Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: c4pIaM+J2z9vNsQK7HA7L0pVqFyafvJFkvnOeD+VpxY=
Subject key identifier: 38:10:42:6B:32:C3:B4:8A:FE:2C:C4:4F:F9:3D:13:72:5E:73:AB:BA
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 01935688A235303691012D0621F83039D892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 10AB
Signing time: Sat 23 Nov 2024 01:00:15 +0000
Manifest this update: Sat 23 Nov 2024 01:00:15 +0000
Manifest next update: Sun 24 Nov 2024 01:00:15 +0000
Files and hashes: 1: 8tvwSoXshXxpQ0Tm1A2jQJc_Eeg.roa (hash: pw2wxdd/JQ81qWsJZfKwhogxUt8NNvCukQtn3rD0Ewg=)
2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: OFyrF05tCI6uWFHD3pP1c1Ys8aNhi1cmdFGOsxOQ+II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:a2:35:30:36:91:01:2d:06:21:f8:30:39:d8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Nov 23 01:00:15 2024 GMT
Not After : Nov 24 01:00:15 2024 GMT
Subject: CN=3810426b32c3b48afe2cc44ff93d13725e73abba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:8a:e8:04:8c:a8:75:77:fb:95:cc:5d:ba:
4b:19:23:97:57:d1:d1:1d:cb:e7:65:f3:24:30:39:
35:43:02:09:76:08:5d:c5:3f:d5:8d:1a:4a:f2:c6:
82:0c:1b:a7:1d:b2:f9:33:d4:ea:43:b1:18:4a:d6:
49:0b:a7:5b:60:b5:5d:29:f8:b3:af:b0:31:75:73:
a4:cc:43:85:22:d9:21:c3:87:5a:ff:d3:e6:c2:ed:
7d:90:93:f8:4c:ce:73:fd:3a:f5:30:a5:a5:71:9b:
24:e4:ef:e6:2d:39:0a:b9:47:8f:ef:92:e1:32:be:
ca:54:b2:d0:21:b7:f7:94:ae:d4:53:95:f6:81:4a:
ed:17:0f:73:dd:87:4c:0e:bf:d2:74:1d:62:1f:21:
66:ae:ec:34:ae:61:87:89:89:02:0f:a5:20:3d:56:
fe:d3:29:77:ed:08:09:9f:b4:06:2d:59:b2:cb:90:
8f:dd:7c:c0:e9:a5:f9:46:99:fc:7e:32:1a:88:5f:
b7:15:a7:9b:d4:57:d9:af:57:78:74:86:d1:7e:d9:
21:0a:e0:0e:5c:bc:ff:87:9d:27:89:c6:12:eb:49:
56:df:c0:24:0f:e8:b8:ad:33:d8:7b:1e:30:44:f2:
d9:f8:a2:ef:bb:43:5d:62:15:29:6b:97:31:b9:4a:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:10:42:6B:32:C3:B4:8A:FE:2C:C4:4F:F9:3D:13:72:5E:73:AB:BA
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:69:b5:2f:0f:62:4b:10:19:31:57:23:b5:5b:7d:51:fd:96:
ad:47:79:9e:79:23:26:50:86:32:e3:ad:78:6c:ed:e3:2a:15:
3c:0d:66:22:8c:5c:31:aa:76:8a:e6:cf:ef:e3:1c:de:91:7a:
ab:4a:92:93:8f:0f:e9:fe:8b:f3:3c:f4:76:0e:36:fb:04:b7:
d5:a1:87:a4:c0:48:29:f2:17:45:a0:35:fe:38:02:cb:49:db:
4c:5f:e6:e6:a4:88:5f:ab:06:0b:ec:37:30:77:5f:b7:4b:7f:
c7:bd:6d:9c:70:25:98:16:87:72:75:f5:b7:87:86:84:9b:bd:
b5:59:ee:83:0f:0a:ae:43:98:88:50:ff:8a:4d:44:64:f3:2b:
bb:4f:83:9d:01:f1:c7:9b:45:c5:ff:9f:d6:72:30:1b:4c:37:
44:b3:97:4a:8d:bf:7f:69:c1:77:be:86:1a:b5:ab:16:a3:20:
40:3a:2c:bb:ca:38:2b:fc:ca:c3:a6:e1:9c:8a:ab:76:18:cb:
14:ee:6c:40:df:85:8f:bb:ad:f5:08:5a:5a:70:e2:5e:ed:f7:
a9:db:e4:f3:90:cb:25:7a:ff:6d:17:43:93:2a:49:08:59:54:
17:b8:e1:aa:ff:ce:f7:0e:13:9e:c2:e3:6b:b9:bf:e0:f3:2c:
2b:76:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:29 2024 by rpki-client on console-ams.rpki-client.org