Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: njdOSB2UkdwdiGpAKAdjwo03LCIVx4lpNKg+ZAmeH4Q=
Subject key identifier: 88:DD:BE:CF:83:2C:55:3C:E2:1A:01:4C:1E:AE:DD:C4:AF:61:3F:00
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 0193572DFE867511BB09A1EF4BA86B7F9230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0667
Signing time: Sat 23 Nov 2024 04:00:52 +0000
Manifest this update: Sat 23 Nov 2024 04:00:52 +0000
Manifest next update: Sun 24 Nov 2024 04:00:52 +0000
Files and hashes: 1: 6RGV12qitaF0K7arRuwa8l74qzg.roa (hash: CBOUzbPrQLOKj0pfTO32PtnlXVDAYnDVo6wX0yx/xGE=)
2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: CW7yKop5jB+fXRLxOoyE/mZkhw3/Wp8AFrMJa4l2/IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:fe:86:75:11:bb:09:a1:ef:4b:a8:6b:7f:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Nov 23 04:00:52 2024 GMT
Not After : Nov 24 04:00:52 2024 GMT
Subject: CN=88ddbecf832c553ce21a014c1eaeddc4af613f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:e9:68:b8:11:4a:2c:ab:8c:5a:52:35:37:
12:cb:55:99:e8:bd:04:b3:a2:6f:21:41:67:58:2c:
33:3f:1e:47:42:e7:37:16:eb:bc:3f:dc:53:08:eb:
05:b7:c1:c6:02:35:81:4e:12:64:15:20:b8:ad:66:
40:48:42:02:dc:c1:ed:17:b5:9e:7c:f2:cd:1b:94:
61:f4:b6:84:54:3b:8b:b1:cb:f0:68:a6:b0:4a:f6:
85:1e:73:65:1a:44:70:9c:69:2e:f8:cf:90:1f:8f:
84:e8:aa:69:15:53:57:cb:1e:03:97:db:71:0b:a5:
82:4d:6e:6f:5f:a0:c7:b0:fb:68:1f:a9:b7:65:fc:
ea:63:43:93:97:10:29:07:12:d6:d1:ce:d5:85:d2:
42:fb:8d:46:34:ab:52:0d:72:ca:7c:1e:b1:10:0e:
d6:5a:94:a0:cd:9e:7b:03:8a:3f:6a:38:97:98:33:
04:03:5c:e9:8b:99:8c:3a:61:37:97:c3:4c:7f:df:
33:2f:19:39:fa:a9:74:ca:86:e4:25:0a:cf:31:a6:
e2:1f:55:cd:c0:93:7a:35:ed:d2:63:63:ce:d9:f1:
4c:ae:0d:1f:93:79:7e:37:86:f5:b4:6d:53:b5:78:
a8:95:7f:a3:06:1e:6b:75:ca:99:9d:54:38:8e:6e:
7f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DD:BE:CF:83:2C:55:3C:E2:1A:01:4C:1E:AE:DD:C4:AF:61:3F:00
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3a:8a:3e:2c:30:3e:ad:7b:e5:65:34:e2:49:05:31:51:1d:
88:c5:b4:f8:b5:76:2a:3c:e6:1f:f9:76:20:e1:21:07:2e:f9:
23:ea:17:c5:df:b3:33:73:20:72:a0:89:10:af:ab:08:9b:72:
ce:03:60:9f:76:a9:1f:e4:31:ed:d9:49:08:51:47:37:b2:55:
15:87:5e:9f:9c:00:bf:96:21:37:b5:9c:4e:db:79:f0:23:f6:
b0:49:2e:3d:fb:3b:7f:07:af:ec:33:b3:5d:56:ad:5a:85:6f:
c4:4d:bb:88:14:52:1b:98:1b:56:ae:6e:fd:5f:70:b2:77:7d:
12:f3:7c:0b:00:1e:0d:b9:33:61:36:5f:39:8a:da:ac:d2:38:
44:96:d8:64:b1:59:c6:c7:12:29:cf:06:dd:90:52:eb:7f:13:
bb:26:7b:c1:f4:00:50:9f:be:1a:b8:64:09:d4:8b:27:9a:5e:
51:0b:0a:ec:2f:c1:f1:53:41:1a:cc:3c:24:9f:5a:ac:52:32:
19:28:38:3a:f2:8a:09:ae:34:3b:64:50:c6:00:e4:b2:4b:a6:
69:a7:ed:b1:97:72:fd:30:24:d0:b0:bb:75:a0:79:98:1a:62:
f9:fe:4c:60:7a:5e:84:79:eb:08:f7:0e:20:cb:df:21:b1:3e:
e1:35:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:35 2024 by rpki-client on console-fra.rpki-client.org