Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: bnfeLkOdiQLaJY4seLmx8xp0HSsnaWYeTdOuLFtcGHM=
Subject key identifier: 7B:87:AD:5F:0C:7D:A5:C6:37:55:CE:49:8D:D9:62:AD:49:B1:3B:0D
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 0193512BFB1209D688A11A1AE600C8F1F65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 12FE
Signing time: Fri 22 Nov 2024 00:00:57 +0000
Manifest this update: Fri 22 Nov 2024 00:00:57 +0000
Manifest next update: Sat 23 Nov 2024 00:00:57 +0000
Files and hashes: 1: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: m+HmAJ6MXN46qwdWc965GaKJ08vSbibzFa9SWYbl5gc=)
2: zST73UVMK8qbVN32zGpvksisvRA.roa (hash: 6JcZcaAUOEHbE46wpUNJdsI7Mq2PcUfctkREnhLUapU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:fb:12:09:d6:88:a1:1a:1a:e6:00:c8:f1:f6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Nov 22 00:00:57 2024 GMT
Not After : Nov 23 00:00:57 2024 GMT
Subject: CN=7b87ad5f0c7da5c63755ce498dd962ad49b13b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:ee:8b:7d:9c:c7:90:b0:c0:81:4b:e6:7c:
7f:b4:29:ad:ee:54:d9:01:38:9d:39:86:bd:53:aa:
43:54:4a:4d:ab:89:61:02:7f:65:11:fd:77:f7:99:
1b:08:d9:f5:06:68:6a:0e:6c:e8:67:e9:4f:f6:2a:
91:a6:e8:9d:24:8a:14:de:40:08:b2:e1:24:6f:5b:
cd:d5:e7:4a:ad:5e:c7:9a:11:31:5b:25:ea:4a:38:
59:00:92:0c:b3:96:fc:02:0d:d3:f8:ff:c0:54:f2:
b2:0a:6b:72:84:a3:5c:25:43:89:41:02:e0:91:66:
68:d3:45:1a:3d:71:8b:cf:08:7f:10:1d:e3:94:c2:
b1:e3:25:58:6f:94:c4:28:06:ba:e1:a8:2a:91:95:
a1:a0:0b:fc:bf:3f:2a:2a:2e:ac:88:4b:be:6b:d4:
0b:05:42:25:b6:1c:c9:5d:28:c2:e3:58:49:a7:ca:
c1:5b:09:2a:6f:fc:f3:92:92:a8:bc:c0:8e:16:95:
13:df:c9:9c:53:db:37:1a:bf:e8:a6:fa:51:52:4f:
2b:fa:d0:3e:5f:20:e1:44:f3:cf:89:51:20:45:c4:
d5:ab:1d:a4:2a:ee:8a:8d:a8:56:3e:f9:58:b4:6c:
0f:6b:f7:0f:13:d6:93:48:4c:f9:57:17:f6:93:c8:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:87:AD:5F:0C:7D:A5:C6:37:55:CE:49:8D:D9:62:AD:49:B1:3B:0D
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:08:e2:b0:82:87:3e:59:a3:97:e4:25:ea:ef:df:6f:41:b4:
6f:6d:a2:bd:ff:7a:d4:09:5e:b9:89:c7:bd:79:e7:c2:6f:51:
34:22:7f:fa:35:98:3e:ad:2f:d8:52:20:c0:e2:36:e7:f5:09:
fe:fd:53:65:57:41:bf:d5:fe:d8:b8:67:a1:3e:fc:d9:60:2d:
60:84:07:63:dc:31:42:1c:94:ca:33:0b:bf:14:27:c9:a1:55:
65:fc:26:83:9c:12:59:b2:2d:3d:4a:4c:61:b9:09:39:96:06:
24:79:55:44:7a:d8:99:3c:ac:36:5f:60:3b:08:e7:e0:53:cf:
89:e2:f9:e7:49:b0:98:43:0e:f2:d0:6b:6b:8b:aa:33:20:84:
35:4d:48:b8:f4:f9:35:b0:f7:e9:26:ba:68:80:55:12:3b:88:
be:5c:3c:c6:1d:ce:99:aa:38:d2:ba:97:d9:f6:88:16:79:7a:
71:f8:18:88:19:91:c1:1e:1c:1c:68:44:11:ae:58:35:d5:38:
2e:4a:98:83:86:07:d4:aa:0a:c3:38:67:3d:7e:9a:64:7f:e1:
0e:c1:70:15:d7:76:90:be:9e:10:50:29:09:28:72:9e:4a:97:
1c:8b:20:4f:fd:31:be:2d:b4:3b:22:9c:af:b7:31:ef:81:9f:
17:af:29:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:25 2024 by rpki-client on console-fra.rpki-client.org