Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
File: lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft (raw, json)
Hash identifier: kVKCr3czZLIGWBGVlVBHsgM/iCJp/BEwtcXxYTQlM1E=
Subject key identifier: EC:2C:B9:6A:28:D1:CE:07:E0:AF:A4:DE:8C:95:CC:49:94:0C:E0:21
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 019351D087B588B3261DFC3F338A56F4D004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
Manifest number: 04E4
Signing time: Fri 22 Nov 2024 03:00:40 +0000
Manifest this update: Fri 22 Nov 2024 03:00:40 +0000
Manifest next update: Sat 23 Nov 2024 03:00:40 +0000
Files and hashes: 1: TV_ycAdYllzD3A1Qv4V2wrf--YY.roa (hash: x9AwHVaQIkNliOR7FPVM4mQ+0ufhV5Oqdm6dp962WvY=)
2: VB2qx-aa8ftOvbce_CzOA8GPvgg.roa (hash: QEmaJN6G3AA42TcTcAWg4PuNLfgPMZf5jqZ7ClqJiyY=)
3: lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl (hash: kQp31drrbsqBKLfAIxr+2edYBJC72uSHxSps/jZgS0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:87:b5:88:b3:26:1d:fc:3f:33:8a:56:f4:d0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Nov 22 03:00:40 2024 GMT
Not After : Nov 23 03:00:40 2024 GMT
Subject: CN=ec2cb96a28d1ce07e0afa4de8c95cc49940ce021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:44:c3:1f:7c:d6:19:8c:fe:90:9b:98:92:
03:a0:94:68:4d:76:19:9a:10:00:f2:af:3e:5e:a6:
e0:df:50:6b:6b:73:3c:c9:cf:90:ba:03:46:3a:71:
0a:f7:bd:b0:1d:29:ef:45:e2:19:1e:0b:e1:03:a5:
fe:ac:2c:2b:ac:50:cd:e8:34:16:cb:d2:6b:9d:23:
4f:0f:b5:5e:24:20:ad:04:96:65:0e:1b:be:61:ea:
65:52:3b:b2:f0:5a:a9:27:d9:1c:c8:ac:7b:91:50:
58:75:05:ae:9a:87:d5:c0:9b:0f:22:d6:21:69:46:
ae:f5:ed:39:10:b1:aa:4d:ea:d9:d7:17:8c:b3:40:
fb:c2:c4:9a:14:39:92:c3:09:53:61:42:0f:f0:e3:
27:06:63:12:fd:1c:a0:2a:24:d1:66:45:9e:fa:e8:
66:f6:ae:58:c2:06:f9:e2:73:47:e4:6b:bf:f4:eb:
9f:24:c1:da:6e:a5:b6:25:cd:de:8c:48:8f:ff:06:
85:de:2f:ca:62:5d:b9:70:c3:70:33:af:4f:9b:83:
cc:63:18:b1:8e:47:46:fb:55:1b:80:87:68:e2:c3:
62:f0:ec:0e:df:1f:55:1e:59:d2:24:b8:8d:87:82:
88:24:f9:94:25:55:b3:09:df:6d:8a:b1:60:63:cc:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2C:B9:6A:28:D1:CE:07:E0:AF:A4:DE:8C:95:CC:49:94:0C:E0:21
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:57:0a:dd:02:f0:fe:99:f6:82:80:26:b1:87:80:6a:0f:91:
c7:95:47:41:aa:4b:20:0e:9b:58:b5:b2:3d:32:9e:15:a0:19:
d4:70:a5:3e:b7:c3:65:17:30:ca:ac:68:97:ea:04:aa:51:8a:
f4:ca:7a:0d:1b:b7:1e:12:bf:b4:f9:6d:be:16:ca:28:a1:8c:
4c:7e:59:a2:2a:ac:69:e8:23:3e:d6:79:ce:aa:6b:b5:b7:a1:
4b:8e:da:1d:fa:8c:7f:10:d4:a7:a3:c8:3e:fb:32:32:5f:14:
a8:96:83:81:7c:20:94:6f:db:df:8c:7b:da:61:59:c0:ef:b8:
c3:61:b0:ff:44:8e:a2:20:02:c1:65:d2:30:5d:2a:d5:0e:71:
bc:88:0b:d3:98:da:57:12:4d:dd:58:d1:fa:21:d8:0b:ef:c7:
80:d6:f0:f9:0e:d6:bf:62:de:65:ea:7e:b1:09:d7:42:b2:f3:
d8:a4:fa:5d:d5:dc:b5:d0:ce:38:19:99:42:10:36:dd:c3:46:
e4:1b:a8:25:50:39:9a:0c:22:6b:1d:76:c0:e0:d0:9b:3e:98:
8c:b2:af:67:51:e2:c3:f9:a7:29:98:4c:3a:94:1e:3f:d9:68:
13:b6:32:c8:a7:02:bf:98:14:e6:c8:67:25:23:58:43:84:d6:
92:f1:63:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:40:19 2024 by rpki-client on console-fra.rpki-client.org