Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File: eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier: u7BSRUv7oc8bMKNj1tnDu66ElIZyabW0mkhRVsf7tug=
Subject key identifier: D2:8E:5E:B6:3B:82:77:0F:CE:2D:22:3D:86:4D:B2:0A:EF:10:71:AB
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 01936DB72CF14CB2A7D28407655006C2C5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number: 137D
Signing time: Wed 27 Nov 2024 13:02:21 +0000
Manifest this update: Wed 27 Nov 2024 13:02:21 +0000
Manifest next update: Thu 28 Nov 2024 13:02:21 +0000
Files and hashes: 1: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: YycuRDAMC/zJPgifmvxk3sADwZ52yFnXqvuFziuPsx8=)
2: o3YL7ShXfqaZQBaf6Rx6CXeZTJA.roa (hash: 9HkncudvOfvSUFUOog4DS4yLjgQdiVBL6vWxHCTF+d4=)
3: z7gEt1EbBipH1HfKqPmkcVRKJao.roa (hash: RG9pCtgi2ew7DcangcgFHeOMGKMgLcP5+0SkzbMLO9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:b7:2c:f1:4c:b2:a7:d2:84:07:65:50:06:c2:c5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Nov 27 13:02:21 2024 GMT
Not After : Nov 28 13:02:21 2024 GMT
Subject: CN=d28e5eb63b82770fce2d223d864db20aef1071ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ee:2e:dd:a7:6e:3b:82:3f:b4:ca:2f:73:0b:
82:62:72:72:02:14:12:15:32:9a:cd:26:41:2e:44:
87:fa:38:c9:c3:20:c0:f1:e0:94:05:83:97:61:48:
ce:57:90:76:cf:64:ca:09:d3:34:50:85:de:57:a1:
91:5b:43:1d:84:2e:f0:5e:b0:32:0d:00:e0:69:fd:
54:20:6c:49:7b:6f:58:55:6f:9f:66:ca:1e:ac:26:
63:59:29:48:66:b3:06:63:a3:e6:e4:cb:f7:c3:e0:
00:a7:d3:5a:cd:37:12:8c:69:3f:83:8f:21:11:23:
a9:c1:51:78:d3:2a:f4:0b:9e:cb:16:c3:76:22:02:
8d:d8:fa:1a:2b:c1:7c:ec:da:dc:9d:ae:32:ed:f2:
e2:7c:df:ad:27:b5:19:a0:de:da:1d:1e:39:d9:cb:
c1:69:06:33:3a:56:7a:71:c8:88:57:7b:ce:2e:a4:
67:26:6c:d0:8d:af:27:2d:6e:3b:49:84:7c:a6:27:
2b:23:59:48:11:e0:68:d2:56:74:c7:0c:c0:5b:f2:
d6:01:83:21:49:25:a1:d2:cc:5b:30:b3:88:0e:ad:
57:9e:e8:50:e2:75:d9:56:da:69:c4:5e:eb:f4:6f:
68:05:5b:7f:63:dd:6c:24:08:da:de:c5:d1:d6:cc:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:5E:B6:3B:82:77:0F:CE:2D:22:3D:86:4D:B2:0A:EF:10:71:AB
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:42:e7:9a:40:fb:09:10:39:fb:f4:a5:fc:35:6f:d8:3f:0a:
c3:34:4a:48:90:24:10:67:51:a7:b4:87:98:4b:7a:e9:b6:fa:
d4:e8:07:fb:05:89:d2:46:62:1b:38:5f:f7:da:e1:3c:df:79:
b0:45:26:c7:76:fd:d7:c6:82:f9:03:e6:6a:fe:68:c0:68:aa:
a7:32:ac:80:af:a4:21:e5:14:bc:41:1e:52:1d:93:89:fe:53:
e5:d0:62:4d:11:3a:29:23:51:a6:b1:0d:8a:8c:c2:e2:fe:94:
47:18:ff:e7:0b:65:c6:2b:92:68:b0:a2:43:a3:d6:b2:cf:32:
5e:ab:7c:b2:36:91:cc:fb:3a:f8:58:45:e1:09:11:c3:14:e0:
01:dd:35:d1:74:5c:12:9b:b1:e2:0c:11:89:60:16:62:f6:b9:
31:cb:91:9d:51:fc:41:96:63:ba:ec:40:0c:d1:8a:67:c8:35:
3e:c4:09:3f:63:de:5c:1c:45:76:52:34:89:57:f6:86:18:80:
82:19:4b:9c:44:61:55:64:92:57:fc:d1:d8:6e:77:5c:07:d9:
0c:be:2e:6a:dc:60:df:22:ed:b9:8d:35:70:50:f9:66:5c:7f:
54:24:f1:55:b9:7b:55:cb:27:12:2a:95:df:2b:b2:cb:13:dd:
88:e9:26:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 16:56:42 2024 by rpki-client on console-fra.rpki-client.org