Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json)
Hash identifier: GSd5nX0pTwPTGBZqazXUR3c7Bn6+0Oq5Xh+qDl0d00g=
Subject key identifier: 40:B8:F1:CC:B2:99:33:96:01:A4:B8:B1:1B:19:9B:72:4D:FC:87:44
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 0193568A8D2C4E793BEFE8B6FDF685C731A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:02:20 +0000
Manifest this update: Sat 23 Nov 2024 01:02:20 +0000
Manifest next update: Sun 24 Nov 2024 01:02:20 +0000
Files and hashes: 1: 2YyvojmuJnam6QTpQX1Y_OG7mC0.roa (hash: vMc0VjWXz2Kb9jefGsJLuZODjpFFpwtZUej2jlpx64Q=)
2: 4tYuzHUCZdggR_a9uPs485al_Nk.roa (hash: VtKI0jvS7sqa/4BgAUp1EIInCIBmWJWr7l7bcqeTRVc=)
3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: RYvH+UX5fQARDp2QLkdz5lK8KF4YWKiXzrG1dML8014=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:8d:2c:4e:79:3b:ef:e8:b6:fd:f6:85:c7:31:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Nov 23 01:02:20 2024 GMT
Not After : Nov 24 01:02:20 2024 GMT
Subject: CN=40b8f1ccb299339601a4b8b11b199b724dfc8744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:3c:61:39:69:b6:ac:af:0c:1f:58:9d:ba:
d9:d6:97:7b:82:88:c5:b4:cc:63:2f:e9:b5:c0:99:
2e:27:f2:62:03:59:26:8e:b4:6f:09:3b:ce:22:43:
59:74:01:d5:22:0c:7e:bd:1f:49:93:b6:22:9c:49:
48:9f:60:a9:18:99:3f:8a:0f:2d:b2:3f:c9:25:13:
c4:ee:78:31:c8:f8:29:da:cf:0d:09:9f:1f:66:a4:
46:45:67:e8:7d:68:ed:26:20:e5:73:74:df:fc:74:
b8:75:d7:b9:3d:6b:81:13:d3:71:99:24:92:d1:e5:
85:85:5a:f5:a0:53:83:7b:76:3c:c8:e8:e7:21:67:
e8:6d:a0:04:4d:46:80:83:03:8a:e0:7c:35:17:62:
da:ee:98:45:e6:0d:17:a8:de:cb:a6:86:de:8c:4a:
77:4d:52:52:61:91:4c:7f:d5:f9:f1:a3:33:4d:cf:
98:ce:8b:be:fc:14:ce:db:e2:47:2e:f0:70:29:d7:
f2:c5:82:e3:eb:9d:03:2c:6c:78:65:82:d7:b8:57:
3f:88:ae:9a:6d:2f:e8:11:33:79:23:83:14:00:a1:
86:c7:a5:2c:7c:4b:86:7e:14:e4:b0:c0:5f:3c:9c:
8a:7c:17:0e:c7:f9:1c:12:e8:3d:69:d4:2a:70:0c:
17:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B8:F1:CC:B2:99:33:96:01:A4:B8:B1:1B:19:9B:72:4D:FC:87:44
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4d:36:ca:71:f9:77:e1:25:a1:c8:46:5a:0d:6a:52:1d:4e:
43:72:1c:2f:37:f3:30:29:79:27:35:b7:72:ba:54:4e:d9:dc:
a1:44:98:bb:2d:e3:44:ec:cc:a0:95:5c:42:56:c9:2d:4e:de:
fe:62:83:39:be:b5:6d:56:f6:03:93:fb:01:98:d4:1f:f7:ea:
9d:40:e6:23:95:ec:e8:24:11:52:c8:b8:34:1f:57:61:82:44:
dd:ba:18:5e:60:4a:26:96:04:9a:f3:a9:0c:f9:2f:45:6e:c8:
1f:c4:03:cf:b3:2a:81:5e:29:87:20:cc:6c:07:c1:8b:2f:c8:
63:c4:81:37:81:ca:24:b1:61:5f:74:ef:83:38:bf:63:a2:04:
f7:ce:2e:c9:71:41:5b:6e:ef:6b:60:64:d2:46:bf:89:41:79:
a3:df:c6:26:fe:38:b6:cf:00:a7:ca:08:4f:06:6b:fb:82:2e:
d4:5f:c0:d8:d4:63:21:6d:ef:b0:73:23:cf:73:5d:1a:dc:20:
a5:44:a4:f2:9e:c6:97:63:f1:dc:80:5c:de:c8:28:20:34:2b:
e9:94:1c:d7:9e:df:35:d7:b9:68:f5:58:85:24:dd:1f:80:e2:
cf:ca:a7:13:cc:f8:e4:07:c6:35:d9:64:63:7b:22:52:5a:0a:
17:76:2d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:11 2024 by rpki-client on console-fra.rpki-client.org