Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: FaW0jBqdZxLNdY1qGVxIns0SIjXoyGwaCsLaGxyUVm4=
Subject key identifier: 6A:F6:16:9D:01:7F:77:10:C0:19:C1:50:EB:A0:42:B0:50:90:05:1B
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 0193568B6A4531F8EC6CDC21EA2B11C0CA6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 0D60
Signing time: Sat 23 Nov 2024 01:03:17 +0000
Manifest this update: Sat 23 Nov 2024 01:03:17 +0000
Manifest next update: Sun 24 Nov 2024 01:03:17 +0000
Files and hashes: 1: MmiMwpeV_ik73TADPvmeD6M5xdA.roa (hash: hu2KyxNz/Nj15vcsZAthVv4rl6MIBGzIB3NuZ2ZAGNo=)
2: hvRji0srt2xzuGPCOIdVpgVYkIs.roa (hash: tHRTHRU2iKdBIAtq5oC+6kPNFfxNl7qOeHEyE2negQA=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: ucYrkh35HxQJEZq9+D2g6qeQUQZNAEpAF2eHNlGi3aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:6a:45:31:f8:ec:6c:dc:21:ea:2b:11:c0:ca:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Nov 23 01:03:17 2024 GMT
Not After : Nov 24 01:03:17 2024 GMT
Subject: CN=6af6169d017f7710c019c150eba042b05090051b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:32:f9:73:9c:83:78:d4:8e:07:3a:f3:96:
2b:df:de:34:bf:48:ef:9e:b9:ee:d4:3d:8f:2e:0c:
db:c4:4b:77:01:2b:65:a4:b2:55:6b:64:b3:37:25:
2f:0b:d8:f1:ea:45:47:9d:48:cc:c2:5a:1c:95:dc:
8f:22:35:53:ae:49:dd:4c:3c:82:78:46:b0:01:69:
a5:ae:6d:1e:2d:fd:3b:a9:cb:48:5a:27:64:6c:bd:
d8:3e:71:25:99:35:53:78:d1:fd:f4:fd:9b:ca:99:
56:90:3c:59:4b:1b:40:3a:73:79:2b:1b:66:ab:17:
e4:01:28:8e:57:75:5a:d5:f0:78:0d:6b:28:13:0d:
e7:ab:56:46:f8:5f:15:e8:82:91:34:6a:e9:ca:d8:
17:be:b5:02:5e:3d:f6:4f:69:33:b0:9a:d1:fd:f9:
d6:e8:80:db:f4:7e:99:d0:9d:cb:9c:95:cc:08:0a:
ff:95:8a:58:83:5f:29:e3:7d:b1:0e:01:da:06:74:
cb:19:f4:22:63:db:e6:1e:98:d8:62:3d:2a:a6:d2:
f1:2a:ae:e1:9c:be:4e:24:1b:58:93:22:2f:ff:03:
06:ec:24:89:f8:a4:42:54:fa:a8:36:54:2d:55:22:
6e:22:26:90:7c:56:b9:01:1b:2b:15:b0:f0:08:77:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F6:16:9D:01:7F:77:10:C0:19:C1:50:EB:A0:42:B0:50:90:05:1B
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2e:ab:52:02:e0:d2:05:28:d9:98:b6:4f:43:cc:f5:e4:3a:
ae:3d:a2:4a:aa:a5:94:67:1b:3b:52:c3:37:77:f4:27:e7:92:
3a:0d:c9:97:bd:e7:0a:78:4d:ad:2a:56:7d:b1:9a:fd:e4:fe:
00:d2:41:47:83:31:3e:9c:0a:a8:65:41:c8:75:da:bf:56:e3:
3e:c5:c3:bd:03:dc:6b:55:72:6c:e5:fb:2c:02:70:64:8c:7c:
2d:99:14:ff:db:f6:a3:ae:34:94:05:2c:0d:95:5f:5a:aa:7b:
e7:7a:93:80:da:5f:14:5c:31:f9:01:82:3d:c0:30:2e:da:92:
70:97:5f:e1:ac:27:09:7f:14:24:14:52:db:54:84:5b:5e:d3:
74:38:99:e1:80:13:2a:be:72:1c:26:ee:cd:30:dd:98:ed:6c:
3b:cb:2a:78:9d:95:63:e6:30:60:b2:96:2d:15:de:9f:d2:78:
fd:12:d1:b3:e7:31:ad:6a:02:99:ea:f8:41:fc:65:8c:da:1f:
90:c0:d6:cf:a9:90:ae:7a:99:e3:e2:d3:ae:2b:2d:44:2a:68:
77:9e:42:d1:7b:59:68:74:a3:cc:7e:ed:88:8f:ec:b0:54:3b:
9b:8f:33:7d:d7:38:e1:d4:e4:14:f0:32:97:2c:3e:d7:00:de:
d9:48:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:39:43 2024 by rpki-client on console-ams.rpki-client.org