Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: E06DTvvQf/E3nmfimjyOqra8YKl1hA2ImpXwXAbXJyY=
Subject key identifier: 66:1D:A9:AB:55:54:14:43:9A:4E:A4:E0:35:3A:9B:CB:31:15:7D:EE
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 019354635DF007D16A35D7E0078483CA2F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 0D46
Signing time: Fri 22 Nov 2024 15:00:18 +0000
Manifest this update: Fri 22 Nov 2024 15:00:18 +0000
Manifest next update: Sat 23 Nov 2024 15:00:18 +0000
Files and hashes: 1: 12E7PqydxFh9KwT4tgZnXMta3mE.roa (hash: dm/j8aiZlQJBJXSACwN/Sm0Ao6QEA4ezS/5CGp1HZ3Q=)
2: TyljrI7P1POzzAPinv5P6fiHjV8.roa (hash: Andax49dUFtUCUdyYyaydkWk6xK/fM+zdDRygtpiikc=)
3: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: DkKDCDkxEmpqfMKIG40Bep7NsP5MGYpU38D22vJlH2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:63:5d:f0:07:d1:6a:35:d7:e0:07:84:83:ca:2f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Nov 22 15:00:18 2024 GMT
Not After : Nov 23 15:00:18 2024 GMT
Subject: CN=661da9ab555414439a4ea4e0353a9bcb31157dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:b2:f2:0e:0c:94:4d:e4:54:61:06:37:50:
16:76:b1:bc:0d:d4:98:81:ad:a2:1d:59:ac:43:6d:
d4:da:ef:1e:36:77:20:22:bc:6f:84:b2:62:39:80:
16:01:08:90:90:72:ea:3d:3b:84:f4:b2:0f:8a:7e:
e7:18:b3:e3:29:07:c7:ed:e9:e3:f7:99:12:96:0e:
b9:1f:39:a4:94:9e:33:c7:37:b1:3b:9b:08:ae:c4:
67:8f:91:ae:d0:19:0e:02:93:fc:9d:30:e8:a9:29:
d7:c0:f6:96:cb:ab:4b:49:bc:9c:80:f6:ac:40:2c:
cc:fc:15:14:79:45:10:79:ae:b0:64:02:c3:fb:8b:
5a:b8:a7:23:b8:0a:73:47:cc:05:9e:37:3c:6f:4c:
0c:f5:87:25:d9:71:22:94:08:bc:81:4c:2e:79:21:
7f:44:36:ba:b0:1c:c6:13:d4:49:1a:0c:9a:35:b7:
a0:61:28:e2:90:c0:ca:ee:b3:54:b3:f2:49:fa:57:
1f:bb:38:0a:c4:7f:f1:ac:8e:12:fb:a3:9c:a1:71:
04:f5:ad:ca:b0:fa:68:a6:b9:5b:f7:ef:a2:b3:a1:
31:6a:c5:ce:ee:09:ed:77:14:2c:b4:a5:e9:28:ab:
07:e1:09:bf:8e:dd:7e:0d:10:8a:9c:39:dc:11:76:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1D:A9:AB:55:54:14:43:9A:4E:A4:E0:35:3A:9B:CB:31:15:7D:EE
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5e:4c:4c:a0:c8:2f:7e:9b:1f:e9:fd:47:74:de:b9:85:30:
36:17:0b:79:83:ee:ef:22:d1:01:bb:6f:92:19:b2:59:46:47:
32:bd:ed:c7:2b:23:42:d2:e3:5b:d6:f7:ef:53:0b:ba:48:f0:
f4:ec:26:75:60:7f:2e:6a:cc:b5:2b:27:e5:80:78:75:0a:24:
d6:b5:5c:7b:a7:e2:9c:20:f0:f8:5f:fe:a7:70:4c:94:b8:92:
25:0f:99:5d:74:69:b4:9c:cc:b5:b7:bd:02:64:d4:71:95:3a:
08:f5:bd:12:1a:9c:45:12:06:05:59:d1:1d:a8:d4:2d:ed:96:
3c:31:7d:23:b9:34:1b:73:b6:7f:ae:60:e5:13:50:63:c1:86:
03:45:f3:a0:94:bd:a2:e6:ac:22:89:bc:3d:af:4e:03:37:e1:
53:e6:e8:e5:a1:5d:2c:21:19:05:25:43:5d:80:8b:93:09:ee:
86:22:48:36:42:60:bb:6b:38:0b:48:ca:12:d4:9f:e5:37:b4:
21:8e:de:61:7f:3b:e6:e5:22:78:6d:19:ef:fe:44:88:49:b2:
5e:b6:2e:22:da:ed:3e:4f:02:73:d2:01:f6:93:62:d5:cb:f1:
bf:02:8e:72:5c:be:f9:04:40:f4:7c:99:0f:fd:7e:c0:92:18:
3d:26:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:20 2024 by rpki-client on console-fra.rpki-client.org