Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
File: k3WPkqf9c1m6KEgSWoTfzELRS2w.mft (raw, json)
Hash identifier: 063m7KFQhJst7TY0BdNF/0MlSU8Akzad/awO3UL67K8=
Subject key identifier: CF:57:47:B9:FA:DD:F0:FE:8D:A4:30:51:7C:5F:82:5D:E7:14:9B:3E
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Certificate issuer: /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial: 019238B8F20D202BEB051BCA5BD174C162BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
Manifest number: 12DC
Signing time: Sat 28 Sep 2024 13:01:37 +0000
Manifest this update: Sat 28 Sep 2024 13:01:37 +0000
Manifest next update: Sun 29 Sep 2024 13:01:37 +0000
Files and hashes: 1: OjwJk7b9fiF0IKeaIkgX-PTQ82g.roa (hash: XkXLR/0C1pgFk9KnpttANUenl/WBdhiPV5INfwJ3uDI=)
2: gQG46p8nYtEudAmhe3DES-DhPdM.roa (hash: l90E08lurLB+Ekw63NipiI8jMUDW9mOr3NMlAnR5uw0=)
3: k3WPkqf9c1m6KEgSWoTfzELRS2w.crl (hash: HMx+pwxXOqVvTaX4jqDoSGe2kUCxL4jq8n0KfGxRD7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:b8:f2:0d:20:2b:eb:05:1b:ca:5b:d1:74:c1:62:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Validity
Not Before: Sep 28 13:01:37 2024 GMT
Not After : Sep 29 13:01:37 2024 GMT
Subject: CN=cf5747b9faddf0fe8da430517c5f825de7149b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3b:d6:5a:f4:07:06:b6:4d:d3:80:9d:8c:f4:
dd:6d:bf:9f:4a:72:0a:e3:ed:48:f1:8d:32:7b:4a:
69:b7:63:77:0f:41:f1:9a:72:96:35:c3:18:e9:b7:
7e:04:22:f5:fc:ba:e5:1a:a4:94:48:6b:d1:54:3d:
35:70:a1:24:21:fd:2f:c0:f2:f3:8c:a0:ce:1a:ea:
25:ed:81:68:25:1c:30:60:a3:8d:02:8d:b3:85:45:
be:af:9a:8d:2c:93:5c:a4:f4:80:9a:5d:8f:71:08:
61:da:c1:b5:38:e4:55:7d:c1:01:dd:5f:d1:08:25:
5f:fb:64:22:99:7c:53:30:07:fb:c5:8b:dd:4a:58:
d6:7e:e9:7d:e3:cb:54:c2:3f:ce:c0:5e:8c:54:74:
aa:28:ad:53:ed:ea:d2:69:7a:95:9b:52:9e:8a:65:
43:ff:5e:47:e7:3f:51:c2:e2:33:df:e1:78:d3:8f:
1f:0a:0c:6d:09:ab:7b:62:c6:97:52:62:43:1c:a1:
93:f9:32:d9:29:af:6a:58:b7:32:54:ca:eb:66:23:
dd:30:2e:c9:d7:33:93:f3:8b:f2:1b:7c:99:d9:4b:
75:8a:c1:b8:88:bc:37:70:53:98:1c:b5:7e:1e:91:
e6:11:a0:a8:bc:19:de:4a:62:ac:c5:d4:6c:af:d1:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:57:47:B9:FA:DD:F0:FE:8D:A4:30:51:7C:5F:82:5D:E7:14:9B:3E
X509v3 Authority Key Identifier:
keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cd:54:91:5b:0a:e7:e2:c3:20:6c:e1:bb:66:ad:b9:a4:af:
6f:be:b0:23:d6:2a:43:23:d3:cb:7d:21:2f:b0:8f:bc:66:25:
53:09:26:28:1c:99:87:2a:72:19:db:a3:4e:01:3d:c1:bc:72:
96:47:29:07:9c:b8:a4:47:15:7a:7a:83:88:58:89:ee:f8:1e:
82:a2:e3:ed:a2:34:3b:e9:38:8d:0d:91:f1:2e:c7:5f:5a:60:
3b:fb:c7:28:88:f4:44:19:e6:7a:9b:c5:87:6b:c0:89:59:20:
d0:b3:73:66:ab:c3:f3:4f:25:e1:ed:c6:ec:0d:c2:f3:52:ad:
f8:93:f5:78:2a:ea:ae:40:71:1a:46:60:72:65:05:4a:33:c0:
78:b9:a5:d1:af:03:3d:c3:59:c5:5a:8c:4a:4b:12:51:8c:07:
44:46:1e:87:f7:69:89:18:b9:a4:a4:aa:f9:fe:4a:39:4c:ee:
40:16:97:99:2d:4d:52:dc:60:75:f9:9e:30:e9:70:d0:3b:65:
9a:53:c3:c5:1b:b2:1e:51:3c:98:c1:4c:d3:85:78:6d:93:0d:
09:cc:6e:38:5e:f9:8b:ea:48:5a:73:e8:60:6a:b4:b1:64:61:
95:e2:8a:72:e4:e6:6b:16:61:fa:e9:5b:0f:3a:4e:4a:a5:e4:
ff:87:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:59:41 2024 by rpki-client on console-fra.rpki-client.org