Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
File: Luu2kbJPKHklPjpqReC1xSZzsJ0.mft (raw, json)
Hash identifier: VZyFiOgPwe8t0qGyBQ6A3Oa6y1qtrgkNB+Qz4eE1Ggs=
Subject key identifier: FA:60:15:04:73:58:4C:16:3E:94:34:CC:F9:53:8F:10:B6:8A:F7:66
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 01935274FA8F4DA30AAF3228210C75498915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
Manifest number: 03CD
Signing time: Fri 22 Nov 2024 06:00:17 +0000
Manifest this update: Fri 22 Nov 2024 06:00:17 +0000
Manifest next update: Sat 23 Nov 2024 06:00:17 +0000
Files and hashes: 1: 09Osv_J2vaLLmCXBdWQs6qaSB8s.roa (hash: c/OqAF5iTDv4JkIRSsP3rqgd/Z6Txy2Tw53XGCqRVFs=)
2: Luu2kbJPKHklPjpqReC1xSZzsJ0.crl (hash: 9q7EsYaa9hblMoN/rSTS3JzrvuBMSNgKCutnq8Dq7H4=)
3: xU5MczumYTk24Bkp0m-V2QFIzZA.roa (hash: MrPzhzQMyVixmwcIZRnc2hZtiekh97VlfgV19/LAbWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:74:fa:8f:4d:a3:0a:af:32:28:21:0c:75:49:89:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: Nov 22 06:00:17 2024 GMT
Not After : Nov 23 06:00:17 2024 GMT
Subject: CN=fa60150473584c163e9434ccf9538f10b68af766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:87:27:23:f2:58:89:21:54:bf:e6:83:69:
31:19:2e:b8:e7:2c:10:94:47:f5:2b:2b:20:5d:1c:
5c:66:a9:f4:0c:70:55:ff:6d:15:76:6b:74:f7:8a:
dd:6e:f7:fd:fb:ac:23:6a:de:57:cb:09:24:4a:c8:
7b:62:6e:c8:ac:82:0a:8a:81:95:56:3a:1f:f5:71:
b4:1c:f6:1a:f6:38:75:7d:74:87:e6:65:6d:d4:c2:
81:60:48:f1:3d:c0:8d:f3:ad:35:d6:19:63:5b:e0:
f5:1a:21:5b:3b:f3:69:cf:04:eb:78:fb:c6:72:a0:
a5:c2:d4:85:5b:ba:7a:6c:9b:1e:dd:97:d2:41:37:
9a:b4:0f:bc:f1:f5:c5:51:27:de:23:18:19:0f:91:
ac:b9:ad:5c:be:e0:65:90:35:58:3c:83:8f:b2:c7:
e9:35:f9:e6:45:d0:ef:7d:93:8a:88:ad:64:e5:d3:
86:8d:fa:71:2f:99:1a:fe:20:b7:bc:d0:24:fd:75:
f2:bf:0e:59:4d:99:fd:d6:ff:54:32:21:75:75:7c:
07:75:67:72:1a:54:29:fc:0c:0e:fc:98:ea:82:f6:
0b:01:3f:7b:d8:61:f8:93:32:cd:1b:6b:3b:b8:58:
5f:72:5a:73:8e:8e:5b:f0:b5:7a:1c:08:ee:c1:dc:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:60:15:04:73:58:4C:16:3E:94:34:CC:F9:53:8F:10:B6:8A:F7:66
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2f:7c:14:e1:6f:e3:56:57:b8:f2:4e:9e:8f:6c:4b:32:31:
30:1f:68:44:a3:da:c0:4d:8f:fa:f0:01:ec:e2:11:ca:e9:e8:
42:0f:25:d6:77:01:bf:d1:8b:f4:b0:26:e7:36:cd:38:c7:66:
70:c9:da:c6:c5:eb:a0:1e:4a:62:08:3b:bd:73:ee:50:13:03:
ad:c5:af:0d:c4:9f:08:8b:16:0f:b1:e3:a4:37:eb:ce:01:11:
81:cc:3f:ca:b3:27:bf:28:fe:f0:0e:72:33:03:54:9d:d3:bf:
ca:ac:70:a8:28:f9:87:da:09:e8:c0:77:c7:8b:03:ee:23:ac:
d3:73:3d:11:a0:22:c5:d8:bd:b2:74:1c:42:a8:f4:1f:6b:36:
a1:d2:42:08:24:c5:25:51:99:f1:c8:25:43:82:c1:92:fc:6a:
56:e9:39:30:68:d1:de:d6:fc:c2:0e:f4:ab:d6:cd:05:4a:93:
84:54:38:10:77:87:66:24:06:42:7b:93:3a:ee:8c:90:c3:22:
3b:4d:20:15:ff:90:13:bf:55:cf:5b:cd:12:a4:37:35:cb:92:
36:52:03:fc:2c:ac:3e:e6:60:a6:f0:f7:cc:e8:ef:7f:7e:19:
58:04:2f:68:0b:56:5e:3c:52:e1:a8:cb:8d:ac:d6:35:60:f3:
6b:8a:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:47:05 2024 by rpki-client on console-ams.rpki-client.org