Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: gTPCTjR2fPgyHIKQmPvbtkvfj/X93/Jtof4L8NckbZw=
Subject key identifier: AC:62:65:E8:0E:38:9B:7B:D6:5D:54:8D:96:5E:D1:78:A8:19:5E:3F
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 019352AE2D76B3EC5E9560EF628A5DBA1975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 0A55
Signing time: Fri 22 Nov 2024 07:02:46 +0000
Manifest this update: Fri 22 Nov 2024 07:02:46 +0000
Manifest next update: Sat 23 Nov 2024 07:02:46 +0000
Files and hashes: 1: 5ytILKPJIJOlHUDq7m-vLGG036I.roa (hash: ZUpMnIThWL3f76Wo38IALkRNAHdjP7I+Q8IYffxTWFg=)
2: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: UJYr6Gm2W2sZ+gU3bbW5G0aINArsbOVzNVgHA+q190E=)
3: tk-xDWVwP48OSy2bGRBUFTGFRDU.roa (hash: tcA+GoIWTFyS/zUQCyP/CEepVf6wevf89cmY2JtxDog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ae:2d:76:b3:ec:5e:95:60:ef:62:8a:5d:ba:19:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Nov 22 07:02:46 2024 GMT
Not After : Nov 23 07:02:46 2024 GMT
Subject: CN=ac6265e80e389b7bd65d548d965ed178a8195e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:ef:9d:e0:bb:e6:41:e2:65:78:0a:2c:9c:
c5:13:4d:78:89:8d:91:76:0c:e0:7a:3c:80:6e:81:
57:d6:ee:95:0b:c7:f0:bd:83:bd:b6:22:c1:0f:94:
9c:e4:1d:56:06:a3:94:fc:79:eb:b2:35:11:f0:4f:
71:33:19:68:9b:d2:13:af:80:81:0b:7a:cd:db:38:
27:c4:6a:36:2a:59:03:75:ac:88:6e:37:cc:e7:05:
0b:4c:5c:b4:fa:f4:81:6d:da:40:63:df:70:29:2c:
b4:b9:73:0a:3e:30:6a:75:24:66:02:ad:11:1f:b2:
b5:f1:92:58:09:57:54:91:0c:fc:fb:50:ff:90:67:
c8:fd:f5:76:0c:7c:fe:6a:fe:a1:34:a5:34:23:5c:
3c:16:7d:bb:f1:75:71:07:f2:1c:de:cf:9d:09:bc:
9e:9d:7f:aa:2d:cd:e8:0f:64:c8:fe:9a:22:20:75:
50:09:59:55:c1:d5:ef:21:e7:27:ca:24:df:78:82:
2f:45:2e:95:bd:5e:ac:e2:2e:c8:ee:9b:74:ab:bb:
d9:f9:c6:6e:3a:2d:97:7b:4c:58:f8:ce:2f:86:f6:
79:6f:a0:21:b9:66:ae:e8:79:f7:b0:63:be:e8:2c:
75:12:04:a4:e8:d5:b4:79:99:80:30:3a:53:b7:d9:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:65:E8:0E:38:9B:7B:D6:5D:54:8D:96:5E:D1:78:A8:19:5E:3F
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8b:aa:73:f5:d9:cb:a0:c8:31:70:4e:5f:10:63:ee:e6:67:
7d:ea:34:e1:f3:bf:c5:bb:53:48:6d:4c:6f:63:f3:57:6f:c0:
d3:3f:f5:ab:a2:22:89:85:54:13:0e:1f:46:0a:16:2e:9b:2d:
14:e8:0d:5c:da:9d:0f:77:36:38:bf:1d:34:5c:05:2f:b9:9e:
90:a4:ff:20:57:e8:a3:a0:be:7f:8e:cb:0f:f5:e0:03:e7:e9:
4e:c6:57:b0:1d:de:46:f5:36:41:52:6d:f9:a8:fd:9a:d9:81:
bf:72:4e:9e:9c:61:16:85:7a:c0:93:19:7b:d1:d7:02:cf:eb:
e4:ef:a3:21:df:23:85:e3:7f:61:f0:63:c5:c6:9b:17:94:58:
ab:1d:26:b8:93:f6:62:78:ad:94:cf:ed:ff:6f:5c:9a:e3:de:
5a:e8:88:e5:33:dc:da:b1:3d:14:0e:17:69:59:f3:12:73:74:
f6:52:20:5f:b1:71:ae:ef:d4:92:14:77:49:96:61:14:89:c8:
25:58:fb:ad:55:fc:6b:4b:2c:1c:5f:60:fe:98:a3:63:e2:87:
75:df:9f:46:1d:45:f4:d9:1a:b6:2b:d2:84:92:0c:53:0d:7f:
5d:14:e7:69:93:63:ba:8f:ad:c8:bf:0d:d6:0b:49:f5:4d:63:
88:16:9d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:42 2024 by rpki-client on console-fra.rpki-client.org