Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json)
Hash identifier: GI5AZDt/prsxq1anXRlvoJDlmzYVkV+SlyY/kANWf/k=
Subject key identifier: 83:A7:18:50:8A:00:DA:30:A8:83:18:FE:E9:2B:AA:68:5F:C0:DF:9F
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 019356BFAEB38B98A9F09CCAC0324E2F82DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 02:00:22 +0000
Manifest this update: Sat 23 Nov 2024 02:00:22 +0000
Manifest next update: Sun 24 Nov 2024 02:00:22 +0000
Files and hashes: 1: 4rZyYY8-P4q6pHCxhPr4m2Hkldc.roa (hash: uiF7oWN8lQqMtjQWB7XI7iANSSF2xj5NgI1wBPfBJjo=)
2: 6v4Gz1GZoYB2XDssgJf0sqf-hTQ.roa (hash: OD10L64xCkNqOnR+8md/1imTOb1ljgYkHwDmRxGPHas=)
3: Jk6UkY2VEtVdgUL2kzVR1EnCI60.roa (hash: NM8Feq/VyGeBqjg5MbQ8jZcHgU1E5SzOFqS3WrQwN4c=)
4: ZLXIzlXgj7BWbz-DeYwot5gFSHE.roa (hash: yxLIKl+qL0uL31esAkmi7EGnKLS2N4w04iXAMgyE7bg=)
5: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: atadIi5lrHFZykMqn8vlgzZ0fyEzZiSDMYWig+zxH8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:ae:b3:8b:98:a9:f0:9c:ca:c0:32:4e:2f:82:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Nov 23 02:00:22 2024 GMT
Not After : Nov 24 02:00:22 2024 GMT
Subject: CN=83a718508a00da30a88318fee92baa685fc0df9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0f:a9:69:7b:aa:f2:93:19:31:17:54:5c:31:
e8:d5:cf:7b:b6:c3:58:10:85:16:cf:1f:e3:03:20:
9c:9c:51:01:be:57:41:1c:c5:8a:2e:76:8d:b7:7e:
22:3a:e3:2d:3b:1b:e0:b5:30:65:07:3c:2d:f0:f7:
cd:fd:19:82:05:50:ba:3a:ff:57:de:51:cb:c2:a7:
06:36:11:68:21:93:f1:ea:80:e0:cc:13:8d:70:e1:
f1:8d:fe:b0:29:d6:d2:c7:b7:af:90:a3:77:e5:2d:
f8:d7:1d:db:0e:0a:cd:89:31:e2:1b:d9:4b:7e:ec:
e6:66:79:ef:a1:b7:00:82:9a:8f:a9:e5:51:81:05:
fb:92:f7:9c:aa:0d:e6:88:eb:06:bd:35:80:51:e9:
79:a5:be:f0:4a:60:ba:1c:6c:10:f6:b2:18:9f:63:
88:07:28:b2:25:65:0b:17:a5:3a:aa:96:f7:fd:8a:
73:5e:32:73:cf:6c:ef:b3:58:8d:fa:35:c9:c5:ef:
a7:51:0b:c5:7a:bd:81:0e:a1:2a:19:ce:d0:7f:59:
8d:1f:65:8b:0f:2e:02:25:24:25:4b:f4:3a:47:61:
4e:e8:48:f6:c5:3a:b4:96:41:ae:b9:cb:00:48:a1:
38:73:7c:b5:95:51:35:22:c2:91:e4:ca:44:41:08:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A7:18:50:8A:00:DA:30:A8:83:18:FE:E9:2B:AA:68:5F:C0:DF:9F
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0e:00:85:92:65:15:fa:22:05:49:80:19:d7:2d:a0:c5:a0:
a7:31:fc:55:f7:19:6a:ef:42:d5:71:84:d1:85:63:cf:d0:69:
00:d8:cc:ac:88:9f:51:c3:05:6b:2e:66:52:55:a0:86:a6:dc:
75:47:57:5c:fc:d2:14:cb:aa:89:2b:9e:24:8b:f9:b0:b7:67:
f3:30:51:8d:5f:b9:78:88:07:14:cc:d3:13:81:55:a6:79:2e:
dc:b8:11:af:05:f2:a1:f1:ac:ab:03:50:05:cc:f0:88:f5:41:
32:11:e4:cc:96:81:62:42:a8:c2:ab:ed:90:6c:2b:92:4b:3b:
65:fb:9c:4a:26:06:0a:cc:68:96:1f:cb:da:44:6d:47:ea:9b:
49:b3:44:a2:82:b2:10:06:c1:79:c7:c0:2f:ff:1d:1f:f2:ac:
4e:92:bc:3c:a2:60:e8:9a:17:18:b9:e9:d8:31:74:db:61:93:
5e:45:55:43:5a:69:2f:08:6f:4d:a3:ca:af:c8:65:58:bc:67:
29:ed:19:21:59:26:27:9c:03:c2:16:a7:80:68:6e:c4:eb:4b:
ea:a1:af:37:5a:68:69:d9:13:bd:96:f1:bb:0e:e4:8e:fc:47:
c2:9f:c7:9d:92:e5:ca:cc:11:6b:72:aa:e1:03:66:ea:32:9b:
3c:e5:54:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:12 2024 by rpki-client on console-ams.rpki-client.org