Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
File: b1xXEvu82DJBnUxYhK47w8Shbns.mft (raw, json)
Hash identifier: lfanMAbBsSmmSNSun6IFKWMzmMDaMcU+B6oy6JIoCoc=
Subject key identifier: 87:5D:7F:01:29:E9:CF:51:B5:75:62:17:F4:66:AF:72:5E:D6:EA:11
Authority key identifier: 6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
Certificate issuer: /CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Certificate serial: 01935689F1D79ABBBB701993455C5DDFF242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
Manifest number: 1376
Signing time: Sat 23 Nov 2024 01:01:41 +0000
Manifest this update: Sat 23 Nov 2024 01:01:41 +0000
Manifest next update: Sun 24 Nov 2024 01:01:41 +0000
Files and hashes: 1: IbvfiypRFLkKZr79RKRM1lu1zrw.roa (hash: hpx+NEHdVKWpF0ucrJxarFBx8jvyHDXXw9ev0n2L6IU=)
2: P1xznfzpqxU99R0xb2PS5VcU1Hw.roa (hash: btJRvMne+RNHW6xTYn9O0CRuLxWyU6du5EUnoERNZgs=)
3: b1xXEvu82DJBnUxYhK47w8Shbns.crl (hash: U0ZvYc7D0uR+PZr46whNXMAZrJLiZQR72L/1JeuqpYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:f1:d7:9a:bb:bb:70:19:93:45:5c:5d:df:f2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5c5712fbbcd832419d4c5884ae3bc3c4a16e7b
Validity
Not Before: Nov 23 01:01:41 2024 GMT
Not After : Nov 24 01:01:41 2024 GMT
Subject: CN=875d7f0129e9cf51b5756217f466af725ed6ea11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:64:18:b1:14:85:c9:f6:a3:5b:3c:d5:a0:c7:
31:98:16:d0:5e:5b:f5:40:9a:f4:10:4d:b7:c5:d2:
e8:d9:d7:c3:a5:ea:f4:d8:c6:9f:f0:a4:a2:a1:0f:
f4:e0:08:e9:0e:51:05:b6:ed:fc:ed:ad:37:11:ec:
80:d9:b4:9c:96:63:00:3d:c4:17:fd:b8:b7:bd:7e:
b1:50:65:f2:65:2f:4f:8f:65:23:94:15:3f:8f:17:
a9:32:2f:77:f0:f9:a2:6a:05:f6:49:36:34:05:c4:
d6:5a:0a:e3:23:13:04:22:8f:1d:e8:57:d9:22:85:
cc:01:2d:81:eb:93:f1:c6:10:b8:f9:e3:78:84:fe:
ee:e6:62:ab:eb:2a:57:ae:df:10:17:dc:c7:94:5c:
50:ad:51:f8:ec:00:bf:41:3c:0d:9b:74:35:a7:1a:
43:1d:53:69:ad:38:7a:cc:60:b6:6d:3e:b8:c3:36:
fe:ae:16:40:11:f7:bf:77:37:ce:a6:81:2f:9b:b7:
84:10:e7:3f:7d:20:b6:ae:b5:27:f8:e0:20:0a:f9:
02:50:c8:11:ca:ea:80:79:6b:fb:df:0d:e4:17:6f:
ca:4a:6a:40:d8:35:ed:2d:38:e2:9b:98:5d:97:4d:
b0:d4:de:97:1a:c5:a8:3b:b4:11:59:9c:e0:a0:fe:
f9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5D:7F:01:29:E9:CF:51:B5:75:62:17:F4:66:AF:72:5E:D6:EA:11
X509v3 Authority Key Identifier:
keyid:6F:5C:57:12:FB:BC:D8:32:41:9D:4C:58:84:AE:3B:C3:C4:A1:6E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1xXEvu82DJBnUxYhK47w8Shbns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b403cc-4e6c-4fe9-83a1-7550529d847a/1/b1xXEvu82DJBnUxYhK47w8Shbns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:44:51:0c:12:bd:5a:5e:b8:9f:bd:84:b8:19:83:33:13:c6:
d5:2d:93:d7:97:13:10:49:aa:95:ee:0d:94:69:a2:28:40:f0:
aa:b3:62:6a:b9:b9:48:86:0a:97:39:a9:a1:11:36:84:f5:91:
f7:92:6f:8f:7b:3f:6e:e1:7c:76:12:d5:1a:ef:f7:28:97:77:
d8:46:1a:be:33:82:ff:f5:2b:83:ea:76:04:22:a3:83:35:cd:
46:4b:c3:38:e9:1f:79:16:12:2e:ae:9e:ff:e2:ab:ed:50:f9:
15:83:47:bf:17:5c:32:c7:16:a9:fd:c9:c7:e1:ce:e3:7d:5d:
4a:f1:c3:a9:27:73:df:8f:6c:63:4c:0c:3b:90:2f:f4:8a:d2:
a5:7f:f8:ac:e8:98:50:ab:4f:ba:53:9e:37:07:b8:b7:1c:16:
76:46:a5:cd:a9:5c:83:19:3e:89:e8:b3:f6:f3:27:8e:23:f8:
b9:24:60:08:2e:ec:ca:ff:af:40:09:f9:c4:6f:f0:e1:fb:f4:
09:0b:95:ac:52:0f:6e:36:2f:00:a7:68:e8:a9:4c:1d:db:2f:
54:99:16:20:98:3c:fa:06:99:3e:cd:ca:ea:44:50:5d:62:f7:
ad:a9:ab:b3:39:1e:cd:08:05:f9:67:dc:51:ad:99:e8:2a:f2:
37:e3:27:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:13 2024 by rpki-client on console-ams.rpki-client.org