Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
File: 25Kd7FwPI63Zuu7qe7OayHpykIM.mft (raw, json)
Hash identifier: 9VGxqta01Hb/5BXBQ5U/agICVEAJEZkzZxv9VUTJ7wY=
Subject key identifier: 31:A3:59:D4:D5:7D:00:92:CD:01:02:25:7B:6C:0C:04:3E:9B:E5:B6
Authority key identifier: DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
Certificate issuer: /CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Certificate serial: 019369DA9E79E645EE7ED1EBA392C3B507E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
Manifest number: 137E
Signing time: Tue 26 Nov 2024 19:02:35 +0000
Manifest this update: Tue 26 Nov 2024 19:02:35 +0000
Manifest next update: Wed 27 Nov 2024 19:02:35 +0000
Files and hashes: 1: 25Kd7FwPI63Zuu7qe7OayHpykIM.crl (hash: EkjmjVkZqDOYpF/xFt4jeSLpd5OoA3iS2swwhjJev0k=)
2: dmoZGtVAdDoZtP-EaCcNAnaQQkE.roa (hash: P/sAZm0O9EyE4pb9A+0xwEwCIE5vGUQkTZESJ1HvvTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:9e:79:e6:45:ee:7e:d1:eb:a3:92:c3:b5:07:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db929dec5c0f23add9baeeea7bb39ac87a729083
Validity
Not Before: Nov 26 19:02:35 2024 GMT
Not After : Nov 27 19:02:35 2024 GMT
Subject: CN=31a359d4d57d0092cd0102257b6c0c043e9be5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:26:3d:13:20:4d:3c:70:0a:cd:5a:46:e1:
a3:8c:8f:c2:18:c5:c9:3f:67:3c:4b:5d:b2:99:19:
77:ba:aa:d5:cc:19:87:dc:38:75:d1:97:92:c1:24:
9b:65:e0:84:c1:f8:ec:27:36:f3:09:c6:6e:3d:0c:
b6:4d:43:57:47:b6:d2:58:a4:a4:49:9b:8b:73:d1:
27:b0:30:b5:1d:e4:cf:60:dc:21:b7:d9:c4:40:8e:
0e:5b:0f:45:1a:e6:06:02:54:64:54:7a:49:ff:42:
fb:fc:ac:e0:b5:db:08:c9:e5:c6:14:d9:3b:c3:2b:
6e:31:4c:57:90:f7:ee:dc:ff:e3:eb:48:f4:63:13:
13:d6:1e:82:cf:6a:41:e8:53:ee:be:3f:92:fb:40:
b1:bc:d3:77:90:dd:4d:ca:ad:79:7d:f5:eb:26:7b:
40:b5:df:87:3b:e7:ed:b0:83:06:59:97:0b:9e:4f:
54:0f:1b:c0:4d:e2:26:c0:e2:22:4e:c3:b7:29:59:
08:85:3d:d9:8a:3a:43:b1:cd:f4:29:a9:fd:69:01:
53:11:2f:3f:f8:01:d1:87:0a:7c:35:b7:7e:10:b7:
49:f0:af:1f:fa:75:6e:43:98:35:46:51:a1:8c:3d:
c8:2c:c5:c0:90:66:ee:a9:f1:94:e7:df:61:4b:f2:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A3:59:D4:D5:7D:00:92:CD:01:02:25:7B:6C:0C:04:3E:9B:E5:B6
X509v3 Authority Key Identifier:
keyid:DB:92:9D:EC:5C:0F:23:AD:D9:BA:EE:EA:7B:B3:9A:C8:7A:72:90:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25Kd7FwPI63Zuu7qe7OayHpykIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be5fff-c911-457c-95fc-d30b7e25ae0b/1/25Kd7FwPI63Zuu7qe7OayHpykIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:87:8a:b7:4a:14:ba:79:0b:b7:15:7b:aa:c2:c6:47:29:10:
2a:9e:38:9e:c7:2d:0f:47:88:8d:48:1d:d1:74:07:d9:bd:d0:
7c:08:43:be:76:c5:5b:dc:4f:e1:7e:8e:ee:ad:07:cc:cb:55:
10:80:23:79:01:9f:0e:9d:86:08:4f:2d:a3:71:2b:98:bd:f7:
95:60:85:4d:90:3b:1e:01:d0:23:54:f5:ee:39:47:2e:e6:60:
ad:d8:7f:6c:81:44:2f:c2:ec:da:89:cb:30:8f:05:a2:9d:da:
e9:f2:43:2d:07:5c:df:34:89:31:8b:21:86:6d:e3:72:65:0c:
5a:e4:49:78:5a:7c:08:4f:34:cd:63:29:cd:4a:4a:3d:de:a1:
29:e7:d7:35:68:d6:1f:a5:0d:55:61:44:2d:c1:13:e7:53:26:
21:dc:44:d3:6c:69:c4:82:11:66:f9:96:19:32:37:7f:2b:39:
f7:19:a4:5f:7a:dd:ce:ad:02:1d:fb:be:4f:e6:54:69:9d:6d:
dc:ec:8d:4b:92:79:9e:ae:f0:84:67:4b:10:3a:9a:c9:7f:cf:
ca:a9:15:25:71:21:5f:d8:e9:f1:f6:26:8b:2c:b6:b2:77:e7:
de:47:fd:b1:06:f2:27:a7:41:fb:66:ec:4b:cd:f0:52:38:ac:
35:78:2b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:11 2024 by rpki-client on console-fra.rpki-client.org