Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: wYZTUFxs7/iMRuh4rn9cqYM/0VcTWYewl43fViWk1L0=
Subject key identifier: 9A:16:06:CD:BD:C8:D9:0E:51:29:F3:52:ED:4B:0E:51:C4:78:C8:48
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 019352AC21664D1DB78626973F92610CC772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 136B
Signing time: Fri 22 Nov 2024 07:00:32 +0000
Manifest this update: Fri 22 Nov 2024 07:00:32 +0000
Manifest next update: Sat 23 Nov 2024 07:00:32 +0000
Files and hashes: 1: dtR5QRxrJ-bRpJ-E3u_Ij0wSb-U.roa (hash: QFx4GS/XFluhLnMBBUmfoq2fT7Zis1+0U5rHDtRTTU8=)
2: fWDcUdxTtw9M7xxRmBQR7_1jqgc.roa (hash: FSnrraQ6fVX1Fd4oEj9ZvdcABXoICd5yXhlTsLyinVE=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: mMEbav/9z+FUlE9mTGjufqL72A+HuZSRq3vkgtLyPGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:21:66:4d:1d:b7:86:26:97:3f:92:61:0c:c7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Nov 22 07:00:32 2024 GMT
Not After : Nov 23 07:00:32 2024 GMT
Subject: CN=9a1606cdbdc8d90e5129f352ed4b0e51c478c848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:6e:43:c1:ff:f6:56:7f:ae:2c:25:0a:55:
56:bb:f7:63:59:3f:b0:c5:bf:36:ae:d8:cd:95:fd:
cb:82:80:c8:47:4c:89:59:b3:b6:b5:54:b6:d4:4d:
d4:c7:bb:a6:b3:a3:06:90:ea:cd:51:ff:72:14:15:
3f:15:0f:b0:73:7d:ac:f5:ee:ac:ce:45:15:dd:ef:
19:0b:6e:87:ad:56:f5:4b:0b:0c:5d:ec:8e:f5:30:
f5:5c:11:88:0e:92:1d:d4:9e:86:46:d8:39:57:3f:
49:85:ab:40:56:0e:77:10:0d:5c:3e:a7:27:50:08:
10:bd:4f:44:0c:98:80:ad:bc:e1:50:7b:f1:3b:99:
f4:b4:c4:9d:13:98:f3:09:c9:af:17:5a:76:e7:85:
41:0a:a6:f8:da:19:51:76:78:96:2a:f0:22:e3:7a:
74:e5:38:d5:17:df:dc:2c:79:9b:7d:f3:e2:00:38:
86:ac:69:78:bf:b9:7f:de:2c:12:07:4f:61:31:d6:
52:53:b2:cb:d5:66:1e:f7:ec:ce:d4:be:6b:1d:20:
2c:65:83:54:c9:a1:ef:ab:06:52:3b:cc:6d:18:65:
f9:0f:58:64:55:7c:75:06:8d:df:5a:cb:c6:0e:cb:
bc:c7:e0:31:ec:b9:20:75:01:4d:4d:b8:5c:2c:84:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:06:CD:BD:C8:D9:0E:51:29:F3:52:ED:4B:0E:51:C4:78:C8:48
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bb:c5:8d:ad:a7:bb:a5:e0:1b:c5:d1:f0:b6:ed:fa:54:c3:
87:bf:ed:4c:dc:e0:d5:8c:3f:28:3b:9a:a2:14:bc:d1:10:82:
96:29:bb:44:d7:39:1b:34:bf:11:cb:de:e8:22:aa:74:6d:38:
a0:6e:30:0f:0c:9b:c1:59:c1:67:89:72:51:af:f0:e6:38:04:
7e:f9:e1:74:2b:38:55:e4:64:87:0e:88:df:0c:6e:4b:f0:ed:
c7:69:a3:bb:43:2d:ad:a8:d0:cb:48:6b:48:e7:ca:16:64:4d:
93:b5:46:21:a1:1f:68:7f:5e:1f:dc:45:fc:0c:ef:6d:32:21:
37:29:dc:25:e0:f5:00:2a:68:2d:f3:2d:95:b4:ba:54:43:0f:
31:47:a0:bb:55:88:f3:35:5c:92:16:2e:91:66:55:71:67:e9:
96:a5:f0:1e:e2:00:92:d0:9b:05:78:2d:aa:ab:ec:cf:d2:3d:
fb:b9:07:1d:bf:55:88:c7:17:40:98:25:98:1f:e0:e0:d2:fa:
1d:2e:3e:02:21:c8:48:9d:49:58:46:9b:94:cd:7d:c0:fa:01:
55:a5:e2:15:98:e4:3b:a4:9d:19:28:d8:1b:e9:72:99:f9:8a:
fd:f0:9a:27:20:68:8b:de:ad:a2:66:e2:c9:7c:a5:c4:cd:d6:
27:27:22:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:09:22 2024 by rpki-client on console-ams.rpki-client.org