Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json)
Hash identifier: yZXLtyRyDQIUiaNOHCstkKu8H1oJwzmi0VulN7wKIII=
Subject key identifier: CA:37:63:84:CE:ED:1A:BA:A9:52:55:37:9B:FA:BF:92:32:B9:F1:42
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 019355E4644E87DBDA0B5D43D036580EF7FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 22:00:51 +0000
Manifest this update: Fri 22 Nov 2024 22:00:51 +0000
Manifest next update: Sat 23 Nov 2024 22:00:51 +0000
Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: 6nzD5yzcqbhERpV6pKVmVT/Ht2gOOVacvTiVA2PYBxY=)
2: abO0AnlXa0JfatT8MLBDygpfHJY.roa (hash: e2ovSDXC/WbbCatunUN2NwyvbYsJQ02CWhLNp1IxiWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:64:4e:87:db:da:0b:5d:43:d0:36:58:0e:f7:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: Nov 22 22:00:51 2024 GMT
Not After : Nov 23 22:00:51 2024 GMT
Subject: CN=ca376384ceed1abaa95255379bfabf9232b9f142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:56:c5:10:84:cc:b7:e9:41:8f:14:c1:e3:
62:5b:3d:d5:20:ee:52:91:59:97:fe:f7:0a:3d:fa:
f6:92:28:17:e7:df:be:cc:c6:23:5a:63:ba:70:a4:
4a:e8:ff:7f:2a:21:35:32:d8:44:d6:6b:a3:c9:6f:
91:d2:fb:84:41:aa:50:fe:e1:58:2e:c0:fc:a0:40:
25:85:61:02:16:19:e0:6c:11:c1:64:77:b8:4c:46:
d3:b2:6c:a4:aa:46:ca:ac:02:25:d0:13:96:59:14:
b2:94:45:34:c1:50:2d:3b:ae:48:be:31:7c:a0:8e:
f3:a1:51:97:d3:11:b0:f9:d0:d3:ec:1a:01:36:00:
6d:ae:9d:52:d5:7e:c2:32:01:f6:4c:53:da:17:75:
4f:ee:11:cf:11:f8:91:62:9d:b8:eb:97:aa:8f:83:
cd:2d:6d:03:88:4b:c9:9a:18:88:e9:2d:49:94:ce:
7a:89:8b:3c:ef:23:96:69:b6:48:c3:f0:21:61:88:
30:5d:73:ed:06:39:62:9a:c2:14:cc:44:0b:6d:ce:
ea:d2:b7:4e:21:bb:05:f8:34:5f:3f:e2:ed:b0:a1:
20:2d:80:e0:00:f0:de:b4:3f:43:f1:b3:5b:49:c6:
bd:a4:2e:7e:66:a9:81:c4:58:40:fb:d5:7e:34:dd:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:63:84:CE:ED:1A:BA:A9:52:55:37:9B:FA:BF:92:32:B9:F1:42
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:eb:b8:4b:3a:43:95:71:3d:1c:eb:6e:1f:8d:51:18:4d:7c:
e9:0b:e2:ae:a0:e5:0d:f6:bb:65:c4:dd:87:f0:75:69:d1:9f:
a4:00:02:25:c5:09:16:82:e6:e2:7b:e3:17:c2:58:3e:82:7a:
53:a9:bd:58:a9:c7:6d:7f:ef:53:0e:56:78:2d:4f:e0:b0:b3:
c3:21:16:80:ff:e3:a1:77:45:f2:19:87:b3:4c:7a:4f:fc:3c:
63:ae:88:02:fc:98:e6:e4:44:ba:13:d4:a3:14:b9:13:8d:4c:
e7:fd:66:5b:24:6a:25:b5:fb:fd:ce:c3:28:f7:45:2b:21:43:
24:6a:79:c1:16:af:82:cc:e0:4e:9b:cc:dc:e8:ed:d4:3f:94:
59:ea:65:40:aa:69:2c:77:80:a9:47:56:92:53:bf:cc:16:81:
c0:3b:75:e6:8e:6d:d3:63:4d:2d:c1:97:7c:09:f1:c1:5a:8f:
e1:cc:c6:1d:c4:10:e8:f9:e2:61:9e:f1:e2:dd:f8:62:d1:77:
b3:1c:89:64:05:61:e8:21:59:0b:5f:6f:b5:ab:49:28:7f:19:
ad:c1:3c:a9:0f:5c:bf:da:fd:c5:5a:40:e5:f6:00:8f:f2:a5:
4c:e2:3e:ef:1e:ba:75:6e:b6:f3:22:b7:e9:66:cb:18:0b:64:
7d:92:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:46 2024 by rpki-client on console-fra.rpki-client.org