Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: fEwmBN7LWUdcKh8DHOXkb2YaICxcSZ3NvXccgFA5D4E=
Subject key identifier: 98:EF:48:98:7A:9B:D4:5B:D2:BD:99:C2:AD:2E:05:BD:F9:71:3C:98
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 019352AE8135380FD3542421AA16BDFDF221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 0BDF
Signing time: Fri 22 Nov 2024 07:03:08 +0000
Manifest this update: Fri 22 Nov 2024 07:03:08 +0000
Manifest next update: Sat 23 Nov 2024 07:03:08 +0000
Files and hashes: 1: 3vjjNVHimSqLoHRuujRD7oc_KGA.roa (hash: CqhogwtD/R2dihav7o+5frTvRWU+cuUOmlir/pHrJhw=)
2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: dxC3gVVfBWgGVwlZjZq9W0iW60fcauoeeQd2Ay1wn40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ae:81:35:38:0f:d3:54:24:21:aa:16:bd:fd:f2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Nov 22 07:03:08 2024 GMT
Not After : Nov 23 07:03:08 2024 GMT
Subject: CN=98ef48987a9bd45bd2bd99c2ad2e05bdf9713c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:be:61:26:2a:fd:16:b5:75:63:5b:27:5f:
87:03:0f:a6:fd:58:16:e2:19:2e:e5:8d:bf:b2:a7:
a9:af:de:f1:6b:44:9e:2e:79:8e:ea:1f:b5:25:15:
a9:1b:d0:3c:23:cf:ad:cc:b3:3c:52:f9:2b:5a:d9:
93:b7:db:70:84:d5:3e:4d:5b:d4:21:4a:3b:b1:7d:
da:0a:93:21:2f:ad:5b:c4:a7:bd:30:f9:61:f5:24:
de:47:38:4c:6b:a8:65:d5:fa:25:7d:c0:cc:26:c2:
3d:bd:19:0b:cd:9e:d9:76:c1:2e:34:30:f9:c4:40:
18:b1:28:9c:e2:65:0f:42:33:5d:0a:dc:d6:72:af:
2f:a1:c4:07:6d:19:68:75:65:62:35:cb:c1:5b:d2:
6a:89:db:cf:1a:89:07:ce:b8:65:68:88:ba:0d:51:
21:8d:d9:25:1e:3d:c6:88:d2:2e:91:a3:53:99:79:
42:5a:30:4b:1c:eb:52:5a:01:70:de:1b:5b:79:cb:
04:81:8a:ce:d1:ef:44:a3:c2:db:2e:f8:7d:a6:3b:
93:85:bc:e9:91:36:ce:66:73:e3:a8:d8:7d:b4:1b:
bc:80:7d:3d:66:fa:48:8d:a6:c7:ac:fa:30:cf:5c:
6a:72:02:12:69:4e:10:ee:37:34:aa:a1:63:cf:e7:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EF:48:98:7A:9B:D4:5B:D2:BD:99:C2:AD:2E:05:BD:F9:71:3C:98
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:89:4f:31:5e:ec:f8:b7:f0:e5:60:81:13:f4:4e:97:19:2d:
d2:e7:2e:2f:8c:23:6b:b0:3f:54:b9:39:06:c7:97:ac:f0:4b:
17:1b:a3:2b:b5:0e:f9:0c:43:49:7f:8e:69:c0:26:ce:c0:32:
c0:f0:9a:fe:b7:20:62:fc:f6:ad:fc:65:17:da:b4:3a:12:b9:
9b:1f:98:ef:6a:e8:16:f9:4b:ae:57:4a:4a:8f:10:d6:56:d0:
11:89:2e:ae:67:6f:1e:56:8e:58:96:b5:80:17:98:75:a5:65:
95:0a:fd:ef:8f:e4:60:cb:a0:f9:ba:f4:24:a2:19:65:ae:43:
87:43:34:6d:03:d8:4e:59:09:fd:95:07:94:72:1a:9a:c3:5a:
f9:6e:7a:04:1e:c4:fd:19:73:f6:84:eb:73:f0:be:99:c1:8f:
a4:fa:a9:44:cd:43:e0:c6:a4:84:4b:42:27:5f:06:38:f4:f8:
eb:38:22:b5:58:82:e8:17:b9:16:d0:6f:83:be:e0:da:00:83:
60:a3:9b:d3:03:44:15:e9:03:fb:4a:3d:30:44:4f:e3:a2:76:
66:39:94:34:c7:3a:fd:11:73:b5:5e:8b:0d:4f:13:fb:b3:e4:
35:89:88:fb:77:e2:97:b6:b2:37:82:e0:e8:81:01:aa:20:68:
56:7f:50:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:11:00 2024 by rpki-client on console-fra.rpki-client.org