Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier: NWguu0heOzc5XtW3tExnsxFXt3W2SJ/HcjDUbQ4oy/E=
Subject key identifier: B8:58:A0:B8:33:91:7B:92:51:21:A2:11:8C:D2:04:F6:EB:F4:DE:71
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 0193523E154376A870F3A31E61D45E217EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number: 0B7C
Signing time: Fri 22 Nov 2024 05:00:20 +0000
Manifest this update: Fri 22 Nov 2024 05:00:20 +0000
Manifest next update: Sat 23 Nov 2024 05:00:20 +0000
Files and hashes: 1: 0cuLgBJqnDCl0ZEhSym7CE-hkJY.roa (hash: RMYcuc/6ewboSx1hBSVkA13byL/vP8aZ+gA7Zgp4rNk=)
2: 3OG6r9zBHa9Bwhz63fOeuwA3LLc.roa (hash: RVy510cmCgIpbTHl/T4XnighX3T/MCXv2W4fIBnYvdE=)
3: 7LYicOgPqptnUsNjvWRlrz3QNys.roa (hash: 1h7RZDTmaIRonrdTaVOSq4Kj8NeVIVunHSU8m7HnM0Y=)
4: 8TnnzvzXbFo0Rf6XY4r08Iar3oc.roa (hash: y6ldPW4gqUk1TiDg5hR0oMImkUsM5FEN+Pcnwx3yt+0=)
5: C9o21z6MCi5qGFVF76C3p20Du9w.roa (hash: JZjFzjxiNIlM+6fh74iyhOyaeOvvHHgn6PdgsmDMmzg=)
6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: dCH9D7bl0nPRtKP/5sFy73/CCNWbEJvZUB9ekvyLPNE=)
7: siT67ubj4bu_ArF1iMcz0toBuVw.roa (hash: TerXsHDDQUXX3cMgf7mR+E9V7up+3ApT/mNSrYIn8Wc=)
8: w_kjxet_a4R_rpD-_w2C6NQix98.roa (hash: arR3b0B/ozJecjGwkwewLlC/d6bhsiKcjg4IrMplcZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:15:43:76:a8:70:f3:a3:1e:61:d4:5e:21:7e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Nov 22 05:00:20 2024 GMT
Not After : Nov 23 05:00:20 2024 GMT
Subject: CN=b858a0b833917b925121a2118cd204f6ebf4de71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:39:89:cf:12:85:9d:8d:31:1d:00:08:bb:
f4:59:80:1a:f4:a3:0a:e7:5c:cb:44:a7:c7:d4:9b:
4d:bd:a9:20:02:45:b2:11:b8:b8:02:b3:80:a6:b6:
b9:3f:78:05:c6:6f:a4:c3:b5:b6:cb:b2:99:48:cc:
69:5d:5d:98:f1:f4:4e:be:4c:cf:40:db:62:8c:b3:
eb:3c:42:a7:84:40:d1:4f:68:e8:36:a6:50:05:b2:
f9:a8:f4:10:47:f8:eb:89:37:83:79:95:e4:21:1b:
76:bd:84:46:85:9d:d4:68:61:57:06:97:45:a9:70:
e4:ca:26:89:7b:12:8e:51:5b:a1:74:40:19:a6:a4:
3f:c1:43:62:9a:52:56:af:20:ad:1d:10:7f:80:4e:
f9:5c:86:3e:7b:50:e9:88:af:4b:57:be:fb:78:dc:
32:fe:e1:e0:29:8f:0b:a2:80:7e:a6:3b:05:19:f5:
73:97:65:e3:53:64:46:d1:3e:3a:d7:11:9a:18:cf:
80:75:b5:b5:74:79:b1:2d:c1:ce:ce:a5:0b:5f:ed:
bf:c4:1a:3e:5a:ae:e6:92:d2:68:08:b7:8c:7a:49:
93:5a:de:a3:37:49:09:c3:8a:0f:4c:33:fe:f7:1e:
0f:01:8e:e4:aa:5d:52:29:ce:c9:af:04:2b:45:3b:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:58:A0:B8:33:91:7B:92:51:21:A2:11:8C:D2:04:F6:EB:F4:DE:71
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:45:81:42:df:97:6e:a4:32:5b:2a:8c:3f:6b:ea:f8:03:27:
1d:56:ef:b7:3d:2c:4f:0f:40:fd:89:3e:e7:90:83:0f:a2:5f:
65:6d:b5:39:ea:cb:60:02:97:45:d0:44:b6:ec:cf:da:ca:c4:
74:4b:ec:2b:6b:3b:32:02:26:c0:66:bf:28:18:a5:27:19:e3:
b0:02:8d:98:33:bb:8e:94:12:e4:29:0b:a6:57:de:bb:cc:60:
a2:84:33:75:e7:0f:ad:f8:01:4f:f1:63:4b:d2:8d:dc:83:ea:
92:1d:af:23:94:31:dc:c7:38:1f:a6:db:00:97:c2:53:f5:a6:
55:8d:5e:32:6b:83:bb:01:f1:33:11:33:51:33:ae:0f:31:29:
68:b2:de:82:12:9a:af:bf:6e:d5:45:01:f1:9a:35:82:87:07:
65:37:86:67:b8:71:a2:9f:97:87:93:2e:15:e3:07:bc:67:35:
75:99:98:8b:9b:09:c7:22:c9:7c:48:da:83:2d:cb:c0:f0:83:
7e:c0:4e:41:9d:67:e8:c0:04:ed:84:d8:9e:43:0b:8f:8d:22:
e2:12:9f:40:2e:2a:03:a0:7e:b2:31:e4:a6:a1:c2:1b:8e:45:
12:de:60:8d:98:eb:b2:fd:e0:fe:e9:72:74:b8:a4:aa:1f:e4:
c7:9b:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:51:39 2024 by rpki-client on console-fra.rpki-client.org