Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: qApUtC5SjnAuqpril/t7GUtjonmqIIczdSC1QiHsJjc=
Subject key identifier: CA:CD:6C:EA:F9:76:55:7E:1B:FB:47:E3:BD:4C:C7:9E:21:81:DD:DC
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 019357BFD75BD058B9595240EDFC44E2CE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 06:40:10 +0000
Manifest this update: Sat 23 Nov 2024 06:40:10 +0000
Manifest next update: Sun 24 Nov 2024 06:40:10 +0000
Files and hashes: 1: 1-dUivgw5crs8Aawyl4n51c8PFtA.roa (hash: S5Ni4aWLoBTETsBT5mhDSOVIopfHPNFH7kl8H27iHFU=)
2: OytA-ktR8slmDjfNkwaYkl67UAU.roa (hash: 7dHplGKA/Nhwb6J5ZPwWO7E5k9f9kIV0Xjmnlsir080=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: V1UH+BruCyCkp7louCA+oIF3d3TkNUjXCednJetN/y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:bf:d7:5b:d0:58:b9:59:52:40:ed:fc:44:e2:ce:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Nov 23 06:40:10 2024 GMT
Not After : Nov 24 06:40:10 2024 GMT
Subject: CN=cacd6ceaf976557e1bfb47e3bd4cc79e2181dddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:f1:b5:18:01:73:7b:55:f7:aa:19:0b:7c:
57:58:96:a3:00:da:f6:bb:a3:14:72:f0:73:26:f1:
a6:6b:50:2d:94:10:f9:2d:a2:f4:a0:b2:5f:c9:65:
61:7d:58:bc:23:da:11:81:90:0f:bd:c8:9d:0e:d0:
90:f4:6c:fb:37:0b:30:ee:88:91:85:54:db:ff:13:
00:35:58:25:3a:c9:b4:88:85:e2:0f:c1:07:cb:b7:
37:09:92:6f:56:95:3c:9e:4c:57:e2:16:e4:eb:e1:
03:b8:e9:56:a3:e6:1a:2a:7a:c1:ba:d0:a2:13:91:
8c:ec:f1:2a:34:d1:7d:41:eb:06:a9:24:c5:c8:1c:
d4:f5:8a:c1:95:b8:51:58:9b:bd:91:51:be:7d:07:
d6:b1:87:2d:81:11:48:2e:60:aa:17:eb:d0:27:23:
33:ed:c0:24:91:69:95:fd:08:31:45:1c:2f:ee:dd:
a8:67:f1:55:d6:34:f1:78:1e:7b:92:bf:dc:15:53:
35:1e:57:33:b6:09:05:8c:4e:50:0a:ec:16:cc:39:
6f:3a:99:c9:67:fa:3e:36:40:59:45:b0:7e:27:93:
ea:a0:c0:32:59:d8:e5:8b:9e:50:e6:4b:ac:01:aa:
29:dc:66:d1:9d:e9:fc:4f:e3:17:e9:c8:a6:8c:06:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CD:6C:EA:F9:76:55:7E:1B:FB:47:E3:BD:4C:C7:9E:21:81:DD:DC
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3a:28:ad:ee:6f:b5:a1:e5:a2:d1:9d:55:e9:f4:e5:3f:51:
67:8d:33:7a:3c:80:0c:25:3d:78:6b:21:b1:cf:02:51:e8:45:
de:68:a6:80:d4:b1:0d:61:ec:05:a3:54:c3:be:fa:4a:5c:d0:
59:9b:6d:5f:7a:15:2c:b5:a8:3e:34:a1:7c:55:ae:e3:3d:c7:
bc:ae:92:d1:39:47:76:27:61:69:73:08:c2:bd:fd:1e:1b:2b:
d0:a5:0b:4f:9d:6b:18:d3:7c:2c:5a:4d:66:36:f5:02:62:14:
8c:92:76:9e:ea:ac:e4:71:03:a2:54:69:ec:63:bf:8d:b4:97:
24:9e:c2:e7:7e:10:97:7f:a6:29:27:d4:ad:34:42:db:49:5e:
76:07:e8:3e:8c:dc:92:c3:6b:ef:0e:a0:ed:22:1a:ac:c1:d7:
55:d4:6d:96:73:31:25:97:da:e1:5d:84:53:16:ee:2b:4e:72:
3d:d4:35:2e:99:f1:24:1b:f1:0d:ed:34:1c:bc:8e:d5:d8:bf:
f0:94:de:05:2c:c4:9b:51:aa:cf:9c:90:f1:a5:cc:6f:47:69:
fa:61:e9:f0:43:e9:91:83:3e:d9:90:ca:4c:76:31:e0:c3:73:
ba:84:1c:e0:88:c5:2c:cf:83:36:1e:1c:9e:b9:60:0a:39:a4:
ea:fd:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:19 2024 by rpki-client on console-fra.rpki-client.org