Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: fTT8Ez22MbPU1v/gNSreR9duu4VdolSE/T7UdHrCW/c=
Subject key identifier: 1E:34:81:AA:83:89:53:91:B6:A9:DC:DA:57:A9:72:77:33:ED:99:30
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 01935319F875BF3E28C7A504DB569CE0FE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 0F5D
Signing time: Fri 22 Nov 2024 09:00:30 +0000
Manifest this update: Fri 22 Nov 2024 09:00:30 +0000
Manifest next update: Sat 23 Nov 2024 09:00:30 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: 4qxm/zHpyUa1LPth29KKqcB5VLCL4FGPSJ7qKKXUBw8=)
2: 98wdG89X1LQCZq2giFIGoawUsls.roa (hash: jFXstJENxRgOoomZU5MoHxX4kVz08u04ID99y5JwuWM=)
3: pTPJ6GuNhhTs0aoKJXcl2ijQh0s.roa (hash: aUz9ZM/ONFaENhwkPzdstIZwD6RklmNVXu0Dbwo8kUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:19:f8:75:bf:3e:28:c7:a5:04:db:56:9c:e0:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Nov 22 09:00:30 2024 GMT
Not After : Nov 23 09:00:30 2024 GMT
Subject: CN=1e3481aa83895391b6a9dcda57a9727733ed9930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3e:87:3d:d3:b1:de:60:81:83:2d:b2:17:0f:
54:1c:bf:b6:d6:df:0a:3c:3a:75:31:d8:82:0d:7c:
76:85:a7:44:95:ea:33:4d:a1:7d:10:f1:30:c2:87:
14:1b:1a:1e:8b:2f:2e:9c:30:f2:63:8d:e2:c6:62:
bb:d7:b6:bd:79:fe:1d:37:7a:ea:a1:57:c9:0c:c8:
14:a4:5c:be:90:33:30:59:08:b7:a6:df:0c:8a:c1:
0a:a6:02:53:f7:c4:56:36:c1:45:83:12:9a:9f:bb:
56:29:2e:93:d8:cc:a3:4e:08:00:bf:cc:88:2d:2f:
ab:1a:e4:51:b1:b2:0b:94:84:11:85:63:52:98:53:
ee:23:53:ce:d6:5f:48:ec:32:81:69:38:54:4c:2f:
c9:67:d6:10:b9:f8:4a:47:b5:71:e0:2c:ae:56:65:
b3:3d:de:30:84:b3:1f:8b:2e:d4:12:6a:67:1c:15:
f1:f8:ed:ea:95:65:7b:ee:bd:4c:b1:7d:2e:4a:3b:
db:02:e4:b0:97:a0:da:39:74:b7:9c:d2:4c:f6:d5:
6a:c0:d7:54:28:c1:18:e3:ed:88:9f:44:ba:a7:b0:
a5:76:36:48:7c:e7:10:dd:07:ed:74:c7:e0:83:0c:
d8:b6:e0:80:4e:a4:a9:16:f5:e2:31:38:23:36:88:
11:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:81:AA:83:89:53:91:B6:A9:DC:DA:57:A9:72:77:33:ED:99:30
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d9:ed:65:04:2b:92:ab:5b:b7:94:9a:5b:46:b5:53:66:8a:
c0:85:ae:93:4f:fa:5d:78:3d:8a:8b:66:48:dc:3e:e2:33:d1:
e8:34:e3:ab:77:f8:ed:94:21:9a:55:b6:2f:07:57:d8:e9:1e:
39:03:9c:28:56:ba:87:de:b7:97:2c:04:59:fa:a6:60:58:45:
f6:94:e8:e5:f6:a1:c1:b4:7a:62:43:d8:7f:e7:b1:07:fa:6d:
77:23:3b:2b:cd:42:27:df:46:01:43:65:c2:ee:41:28:51:ea:
5b:df:de:4e:76:3e:77:88:85:47:34:28:c1:94:e3:5c:4a:2a:
98:95:07:34:d9:0d:81:bb:2f:11:c1:d8:45:93:95:c8:39:e1:
1c:51:6b:d0:28:4f:e0:97:b9:11:d7:52:e9:c5:fe:1c:09:dc:
0f:fd:af:4a:cf:25:65:5b:cd:33:3d:08:f3:44:93:be:03:82:
78:b9:3d:75:3f:c4:f0:87:af:5e:0b:df:55:59:17:c0:14:e2:
2e:69:c0:fb:f8:a2:41:53:e1:0d:79:4a:c5:27:13:d8:72:f2:
02:ee:8c:1a:0b:86:fe:3b:c1:9e:a4:09:6e:59:44:01:a0:b6:
ab:5c:a5:7d:5f:d1:93:a5:f2:e9:52:2f:56:a3:1a:e1:11:b6:
50:fd:9e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:45:34 2024 by rpki-client on console-fra.rpki-client.org