Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
File: sk6li1pTLiisxhEf9VAnGuG83-g.mft (raw, json)
Hash identifier: MkoX7q/GqtqR03Kmy4ElNfeuilQ5KyJr6FvfDbsFWN4=
Subject key identifier: 60:4C:D9:A1:D8:95:8B:DF:4D:E1:58:FF:E9:FA:78:3C:96:F9:03:C2
Authority key identifier: B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
Certificate issuer: /CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Certificate serial: 01936AB4B69379808EF62BC06E089356712C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
Manifest number: 0B7A
Signing time: Tue 26 Nov 2024 23:00:48 +0000
Manifest this update: Tue 26 Nov 2024 23:00:48 +0000
Manifest next update: Wed 27 Nov 2024 23:00:48 +0000
Files and hashes: 1: foBM3ZiwlXxyYX8XvFXDLH-aSO8.roa (hash: 6+dtq1eg69dwygJ8cU/mnlN1FK1pnsdXovpKv9anogM=)
2: sk6li1pTLiisxhEf9VAnGuG83-g.crl (hash: 0/8T7CVFW9poflxGhuJ7/aO6x82vBvRHgw4mWKweDNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:b6:93:79:80:8e:f6:2b:c0:6e:08:93:56:71:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b24ea58b5a532e28acc6111ff550271ae1bcdfe8
Validity
Not Before: Nov 26 23:00:48 2024 GMT
Not After : Nov 27 23:00:48 2024 GMT
Subject: CN=604cd9a1d8958bdf4de158ffe9fa783c96f903c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:5d:82:36:09:2b:6d:0f:0a:83:6d:f8:a9:
96:48:d3:f6:d2:30:1a:ba:1e:4d:91:ef:fc:6f:71:
04:30:36:f8:b5:6d:8e:cd:ca:75:7a:6a:92:66:66:
e9:65:4c:a8:8b:f5:c9:50:51:10:92:77:12:54:29:
24:9d:b7:51:02:87:48:18:a7:35:38:2e:3b:c6:9f:
f0:93:1f:45:09:cb:c7:d1:ac:ac:a3:65:8b:45:53:
cf:1c:64:1a:78:4a:6a:8d:e8:6c:3e:3f:18:7c:ae:
44:3c:0c:fa:9d:ff:e4:21:56:5b:bd:40:b6:03:7b:
18:cc:63:07:5c:67:44:d9:47:38:77:59:67:84:4a:
e3:65:fa:e7:7e:b9:98:4d:ba:e1:ae:73:1f:7c:0b:
d7:2e:dc:8b:64:54:a9:57:8b:96:24:31:ac:da:b9:
e4:f7:41:4e:63:79:83:8a:f5:32:40:56:7f:59:d5:
7d:87:f5:e3:a2:43:fd:d6:be:45:58:6f:b4:72:10:
85:ca:c9:42:26:25:0b:c3:64:52:2e:0a:2c:f1:8c:
7b:67:37:64:d2:66:d7:e6:89:7a:8d:83:1f:62:07:
33:d9:57:83:72:26:df:86:cd:88:56:f0:29:46:44:
c5:dc:a6:87:7b:e7:b2:52:05:d5:a1:cf:dc:37:4d:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4C:D9:A1:D8:95:8B:DF:4D:E1:58:FF:E9:FA:78:3C:96:F9:03:C2
X509v3 Authority Key Identifier:
keyid:B2:4E:A5:8B:5A:53:2E:28:AC:C6:11:1F:F5:50:27:1A:E1:BC:DF:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk6li1pTLiisxhEf9VAnGuG83-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4cf76-2441-4bcd-8c1d-608330be6ba7/1/sk6li1pTLiisxhEf9VAnGuG83-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bf:f4:ee:cc:e2:d9:da:bf:35:4f:5c:de:46:c1:5d:85:f4:
53:22:dd:8f:ba:24:71:97:ad:c6:50:c2:4a:b5:f0:28:d0:28:
99:7d:f6:dd:3d:a7:1e:88:d8:ac:0c:7d:8e:1b:7c:2e:35:85:
0d:2f:75:5c:52:52:9e:bc:14:85:fc:29:19:45:a6:1d:dd:cb:
1c:24:14:0f:1a:f1:9d:92:eb:46:02:d9:29:b0:14:45:c8:30:
dd:0c:38:27:23:6f:3e:b6:9b:5c:6a:78:da:90:f9:5b:9f:8b:
f1:2c:18:1d:07:85:8a:e3:b7:de:7f:02:41:7a:36:21:3d:5a:
f7:e9:ef:68:74:88:50:68:49:8d:2e:4c:d7:1d:0a:9c:81:54:
4e:1a:ce:15:c2:c3:89:98:bc:1e:81:ac:c9:7a:ad:df:bb:94:
86:27:c4:cd:f2:00:10:95:24:0b:89:be:0f:9a:92:d1:40:fa:
70:fc:fc:97:f0:b8:40:bb:0d:e8:bc:64:30:23:79:6d:27:85:
61:b9:2b:32:ef:26:d9:a1:28:b8:05:aa:02:6b:ce:97:7a:c1:
65:7f:77:a3:5e:c2:af:e7:4e:b0:27:ea:3e:54:c2:ea:44:e7:
ea:01:2b:31:6a:44:e3:86:34:4f:04:df:23:a4:2e:bf:fa:56:
bf:e5:9d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:18:24 2024 by rpki-client on console-ams.rpki-client.org