Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
File: 95d69YDIUMyL-QZJ-b2opqSL85Y.mft (raw, json)
Hash identifier: Fe/KqYGQM1lQempumqTcdeLx5PCVWVkb/Ih1LTYWllg=
Subject key identifier: A3:71:EE:34:32:DF:4F:25:5C:37:CE:27:AD:C5:DE:61:97:59:6D:04
Authority key identifier: F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
Certificate issuer: /CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Certificate serial: 0193628CFEE73967CE99E8CADA466B5420AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
Manifest number: 09FA
Signing time: Mon 25 Nov 2024 09:00:27 +0000
Manifest this update: Mon 25 Nov 2024 09:00:27 +0000
Manifest next update: Tue 26 Nov 2024 09:00:27 +0000
Files and hashes: 1: 95d69YDIUMyL-QZJ-b2opqSL85Y.crl (hash: MGNwdW5GV1/avYLcSg9bUipS7wgYmSh6n2BG6XE+GkI=)
2: gG-lPQ622H10sfCL0qaPUkC3QYk.roa (hash: 5W8Zqrn9h3WK+YXGuS6JIHv25u2N6ndUsblb647vuA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:8c:fe:e7:39:67:ce:99:e8:ca:da:46:6b:54:20:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7977af580c850cc8bf90649f9bda8a6a48bf396
Validity
Not Before: Nov 25 09:00:27 2024 GMT
Not After : Nov 26 09:00:27 2024 GMT
Subject: CN=a371ee3432df4f255c37ce27adc5de6197596d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:aa:18:a3:aa:7f:25:0f:71:3a:44:7d:8a:
3c:79:0f:e8:87:4f:68:f5:9c:b7:9c:d0:d4:03:e1:
8e:57:46:b3:48:f6:b2:94:01:b5:c8:bb:38:1d:09:
a0:e5:94:a6:80:2f:eb:2a:81:da:97:b3:0b:94:23:
a1:6f:6d:9a:bf:4d:04:ee:a4:d7:88:33:79:9b:b5:
87:32:e0:16:13:ab:0c:a4:7d:79:c5:68:5e:63:1c:
39:91:03:09:26:6f:20:d2:e4:21:59:09:04:fa:72:
7f:92:aa:67:5d:2c:ff:06:34:1b:49:d7:b3:41:91:
2f:5d:cf:ed:1b:58:91:23:a7:e0:8c:ff:d2:e5:df:
21:21:f2:5c:e1:e1:89:2d:38:f4:50:a5:c9:3a:e4:
4b:f4:72:57:80:8d:a1:fe:c7:83:1e:9f:75:5b:f0:
21:b0:cd:4e:9e:cc:af:b1:22:2d:a6:be:51:79:90:
94:5a:1d:4e:96:12:83:18:83:1d:fc:a6:ad:f8:90:
69:d8:0a:89:41:db:ed:a7:dc:14:a2:50:32:3e:80:
34:e7:ac:e0:7c:2e:fc:12:ee:07:d4:97:cb:c7:3d:
1d:8f:be:b8:82:2c:e7:5e:0d:89:76:05:09:2d:3c:
42:e8:5a:12:6a:b2:65:15:69:f4:ba:7c:6e:85:fd:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:71:EE:34:32:DF:4F:25:5C:37:CE:27:AD:C5:DE:61:97:59:6D:04
X509v3 Authority Key Identifier:
keyid:F7:97:7A:F5:80:C8:50:CC:8B:F9:06:49:F9:BD:A8:A6:A4:8B:F3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95d69YDIUMyL-QZJ-b2opqSL85Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b361ef-5f69-4bcb-983c-21128027255d/1/95d69YDIUMyL-QZJ-b2opqSL85Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:69:86:27:2d:a5:a9:d2:ce:ad:72:06:9d:33:3f:57:10:d5:
c8:3c:ec:49:14:db:6a:67:59:a2:1b:7b:35:dc:55:98:fa:9e:
50:da:e1:aa:5a:a8:ba:de:40:55:34:02:1a:60:39:70:24:b8:
f3:41:bb:12:e3:79:0f:03:1f:87:76:47:cb:1a:f1:2e:ee:14:
e3:29:74:ef:0a:ce:b8:a9:aa:73:40:0b:a8:b7:10:1e:f8:12:
78:c2:49:72:66:d9:b4:da:d7:eb:9f:c2:1b:8b:2b:4e:a3:a3:
3c:24:98:72:7d:84:ac:e9:15:31:f3:42:26:2c:a5:13:ff:d2:
e9:10:d8:10:66:d8:23:ed:a8:15:5e:f1:e5:68:df:95:b7:6d:
5c:dc:a0:67:54:31:82:15:5b:ce:df:f3:ce:4c:92:2b:66:86:
c7:61:84:46:b2:a2:97:07:da:9a:2b:c0:4a:62:18:d2:d7:1c:
61:60:76:c0:10:64:09:17:07:66:76:e0:3b:2b:9c:79:49:1b:
33:c5:43:b9:fa:a5:dc:6c:9d:d3:2f:35:79:f4:36:55:1e:d2:
4c:55:45:cf:6e:ad:91:22:19:94:bd:d1:b4:e8:ba:f0:9a:9b:
31:7a:e2:77:03:63:35:b0:7f:5b:31:89:f9:9b:45:f3:46:8d:
9c:d2:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:28:05 2024 by rpki-client on console-ams.rpki-client.org