Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: 5ySBsPQ0gSxC1cZwcbltpc7r+Q58GPel518AaTkK2IQ=
Subject key identifier: 24:34:1A:D1:68:56:F9:D6:48:9A:77:5A:F8:BB:50:6E:C4:19:15:7F
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 01936A0F7D78CA33B5BE8E943AB1BC13146B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 137D
Signing time: Tue 26 Nov 2024 20:00:20 +0000
Manifest this update: Tue 26 Nov 2024 20:00:20 +0000
Manifest next update: Wed 27 Nov 2024 20:00:20 +0000
Files and hashes: 1: hmvmeXFvD9qZVeolmIKtp_04JJo.roa (hash: uUoJ8PP6G7psmy5xAgDLUQe3kckCCzaiungEdt32Zws=)
2: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: OQYBGRx7TF28k8270NRsyy7EvdXevt6oKa7ibOSLYtM=)
3: xkqKhQTJvliTYKm1irpbDs1DdRk.roa (hash: k8/BtWF9ShjrNgUsTBho4Go8rADrHXdYSFOCs5o0LFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:0f:7d:78:ca:33:b5:be:8e:94:3a:b1:bc:13:14:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Nov 26 20:00:20 2024 GMT
Not After : Nov 27 20:00:20 2024 GMT
Subject: CN=24341ad16856f9d6489a775af8bb506ec419157f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:48:4e:b6:85:d4:4e:3d:9e:b7:82:97:14:
8f:fd:52:15:b6:6e:ed:0b:21:f0:cf:69:0c:eb:4b:
37:0f:07:d2:49:08:81:81:00:34:ea:85:65:72:92:
b2:6e:ec:1c:56:c6:26:b6:4d:f1:55:4c:e4:d6:f6:
6f:b7:de:18:30:c2:c7:4a:99:52:42:ca:be:57:b4:
8d:8f:eb:aa:6f:d8:c8:a5:10:16:5a:28:81:c2:ac:
b1:6c:0d:88:f2:d7:9c:e9:45:17:b3:93:e6:71:44:
a8:7f:0b:c0:85:73:e3:0b:1b:ec:21:ff:50:d8:e9:
4c:15:8f:3b:23:04:d1:64:69:3e:7b:45:e9:9c:d7:
1c:6c:03:07:06:3f:ac:21:f5:d7:67:b1:05:b5:de:
2b:fd:96:c0:43:14:53:9a:6b:bd:ff:3c:f3:d7:43:
c5:83:65:c4:cb:2b:92:50:04:c1:b3:bd:0d:08:b1:
b4:ce:40:67:d2:79:cc:62:d7:90:fe:f6:9f:b5:7b:
4d:b4:69:51:e3:fb:db:14:8c:99:69:2a:b0:2f:2f:
17:a7:18:90:29:68:56:b7:52:1d:d9:1d:61:b0:07:
85:79:2a:64:88:82:5d:fc:4d:12:d5:1d:ef:bd:f1:
fc:15:23:6a:35:33:31:98:16:c4:8c:ee:53:20:95:
58:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:34:1A:D1:68:56:F9:D6:48:9A:77:5A:F8:BB:50:6E:C4:19:15:7F
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:1b:9a:a5:ad:93:84:6c:7b:8f:95:4a:d7:fc:55:e7:ae:79:
b8:39:cb:da:f9:65:41:c2:c6:71:b5:86:c3:cb:39:32:c6:86:
cd:6b:e4:90:1c:fc:12:d7:4b:30:ee:67:6e:fe:e3:18:04:12:
ac:23:b0:9f:3c:06:a7:d3:b6:d1:bb:0c:3d:0d:39:0a:df:a2:
c6:cc:cc:dc:97:ee:69:81:25:40:3a:0b:12:65:fc:98:b0:46:
7e:95:4f:00:3a:b0:31:b2:5c:96:73:11:cc:89:4f:ce:c2:87:
a1:44:ec:3e:9d:7d:82:c6:05:ef:0b:4c:41:36:77:14:1b:2e:
6c:4c:68:d9:d2:c5:b0:fe:e3:64:17:e9:e3:ee:d8:7a:89:70:
3b:c6:ac:bc:a6:7b:ed:60:14:e8:13:c8:28:98:bf:0b:10:34:
1c:eb:47:35:17:0a:f3:b8:8f:81:7d:81:a5:db:da:be:16:22:
32:3a:0d:c5:55:b9:02:0a:b4:8e:3e:32:14:bb:d6:56:35:94:
eb:26:d6:86:f7:69:9e:4c:b1:b1:4b:a3:23:87:41:be:f4:14:
a2:53:dc:ea:82:ea:70:16:34:92:50:7b:04:bf:00:39:14:bc:
61:35:6d:c5:41:6b:08:5a:75:a2:0f:50:a6:bd:8f:0f:5a:f1:
8f:ce:43:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:29 2024 by rpki-client on console-fra.rpki-client.org