Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: XFJudNIURyzMOiBg1Fo4s9KqaoZ6nG7UiaEuKT5YYYI=
Subject key identifier: FC:23:B0:4A:24:53:1A:DF:13:CF:5A:88:47:C4:8B:95:41:30:F5:A0
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 019352077484C3FCEE851C6E880E295C669B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 07DD
Signing time: Fri 22 Nov 2024 04:00:40 +0000
Manifest this update: Fri 22 Nov 2024 04:00:40 +0000
Manifest next update: Sat 23 Nov 2024 04:00:40 +0000
Files and hashes: 1: WK-dS27G35AxWVVIGLPvIIeDn60.roa (hash: p24lkRsNQKzxv9yCaRoJp+A/ByFmRZPUjz5eWqifHfY=)
2: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: Y1KXdYFTNNi+CgdrPlPXXCYgetb+bdHQV/lu9CcFRzg=)
3: pgjd9NjG8xS89lbrKWHJulQu2k8.roa (hash: D++T5vhQpPT1OnGP52ON1AJ2apECe2E3RvJWY5328EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:74:84:c3:fc:ee:85:1c:6e:88:0e:29:5c:66:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Nov 22 04:00:40 2024 GMT
Not After : Nov 23 04:00:40 2024 GMT
Subject: CN=fc23b04a24531adf13cf5a8847c48b954130f5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:2e:76:40:aa:db:74:dd:e6:92:c8:e7:e6:
d4:3c:b4:aa:b0:12:f5:01:2b:48:26:43:e3:b0:29:
ee:7d:04:09:9f:b4:42:82:1b:3e:ec:94:cb:32:98:
3c:8c:dc:9d:75:a2:3c:c1:17:af:38:08:4e:7e:e8:
dc:53:1b:41:ae:66:5b:8c:5c:1d:d7:75:ff:e2:39:
8c:08:f0:9f:33:99:86:e3:2a:3c:f3:29:6e:60:68:
5b:d2:22:a1:2a:58:07:7f:65:53:a5:0a:4c:6a:15:
f2:15:ff:43:e9:bc:ff:64:d1:ba:40:f1:ef:4c:87:
92:05:25:03:91:48:bc:c1:d3:1b:ee:ef:cd:82:83:
68:32:fb:e9:dd:d7:97:09:7c:48:3a:9c:2d:2b:ae:
82:ee:6f:11:c7:71:ce:7b:87:bb:54:83:ce:db:45:
c0:4e:c4:50:39:fb:f1:70:5e:42:23:da:a7:84:fd:
c0:14:ac:be:e0:b2:9b:a9:60:34:20:0e:22:2e:0d:
5f:1f:48:b8:92:8c:11:24:c2:ef:34:4d:50:85:b3:
98:43:87:50:c3:93:91:70:e7:a0:03:b0:a7:6b:d9:
e6:ca:b0:a7:bb:2e:14:9d:d8:d3:7e:32:7d:aa:be:
2e:82:53:a6:d0:bc:2d:99:06:91:34:e9:b2:dc:67:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:23:B0:4A:24:53:1A:DF:13:CF:5A:88:47:C4:8B:95:41:30:F5:A0
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:73:1b:5c:6b:6e:d3:4d:75:5a:4b:d9:bc:93:dd:17:f6:d1:
1f:50:69:03:49:3c:0f:5b:13:19:37:df:ab:5b:32:fa:0a:4a:
06:79:70:e7:78:04:26:9d:28:1d:c2:72:d1:da:4d:24:1c:ed:
88:f5:a1:ab:f9:e1:c1:9c:2c:71:22:d4:e9:85:a0:0d:4c:9b:
7b:5b:53:ec:3f:18:9a:cb:89:fa:4a:ec:f7:4b:67:6f:2f:98:
d4:f0:68:dc:bd:f3:16:65:3f:4b:d4:f4:83:9b:7d:c3:82:51:
db:26:1a:6a:de:36:de:f3:1b:67:30:4a:e2:a4:3d:a3:9f:8b:
26:9b:90:32:1c:6a:e1:4f:88:bb:fe:13:49:13:32:5e:1e:a3:
92:6a:51:ed:34:7a:1c:3f:40:3f:ea:ec:6f:c0:38:9c:fd:1e:
11:d1:aa:ee:55:8e:37:83:09:66:64:22:bb:cd:77:22:8a:93:
93:b9:48:c2:70:43:f6:20:8c:cd:c1:c9:34:53:1d:e5:f2:fa:
6e:7c:e2:2c:bd:7a:b6:f2:71:62:ff:94:b9:bd:fd:e5:87:e1:
b4:9d:de:1a:33:c4:48:d3:5e:3b:c1:b4:85:c1:3d:9d:a7:a4:
96:4a:43:bd:58:59:84:1b:38:6a:08:0d:e5:03:bf:b6:3f:d9:
0b:ee:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:45:32 2024 by rpki-client on console-fra.rpki-client.org