Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json)
Hash identifier: BNZkBT8uLH6oopLdskrnsmIIUlQKD2xKyjd/TWK/YZo=
Subject key identifier: 86:84:A5:E7:5D:07:59:A1:FE:6B:DA:C2:E1:E5:02:FC:03:C9:53:95
Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Certificate serial: 0193549C79D54018FD765F506B563DEB0C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 16:02:41 +0000
Manifest this update: Fri 22 Nov 2024 16:02:41 +0000
Manifest next update: Sat 23 Nov 2024 16:02:41 +0000
Files and hashes: 1: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: g+3j6kQOerGByzagT213XYsEyPVUxSsSwLodzKs0snU=)
2: OC2ArZeCkW5fCZbVrfhbtoWwUHA.roa (hash: 9or06xxzzKXYd2M5UmA4YrVS1Qdx/q/ATnRIIkT21z8=)
3: grW0VjOUxJOsPGC_DkEveZ6FuD8.roa (hash: 4wFAA3Klt2IABPrvkjBj7mOCsKvnEqBCKviA6jwI5I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:79:d5:40:18:fd:76:5f:50:6b:56:3d:eb:0c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720
Validity
Not Before: Nov 22 16:02:41 2024 GMT
Not After : Nov 23 16:02:41 2024 GMT
Subject: CN=8684a5e75d0759a1fe6bdac2e1e502fc03c95395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:14:e4:ff:5f:a5:7d:b9:71:1b:e1:70:72:
44:81:99:8b:2f:f3:56:21:38:eb:70:ae:6d:22:cb:
58:8e:36:e6:ab:ec:68:3c:69:b7:08:00:a7:f8:e3:
e2:a5:9e:c5:b3:80:e0:f5:4a:a9:3a:a2:cc:c4:36:
d2:ab:2e:17:5c:87:b2:b1:f1:fe:28:8d:1b:79:05:
bc:f4:00:8d:92:b9:31:3a:ef:82:2d:f9:d1:cf:86:
aa:69:eb:e4:6b:59:78:e1:86:67:51:52:a4:2a:01:
70:f9:70:54:f8:b4:4d:d9:3f:a8:ee:a1:e9:41:8e:
ed:6a:9a:65:6f:3e:07:2f:61:c3:7b:0c:8b:b4:60:
20:3b:d6:b3:aa:f1:c5:72:3f:5b:0e:9d:39:91:37:
36:cb:33:86:20:90:20:2d:3b:3f:65:eb:dd:61:d0:
63:e7:00:99:28:c7:54:d6:41:93:a6:00:d1:0f:c9:
85:28:87:c7:23:37:74:19:d7:43:c1:f6:a3:f9:a9:
67:a9:f9:5e:58:3d:38:5f:f3:c4:09:a6:ac:9d:85:
94:06:2c:a0:64:b4:40:f8:60:89:b4:f7:59:96:58:
64:c5:ff:23:c6:4d:20:57:32:a3:de:f9:b3:f3:6f:
79:c1:30:0d:72:0d:e4:3b:8a:ef:c4:58:a3:63:ac:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:84:A5:E7:5D:07:59:A1:FE:6B:DA:C2:E1:E5:02:FC:03:C9:53:95
X509v3 Authority Key Identifier:
keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d8:0a:ac:60:60:de:c0:e7:1b:cf:97:b5:92:c9:1a:9e:99:
18:8c:82:9b:fa:97:9a:1d:42:19:f3:38:dc:94:89:47:18:ee:
b0:48:33:f5:1c:09:a1:22:55:83:b3:fb:75:6b:1c:bf:a6:7c:
05:22:7a:ae:61:77:9f:70:5f:b1:4d:4e:dd:e0:63:77:7c:20:
d0:8c:fe:ae:62:46:ef:33:6a:97:ab:e3:a2:7f:6d:75:d9:ed:
e5:da:f2:d6:01:3c:a1:57:2e:82:c9:5e:fa:e2:b2:85:7c:6d:
ca:75:a3:6c:77:52:0c:76:62:1b:45:7f:1d:f7:74:64:58:5b:
e4:74:f7:18:68:43:0e:d4:51:57:34:a5:80:5a:dc:dd:6b:9a:
1d:e8:00:a0:d0:7d:6a:1b:af:9f:bf:1c:a7:76:70:13:e9:a4:
a9:ab:8e:ad:be:ae:cf:4a:b3:52:1a:47:a8:57:3f:b0:fc:e9:
31:8d:bf:76:76:c4:72:5f:de:f3:06:1c:01:3d:ba:41:8f:b6:
52:68:f2:5b:6b:6e:84:c6:2f:67:54:24:96:12:4f:38:69:59:
9b:e9:30:bb:20:53:e0:18:7f:80:52:f9:4b:17:71:80:a8:44:
a4:52:ee:7a:b8:12:88:68:89:4f:62:99:93:1c:ab:e5:42:7d:
7c:3e:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:16 2024 by rpki-client on console-fra.rpki-client.org