Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: jhrNwKOKiA6m8UKLNkpkLv9GWmRhB/J2IkseeJX9nqQ=
Subject key identifier: F0:D2:9B:2D:E1:17:54:B3:BC:E1:FE:84:19:90:96:BF:5E:6A:F4:FB
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 019366A0FFD83556DE635448ABAE2B4ED4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 04:00:47 +0000
Manifest this update: Tue 26 Nov 2024 04:00:47 +0000
Manifest next update: Wed 27 Nov 2024 04:00:47 +0000
Files and hashes: 1: 5N3mMfZ7p9Hlz-2Wf4_fC62WzO8.roa (hash: wulJ4WyhP9C0sVmFJlUPDLYFVgxV3AJ/dkKG9LWwfUA=)
2: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: 7/7PG8ER1Jb67+AhmRY6PjTRD69o9c6dJTXf3N5XwtI=)
3: jKCpd047w1lM3s94zFFZRK-0RQU.roa (hash: Ns47IBkAW4gtifMLRt255ammlTRdSm2nlb/8qWxwI7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:66:a0:ff:d8:35:56:de:63:54:48:ab:ae:2b:4e:d4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Nov 26 04:00:47 2024 GMT
Not After : Nov 27 04:00:47 2024 GMT
Subject: CN=f0d29b2de11754b3bce1fe84199096bf5e6af4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:80:c0:aa:66:5d:45:a9:46:e1:b3:13:6b:
b3:7b:ec:fa:a9:d6:20:a9:bf:b6:2d:17:42:c8:26:
98:63:48:d4:cd:7c:19:f7:37:58:5d:c1:1c:e3:c0:
a6:24:11:d3:04:d5:d0:c0:0f:fc:6b:0d:bf:38:a7:
a4:67:ef:55:f7:87:83:63:61:90:31:cb:70:6a:f4:
c8:77:00:46:dc:80:49:7d:01:7d:b5:39:4d:f9:39:
3b:4c:71:cf:68:82:58:8f:f1:6d:d4:4d:cc:d5:e8:
5e:cb:45:5b:d3:a6:63:be:bf:c6:30:7c:14:38:95:
56:a6:4d:a3:0c:30:dd:8e:9f:a4:72:af:a6:b7:77:
96:30:20:df:33:29:7c:20:d4:91:67:da:49:7b:0f:
ae:a1:ca:f2:a2:c5:e0:ab:0f:34:29:d4:87:c6:e7:
25:d2:89:19:32:81:6e:3e:d8:84:1a:ea:4c:da:cb:
f7:53:6e:54:e5:a4:bc:e8:93:a1:ca:e9:44:ae:32:
fe:ab:28:db:77:26:05:a7:49:3b:ae:a9:ca:86:21:
a8:43:dd:7c:6f:a5:29:c5:ab:bf:19:76:1c:0c:09:
3c:f5:0d:20:16:1d:ab:06:c2:26:a9:a9:13:3e:34:
6a:34:eb:cf:84:67:af:98:5f:e4:9a:e6:80:d7:72:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D2:9B:2D:E1:17:54:B3:BC:E1:FE:84:19:90:96:BF:5E:6A:F4:FB
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c3:d9:d8:9d:ac:1d:e6:bb:55:60:ed:82:5d:45:53:58:0a:
37:4e:f6:f1:fd:84:cf:50:45:be:94:72:be:c7:a6:04:2d:f3:
fa:1d:f5:06:9b:ce:65:f1:6d:94:84:13:0a:8c:01:3c:1c:2d:
ed:6d:d9:83:e3:50:a0:47:34:09:94:1c:36:f1:1d:e5:a6:29:
57:cc:83:a6:c3:e6:c6:d3:7e:27:33:84:87:11:12:4b:60:c8:
ec:fd:42:b1:0d:d9:a6:60:d6:9b:c0:79:30:24:5a:e4:dd:a3:
7e:c5:34:fa:4a:fd:58:3c:7b:bf:56:8d:0c:cf:2a:62:aa:d3:
d1:25:a6:97:4b:ad:5c:0a:d3:e3:0a:92:67:98:e0:ae:c7:b1:
6f:99:9d:1a:b3:02:29:76:90:e0:96:e0:13:e9:1e:50:15:00:
b4:d5:47:27:0b:16:0d:1b:23:9e:ea:52:e0:f5:aa:cb:4d:d1:
d2:1f:54:83:73:18:2f:be:f5:aa:15:b4:68:6e:63:49:de:d7:
eb:d7:c6:7d:58:b0:c5:dc:59:99:2a:42:5c:29:bb:f5:5b:24:
84:4c:60:01:79:3c:da:fb:e1:bf:23:4f:20:88:b3:2b:37:f0:
63:2f:c4:72:03:37:b6:09:66:28:6b:70:16:09:c9:b0:1c:cc:
89:81:99:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:22:48 2024 by rpki-client on console-fra.rpki-client.org