:bb:d6:73:f9:
48:1a:9c:f8:df:7e:a9:35:41:40:8b:c9:11:81:9b:b4:f4:fe:
3f:45:60:df:61:18:b0:85:b2:62:a1:00:b9:8f:8f:c1:a2:53:
87:ec:5e:0b:63:0b:68:42:b7:80:e4:8f:6d:a9:07:8e:46:04:
b2:4e:71:51:97:01:55:45:29:74:cd:8b:c5:18:9c:3b:4b:40:
71:47:b4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:34:22 2024 by rpki-client on console-ams.rpki-client.org