Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: qnPgWRZgqCad4vV7NIywRqYiOdEW+GNU/zQe33ZGjAo=
Subject key identifier: A2:61:4B:41:A4:60:48:B2:78:47:AF:A3:7C:28:CB:F0:30:BA:26:26
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 019356F6D094ED057576AD7E9FCB58DDAE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 03:00:36 +0000
Manifest this update: Sat 23 Nov 2024 03:00:36 +0000
Manifest next update: Sun 24 Nov 2024 03:00:36 +0000
Files and hashes: 1: 00KltQLCw3b1regGPrgMFa8rcxY.roa (hash: k1vAJCU4i9X14XvPn6z2ZrUu0g4pBcJXURe19Bhc7AI=)
2: 8r_-oPPYFgyhxcTrA_qmAus1LVw.roa (hash: 1p8suR5Kqhc6tf+WBmCYHJ+pFpuzFSM2g5uoTEYiuK0=)
3: A3S91QNT1z97Ljxe3kxj-h8Tmb4.roa (hash: BHTjeFyuinoreGMs0mvKN8JTnQDJYEAqkN+jLT6c5IA=)
4: GlM62mEOSdYO40DMKPj3VAd9BmQ.roa (hash: nx16zy9qz3Ea5GvMXEPBqyjemRfdzbT0aC3uFXBkuw8=)
5: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: nAakdWICFKtNWkckonio76cEfJQcXF+8mEx9BUsMc3Y=)
6: R9CPhtTfRwALuTn-k-gZZU_BQsU.roa (hash: fAKnXqTRlI9u8078WVfh4ukH15bWigYpVYWs9c0Afak=)
7: lIprtdIcb6RGjBu_7Fb4hvqb0-Y.roa (hash: 6W7WCd1n+XCFbm2SXFAvlw2vbyFj+YpL+rmqDrIILRA=)
8: ncs9X-Zk4JZHNYtt8t2uBnQX9oY.roa (hash: 5guFCGGvbqU6swNIKFCNo5soWWJ6rvnCUmstTheCrgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:d0:94:ed:05:75:76:ad:7e:9f:cb:58:dd:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Nov 23 03:00:36 2024 GMT
Not After : Nov 24 03:00:36 2024 GMT
Subject: CN=a2614b41a46048b27847afa37c28cbf030ba2626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:08:62:9c:9f:0e:ae:95:1c:27:e0:27:5d:
6a:dd:b1:ee:85:d7:57:41:e2:3a:a5:1a:2c:52:da:
9b:e2:a5:52:98:ed:88:93:86:be:30:80:9f:e3:08:
0a:83:4e:82:a8:50:38:91:1a:74:94:d2:95:36:52:
65:f8:87:ac:98:c5:46:55:9b:73:61:19:00:6e:e8:
eb:d3:1c:56:5c:0f:81:94:b7:67:4b:25:25:97:ab:
ce:e9:9c:77:67:e0:1c:aa:5f:cd:5e:43:00:f9:16:
7e:43:a2:f6:ba:b1:d5:24:a4:a2:1f:2c:fd:72:2c:
2a:5a:0d:bd:78:59:17:6d:e0:22:88:db:15:49:9c:
30:5c:74:59:86:82:79:8e:33:1e:58:8b:55:f6:99:
ec:b9:2e:a7:cb:49:14:de:54:0b:06:33:f1:3e:89:
74:27:9d:c6:bc:d2:41:c0:79:e5:3e:9c:13:ad:df:
3b:d7:00:2e:7c:05:f8:01:2c:46:5d:5c:76:32:d3:
c5:47:20:ed:c5:bd:27:f5:4e:5d:23:4b:06:50:3a:
4f:05:02:92:db:de:1b:47:09:37:12:92:01:14:e1:
38:5a:f2:41:82:e3:15:94:a0:71:45:24:34:43:0c:
30:79:f8:4e:91:ac:02:5e:1f:07:d7:d2:a2:ee:d4:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:61:4B:41:A4:60:48:B2:78:47:AF:A3:7C:28:CB:F0:30:BA:26:26
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ee:19:32:c7:3f:a9:7b:8a:71:9c:98:cc:47:96:42:49:dd:
ed:47:1f:cb:13:ef:14:b6:58:c2:9b:89:cb:41:73:46:af:99:
82:fd:46:49:32:00:52:9f:9e:bc:35:16:76:c3:4b:bb:62:7a:
dd:29:1f:43:fe:21:aa:70:e0:9d:7a:25:91:97:b6:97:36:d4:
b2:0e:75:47:ce:de:17:80:92:c9:c0:7b:b8:2d:6c:a4:a0:69:
65:c7:25:82:89:fe:9f:5b:a4:5f:96:07:2f:10:97:93:e5:18:
69:8b:f4:b9:38:47:77:51:e4:1a:15:8b:52:71:58:54:e6:b9:
55:6c:c2:76:88:dd:a1:09:03:ff:13:57:21:9a:f3:f4:b7:09:
9e:a1:b7:b1:e4:af:f4:d5:30:c1:de:f3:8c:a0:fe:15:33:b3:
19:6e:a2:a0:0c:a4:f5:70:7e:ef:d7:d3:64:87:42:bb:18:d0:
51:53:2b:be:ee:d3:16:a3:c2:51:b5:46:33:c4:01:38:03:7e:
ef:18:69:a9:9e:32:ae:33:0a:d0:b7:ee:d4:1a:f6:40:db:00:
95:79:47:9c:48:e6:17:5d:d8:d0:c0:20:ae:26:d7:ea:13:30:
23:ba:0f:d8:3b:a9:5f:f4:8f:3b:bf:c9:5a:94:61:a6:19:8b:
6a:c4:42:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:39 2024 by rpki-client on console-fra.rpki-client.org