Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.mft (raw, json)
Hash identifier: 53ITGemPz0k2bKfTn4oAliLNqdPAnMd84u05StLdev0=
Subject key identifier: 1C:02:3D:BC:AD:39:82:3C:9E:CE:9B:A2:70:73:CD:66:4C:1E:20:AD
Authority key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Certificate issuer: /CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Certificate serial: 019352AC7A0C2119AAF945EFBA07074FF042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
Manifest number: 09D6
Signing time: Fri 22 Nov 2024 07:00:55 +0000
Manifest this update: Fri 22 Nov 2024 07:00:55 +0000
Manifest next update: Sat 23 Nov 2024 07:00:55 +0000
Files and hashes: 1: EtuZOX-EpkLHjoPI-3SmDcCaLK0.roa (hash: jtTBzPpf0TRfM+aOhbbEhr901qlkUqDW3jXxC6FpJL4=)
2: cTm8XO866t8yYT99lZ7I5Ap0KRg.crl (hash: bv058UKvII5Zjy4ijXVi/IT1IkuqZ0qAKsZwRnsbV+E=)
3: drU5iAMUiEAlM9itISvWQzBvn8g.roa (hash: dhw56t3cAYbxwkuenzDS0Vv77jwgiIn38zdok8w2le4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:7a:0c:21:19:aa:f9:45:ef:ba:07:07:4f:f0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Validity
Not Before: Nov 22 07:00:55 2024 GMT
Not After : Nov 23 07:00:55 2024 GMT
Subject: CN=1c023dbcad39823c9ece9ba27073cd664c1e20ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:14:bc:f1:3c:6b:44:d7:44:6c:b2:13:fa:
b3:5b:43:1d:93:f1:e2:e0:c4:3a:1c:22:54:08:00:
2b:00:c2:2d:fc:f5:06:3b:2c:4e:bf:b1:02:59:28:
a4:b0:f1:9a:53:1b:f5:ba:28:c5:d0:ea:a0:eb:0c:
f8:83:47:82:ac:21:bc:11:6d:95:fc:c9:29:0c:0b:
e5:1d:17:64:ee:af:d5:5e:33:4f:07:17:68:64:be:
48:96:0a:30:1f:93:29:60:11:7d:37:75:5a:36:b1:
1b:e7:83:8d:4e:0a:13:f2:cf:8b:26:eb:a4:df:86:
50:1d:26:94:19:5b:19:2b:82:47:82:36:e2:5b:61:
03:f8:12:54:13:38:b7:9d:a5:54:cb:3e:e8:31:73:
72:06:8d:f4:3d:38:2e:82:f4:a9:33:05:05:ac:f6:
59:27:b8:8f:1d:eb:21:b3:5d:8c:57:32:1b:9c:89:
22:4b:19:9d:f0:ee:f4:b9:ce:7f:0b:63:88:40:f9:
2f:7c:94:0c:18:94:fd:e7:3b:4d:f9:a2:bd:26:3c:
4f:4d:4f:e5:68:1e:b7:2d:d7:97:52:41:2e:d0:c4:
5a:80:5d:bb:e6:09:ab:9d:9a:b3:53:38:1e:6b:c5:
2a:00:df:74:92:d0:fc:ab:ff:2c:29:98:e0:6c:a1:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:3D:BC:AD:39:82:3C:9E:CE:9B:A2:70:73:CD:66:4C:1E:20:AD
X509v3 Authority Key Identifier:
keyid:71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cd:47:14:ff:8e:04:7d:bf:b8:93:17:c6:ae:1f:c9:57:01:
29:f1:6f:eb:ed:9e:fd:27:1e:47:1f:fd:de:a3:e8:ab:1b:8d:
e1:7c:76:4a:3c:71:86:ff:09:f0:eb:fc:4c:62:61:15:1f:b5:
bc:5f:09:d5:0f:5d:22:6a:93:f8:a1:09:3e:47:f2:75:b1:89:
51:ec:e3:51:28:af:84:7e:43:01:11:75:20:1c:8e:89:ac:be:
56:10:6a:d6:b3:91:9c:f7:8b:14:e1:dc:38:b1:a9:82:b3:6e:
7f:83:6c:84:09:6b:65:9a:b1:03:10:fb:a3:26:b9:dd:81:73:
36:d7:01:96:a5:7a:b0:35:9d:a1:3c:1e:f1:16:08:af:14:c2:
1d:6b:30:0a:3d:88:f1:b6:03:00:92:ae:9e:a7:10:24:73:63:
3e:62:fe:d2:8b:48:dd:51:b0:68:4a:5c:96:80:8e:54:8e:b3:
f9:52:9d:4c:1b:8c:fa:e4:a9:a1:c9:0e:91:0b:13:e9:61:3d:
e3:a9:5d:84:a8:fb:4b:9c:1e:27:13:1c:f7:07:f9:0a:5c:27:
b0:65:32:0a:10:ac:fc:c3:53:9a:5b:87:2a:8e:34:e2:e9:53:
13:ce:26:7d:d2:b1:04:90:56:b2:eb:da:ce:32:25:8e:3d:9c:
c3:43:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:09:20 2024 by rpki-client on console-ams.rpki-client.org