Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: D9B5EKU7c+SfVVyNCkpY9xgi56uTMt4U75KdKa/VG2g=
Subject key identifier: 76:8B:94:54:59:E3:3C:2E:1D:5D:EB:47:53:8B:21:59:55:7B:BE:6E
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 0193696A99B4AF30429BE73C23D2271AB0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 0252
Signing time: Tue 26 Nov 2024 17:00:13 +0000
Manifest this update: Tue 26 Nov 2024 17:00:13 +0000
Manifest next update: Wed 27 Nov 2024 17:00:13 +0000
Files and hashes: 1: BffRGbnJ9ylCKSP8Zu7YFM9CTps.roa (hash: jRYMFdFuHo9OGKDgxdPoRcfLVjSQl6KgwCQb8vGsDiQ=)
2: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: V8eHQeX8UR0W7oYwmU4PWEySDWtY45pWctFFkLvoVL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 17:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:6a:99:b4:af:30:42:9b:e7:3c:23:d2:27:1a:b0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Nov 26 17:00:13 2024 GMT
Not After : Nov 27 17:00:13 2024 GMT
Subject: CN=768b945459e33c2e1d5deb47538b2159557bbe6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:95:0c:d4:64:99:36:10:32:f0:f3:62:03:
dd:7b:a8:37:e0:f2:f0:b4:c0:32:03:02:a0:75:03:
65:7c:be:8d:2e:53:89:bd:00:d0:4a:78:80:88:db:
21:18:e4:5d:b6:ad:72:6f:a4:86:85:c2:df:70:e0:
b6:b9:c9:b7:f3:2a:8e:d6:75:2f:a3:90:b5:a9:43:
48:99:19:56:e7:2b:f6:bc:e4:4c:0a:f4:8e:8e:fb:
d7:8e:2f:2f:52:b1:6c:65:19:ab:b0:d4:c5:12:70:
9a:24:cf:59:54:64:10:15:35:a0:b8:48:d6:91:9a:
ff:c0:a8:af:2b:47:f7:6c:12:c7:67:a1:77:ef:52:
72:74:a0:b1:f9:91:19:f3:79:ad:3e:c3:88:e7:18:
ce:d2:47:11:b9:ad:10:e4:68:eb:96:92:70:56:ff:
7f:ea:d5:af:02:de:08:8b:b1:95:0d:82:7e:cf:dd:
f8:85:49:28:fa:37:12:f7:64:88:a6:07:b9:a0:b5:
c4:8c:58:2e:bd:5e:ed:c3:61:f3:70:32:90:f5:73:
b4:fc:49:c6:fe:e7:c9:08:0b:b0:8c:43:47:d5:96:
2a:6e:53:38:a7:60:7a:81:2f:44:41:6d:3f:0c:f0:
2e:66:d0:d7:ed:bb:3d:37:87:4f:f5:94:3d:30:09:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8B:94:54:59:E3:3C:2E:1D:5D:EB:47:53:8B:21:59:55:7B:BE:6E
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9b:95:20:33:ad:0b:20:33:07:68:75:fb:02:3e:c3:97:ff:
8c:53:95:39:d4:a2:a3:9d:1b:cb:cc:c7:2f:ef:78:a6:40:9f:
5e:f0:d2:89:ad:ba:8e:9a:05:1f:1e:c2:9f:07:ac:52:86:62:
a3:2d:8f:aa:f5:a9:7d:21:03:f1:36:b4:37:62:d9:f7:43:2a:
11:9e:a5:eb:2d:f9:27:ce:a8:16:a7:c2:75:6e:5e:5a:31:8c:
d0:9e:ac:36:34:68:5c:cd:7c:d6:97:1d:f5:50:36:7f:f4:4a:
dc:67:9e:fb:6f:08:9f:b3:dc:30:fd:3f:cb:06:49:17:92:a8:
78:1c:a1:99:fd:2f:e4:a6:69:c2:76:4f:99:69:9d:c1:10:d0:
8b:f5:67:83:5d:b2:95:03:0a:11:b5:dd:69:33:e4:05:09:70:
90:5e:d1:0d:6b:df:b9:24:1d:e0:45:a7:2b:fd:cf:ab:64:03:
5e:70:2a:9b:07:70:bc:e3:eb:5c:54:61:ef:14:73:69:5c:73:
b8:9f:da:e6:59:3a:9a:d5:45:5d:12:cb:3d:46:fb:3b:a0:2f:
c8:16:20:41:28:5a:90:e1:df:63:cf:50:e6:1f:30:44:97:b4:
04:03:7b:24:05:eb:a1:c2:c9:fb:82:9f:ee:bf:16:60:78:8f:
c2:a5:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:40 2024 by rpki-client on console-ams.rpki-client.org