Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: v0JidER6d/ttdwUGPDcghHl59zuuNW4dCYDuCOXceYk=
Subject key identifier: 72:AF:CD:21:2A:63:F7:C4:BB:7D:3A:17:A3:78:38:80:1D:71:3E:62
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 0193512C07D171B4692D67A542BE790BD00B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 00:01:00 +0000
Manifest this update: Fri 22 Nov 2024 00:01:00 +0000
Manifest next update: Sat 23 Nov 2024 00:01:00 +0000
Files and hashes: 1: 1-bYgAy5TYsC5UZhJBCC1TpcXKDo.roa (hash: iifGIe8YWAN7NHeYP6H6Pc1WK1QCo2atmAIMCq/KnSU=)
2: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: vXa2EFVpafCTVF/WwwqSIRLEbjB7ecOTnkSreWM3G4A=)
3: YQ5n8l55IgCcKZEVQwgCXFunMEg.roa (hash: bEjdNXxFSG4dDWbbASoqfQRrOv4ljH6ak+g2OmCON5M=)
4: sNPKcHnt1JKw1AUvog3dXJMq_CM.roa (hash: etTK3jaF4towcjGQiAc4a8lBObndpqO+VMh+DpUbmxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2c:07:d1:71:b4:69:2d:67:a5:42:be:79:0b:d0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Nov 22 00:01:00 2024 GMT
Not After : Nov 23 00:01:00 2024 GMT
Subject: CN=72afcd212a63f7c4bb7d3a17a37838801d713e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:59:72:de:0f:db:73:4b:51:4b:b5:8d:97:
2d:cd:b2:c7:5f:d5:d2:1a:f8:87:ea:d9:15:05:6d:
c8:5e:e6:a4:b4:b5:1a:ab:63:3e:3f:7f:08:14:8a:
ab:5c:28:cb:ba:1c:78:f2:3d:48:96:e5:64:af:bf:
41:c2:d4:74:51:71:9c:68:d2:42:50:ed:60:b9:74:
92:3c:64:37:4b:dd:b8:f7:d1:c7:66:74:c0:d9:7e:
bc:bd:6b:64:53:a9:9d:14:af:5a:e0:79:25:b6:a8:
6e:64:b1:89:83:76:bf:b3:1b:e7:e4:12:fe:cb:4e:
e7:a1:bf:e7:3d:42:79:b7:49:bd:8e:cf:9a:ff:05:
0c:6e:02:3a:85:76:67:81:d1:09:10:69:fa:b1:76:
e6:7d:ce:b5:51:d6:0d:6d:aa:de:68:e2:20:17:92:
63:da:45:03:d2:11:63:65:08:b5:88:72:8d:0d:18:
91:41:52:40:c7:6f:4d:4d:d3:e2:dd:23:2f:06:42:
15:80:fa:dd:fd:26:5f:42:22:50:bb:83:72:1a:ee:
8e:b3:25:dc:4f:36:e3:fa:f6:66:ff:5e:bc:3a:01:
eb:a9:6f:98:7a:6f:a2:5f:54:18:63:a3:57:a9:03:
87:39:e5:a7:d1:8c:e8:47:fd:54:56:ba:e5:73:c1:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AF:CD:21:2A:63:F7:C4:BB:7D:3A:17:A3:78:38:80:1D:71:3E:62
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0f:1c:d6:8d:d3:6c:7e:97:0f:e9:5c:a9:fd:ec:22:f3:e4:
82:42:5e:af:59:95:8d:ff:9b:32:9f:7d:1d:5f:7f:98:34:84:
55:a4:79:54:b9:e4:5b:c5:bc:72:59:93:af:9d:32:9c:a2:87:
0b:ee:64:ce:13:41:05:a6:a0:ac:2c:be:bd:55:f8:ad:00:50:
12:38:c7:66:e9:b3:89:84:33:34:f0:e8:92:6a:ad:3e:eb:bb:
5f:67:dd:d2:66:29:f8:cc:94:60:47:82:67:be:a7:41:d3:68:
cb:0d:46:37:37:97:eb:a7:3a:04:6b:8a:ff:7b:c2:ef:ce:06:
0b:80:60:74:22:c1:8a:69:33:f7:54:92:ee:ba:d9:0d:3d:33:
1c:cd:b9:95:ce:93:43:9f:a7:e9:bc:da:eb:4e:a4:83:8e:d1:
77:19:02:bd:c7:02:57:4c:f0:70:41:9e:e2:b8:b1:01:f4:9d:
c0:cf:c4:c3:fc:f1:38:a6:31:bc:d5:45:de:c4:21:df:75:38:
87:35:5b:8d:37:0c:cd:66:71:b8:0e:d7:35:48:a9:b7:a7:17:
be:2f:e9:f8:5d:bf:0a:25:e7:0e:90:8b:03:79:98:f1:78:bb:
f3:c9:f4:9d:3f:9e:8e:a7:f8:7d:d2:26:75:ce:ae:a7:7c:62:
61:21:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:12 2024 by rpki-client on console-ams.rpki-client.org