Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json)
Hash identifier: /Nz8dz/fZy3PAyZUVw9ZS2jiaE7F3b4UGWnPpfeSsdM=
Subject key identifier: B8:F3:5B:C4:CC:20:B6:B7:1C:97:BE:19:3F:28:06:85:E0:1E:FC:42
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial: 01938F9CB5624D06E90E4F6322B7DAA28870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
Manifest number: 1154
Signing time: Wed 04 Dec 2024 03:00:31 +0000
Manifest this update: Wed 04 Dec 2024 03:00:31 +0000
Manifest next update: Thu 05 Dec 2024 03:00:31 +0000
Files and hashes: 1: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: fBAN8KlDGFi+DgevPIdLlb/8AfOUgYTUC+Oh+K9+DbM=)
2: qtRGc0szunNYzfqSEe5aey0QvLA.roa (hash: TiusRc04aUav59i6fHZg6aYNGo/pBvKxFfgtw/WC1IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Dec 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8f:9c:b5:62:4d:06:e9:0e:4f:63:22:b7:da:a2:88:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Validity
Not Before: Dec 4 03:00:31 2024 GMT
Not After : Dec 5 03:00:31 2024 GMT
Subject: CN=b8f35bc4cc20b6b71c97be193f280685e01efc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:5f:c9:a5:1c:79:96:48:0f:39:e0:55:05:
14:e2:c3:8a:a7:5a:fa:33:ec:6b:6c:be:69:29:7e:
b2:73:a7:19:94:e7:2b:8e:76:42:a5:71:fb:f2:af:
30:d8:41:2f:cb:8b:f1:d2:c9:47:22:14:d1:94:2a:
84:ed:2e:3b:46:28:dd:a0:25:e2:ac:c7:ee:49:cc:
75:d9:17:e5:a3:c1:c3:e0:7c:1f:65:84:fa:4a:8b:
c6:3f:aa:23:83:ee:a8:63:dd:08:a2:e3:c7:c6:a8:
d5:08:a9:23:41:dd:e4:2f:a7:f8:74:b1:61:1b:d3:
b7:62:a1:e3:7e:ce:6b:65:7a:df:ae:37:e4:3c:aa:
30:76:1c:10:5f:8a:40:b3:73:05:51:33:23:f5:9f:
e5:be:19:95:d1:49:b8:09:b8:68:80:4f:5f:d0:5c:
7f:44:01:ad:21:7d:db:d7:a5:18:0a:e2:c6:64:30:
64:68:8e:46:c8:79:a5:b1:8c:05:5d:49:5c:ad:ae:
76:94:e3:a2:e2:f2:ed:ba:05:58:ab:e3:2e:ea:a4:
18:f0:fe:29:36:ef:05:b7:54:29:84:8c:c2:89:88:
94:76:68:54:90:d5:b3:bd:06:91:72:b4:95:96:66:
b3:81:c1:6e:22:22:be:00:fa:bc:ef:01:63:e8:c9:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:5B:C4:CC:20:B6:B7:1C:97:BE:19:3F:28:06:85:E0:1E:FC:42
X509v3 Authority Key Identifier:
keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ee:38:72:5c:14:46:4e:5d:34:c8:3f:c0:fc:0e:37:e3:28:
13:19:84:24:03:3a:3d:78:b0:ba:57:89:fa:99:c4:08:e0:ed:
6c:40:03:45:a3:25:2b:93:47:bd:c7:73:ed:eb:fa:ee:7c:2e:
1f:22:e0:37:2c:09:18:04:07:71:5d:75:02:68:79:bf:a6:07:
c2:5d:cb:9f:32:7c:c1:99:cc:d5:fd:9f:81:3c:54:56:5b:ae:
2f:dd:ee:65:83:0b:ec:ad:65:50:48:df:69:bc:ba:8b:fb:f4:
52:3d:05:07:04:5a:fc:16:06:4f:a7:c0:7f:2f:09:2a:79:1b:
83:01:a1:0a:1a:e1:3f:57:7c:b9:0e:d7:6e:1d:d8:df:de:1b:
4f:71:94:0b:ea:bf:3f:05:5a:dc:db:65:fc:7d:00:a5:6f:ea:
9d:33:30:ef:a7:37:4c:97:ea:4d:ee:3f:92:48:66:e1:ef:94:
7a:b8:db:c8:b8:a6:c6:86:4c:7f:22:85:87:35:5a:7b:eb:44:
7c:81:31:3a:23:92:fb:11:3b:ad:37:08:98:55:6e:84:b9:4b:
eb:b1:80:42:35:79:6a:b4:55:5c:36:c2:0b:9d:51:00:36:db:
00:db:df:0c:79:ef:73:50:2a:6d:a3:c1:ab:6c:8d:2b:69:82:
39:9e:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 08:43:27 2024 by rpki-client on console-fra.rpki-client.org