Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
File: 1dHNR6U-9X67VnvIgq0phvqsXw0.mft (raw, json)
Hash identifier: +BNv1WS7Qb3TvzDQ8ocXpv2HvXP1TakHS3Q+5GO17nE=
Subject key identifier: 70:48:0D:36:12:98:17:17:87:B8:C5:B0:51:39:9E:FC:48:8C:19:5A
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 019352AC21E100B21AA0391F1ED1FDF07F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
Manifest number: 10BC
Signing time: Fri 22 Nov 2024 07:00:32 +0000
Manifest this update: Fri 22 Nov 2024 07:00:32 +0000
Manifest next update: Sat 23 Nov 2024 07:00:32 +0000
Files and hashes: 1: 1dHNR6U-9X67VnvIgq0phvqsXw0.crl (hash: 4AxuQpNoHG0yw8VvLxYAJcDoMSk/yrmOODmB0avZd7Y=)
2: 2rNzZMm3INs3ag552XvlxKkgsEA.roa (hash: rXgG+DRcB2ter41Rh6MQzi6NzNIXCAXcCRzWcNp6m8A=)
3: JjD70XtvsSvkaZBweUdcuKhN3yA.roa (hash: GO3gQG8eTSJNbnd5pUYnqL5orXdpm5el+bYg314piV8=)
4: qBimJ_xTI3zsMP3DZW0q9b64J8s.roa (hash: HvmBdVhBYF42ATzFIZjkSUg082Xc4Okka4eSxDJe88s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:21:e1:00:b2:1a:a0:39:1f:1e:d1:fd:f0:7f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Nov 22 07:00:32 2024 GMT
Not After : Nov 23 07:00:32 2024 GMT
Subject: CN=70480d361298171787b8c5b051399efc488c195a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:7f:00:e6:24:63:0b:3f:15:ea:8b:06:f8:
de:79:51:dc:cf:71:09:7f:1e:5d:85:ca:66:ad:c3:
df:70:67:16:67:b0:f3:fa:e7:88:c0:c1:d3:79:fb:
32:8e:0d:00:78:2d:7a:e0:65:ba:dc:ff:99:22:58:
30:53:23:02:a8:da:7e:cd:ae:22:17:0f:3e:9f:07:
2a:76:8c:0f:a8:46:f6:4d:b0:0e:4a:73:74:61:b7:
99:2c:34:d5:dd:1b:f9:95:13:5c:70:bf:db:cb:e5:
3e:b0:74:49:ad:53:dd:78:ac:11:51:e2:87:b0:f5:
c9:ff:0d:62:22:64:b3:f3:ab:ac:04:e8:4c:e8:3b:
a2:e6:9c:be:c2:f4:a0:a5:5f:b9:88:0f:ab:18:4f:
f4:49:56:19:69:ef:14:9a:6f:4d:fd:42:59:0d:93:
78:5d:7e:57:eb:82:cb:85:6f:2c:a1:fb:b0:4b:ea:
13:f0:53:65:db:3e:0b:df:47:07:38:fd:88:a3:d5:
75:23:56:e0:11:6f:cc:a4:27:c5:d9:cc:77:e5:d4:
29:b3:1e:9b:1d:36:83:e1:30:41:a4:10:21:d8:67:
c5:d1:12:42:ae:a5:95:ad:b8:79:34:38:8a:88:43:
90:a1:93:1e:89:76:ee:e9:30:98:d1:96:b6:01:60:
35:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:48:0D:36:12:98:17:17:87:B8:C5:B0:51:39:9E:FC:48:8C:19:5A
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f1:1e:0a:6c:6c:d5:8f:7a:17:e3:ae:8e:cc:5a:b8:3f:30:
54:b3:c4:10:41:a0:b1:bc:bd:9b:c9:7f:a9:16:34:69:48:4b:
b7:c2:0c:e0:55:8f:80:0e:df:e1:ae:e2:e8:fc:10:e6:73:da:
0b:cc:88:10:c0:cb:80:c2:9f:a4:1e:8e:04:e1:bc:ff:23:73:
fc:52:2e:2b:35:af:b6:6f:61:ad:d5:33:c2:8d:fa:a9:e9:1a:
82:f8:3b:0c:67:a3:f5:e0:48:48:b1:ec:ed:61:ee:0c:0f:fc:
d2:81:fd:83:83:47:ef:fd:8e:18:e6:ae:67:2b:b4:4e:84:55:
1a:d7:49:96:69:24:f7:aa:d5:0b:0d:c0:6a:1d:72:9e:31:b3:
2d:53:33:12:92:2f:3c:d7:fe:eb:1e:55:78:08:3c:73:34:2f:
2b:68:b1:63:a6:c7:5f:fd:18:46:ba:1f:9e:66:3b:ac:3d:0c:
9b:29:1d:e5:d1:b2:fa:c3:e7:89:8c:ab:a7:44:36:4c:69:09:
7c:d6:81:ec:78:65:29:d3:98:08:8b:40:1f:e5:f2:a4:8a:9b:
b8:68:4e:02:d3:8d:5e:c4:31:bf:bc:52:fa:64:4e:13:28:ef:
68:fe:1d:61:df:f9:98:0b:f6:5f:ff:c5:e3:08:3d:9e:58:a8:
cc:a8:50:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:00 2024 by rpki-client on console-fra.rpki-client.org