Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: gqrl0UHB8YgbzEp2c05FQj1GEZiu0FhOEYLtvWCzpp0=
Subject key identifier: 9B:B4:13:A1:02:61:48:11:92:5D:5C:E1:09:26:41:DF:E4:25:94:4D
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 019369D8EF5850D660BF0A7BD514DFBF55C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 11AB
Signing time: Tue 26 Nov 2024 19:00:44 +0000
Manifest this update: Tue 26 Nov 2024 19:00:44 +0000
Manifest next update: Wed 27 Nov 2024 19:00:44 +0000
Files and hashes: 1: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: kpcevjaGhuBs63D5wgGpHULgFYl8G9iollsEBp43X5A=)
2: s5moLvIi9RIWPUK4RGmT3EqxbeQ.roa (hash: zB0CAs3QqvlV5ZY6fP4I7dxwolGLefS7MYK2gYSxSTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:ef:58:50:d6:60:bf:0a:7b:d5:14:df:bf:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Nov 26 19:00:44 2024 GMT
Not After : Nov 27 19:00:44 2024 GMT
Subject: CN=9bb413a102614811925d5ce1092641dfe425944d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:2c:7d:96:bd:5e:8b:06:fe:4d:fd:b2:08:
a2:5a:e7:d1:41:18:bb:06:21:be:b6:2c:c4:5f:5f:
1c:9e:22:2d:d4:a8:5d:b3:14:8d:d2:f0:b1:d7:e4:
b4:17:0c:3c:4e:52:3b:5d:b4:c7:49:45:bc:2f:29:
b3:2e:29:f8:e2:9f:98:29:7f:3a:ff:49:7a:e5:d7:
3b:8b:46:8d:0b:d3:d3:26:40:76:a1:7c:b3:df:5a:
d1:a2:7f:09:cf:c0:2c:b5:66:a8:42:da:5c:85:71:
f0:f9:37:8e:fb:a7:fe:9f:19:3f:3a:32:3a:26:f6:
83:1e:2a:fa:29:c6:58:f0:fb:48:48:1f:da:04:2c:
d1:c6:d8:22:0c:48:90:61:e1:2e:e2:09:86:66:40:
0a:60:45:a6:8b:7a:bf:0a:9f:31:b6:c4:21:43:5f:
b7:f1:f4:6b:23:59:20:5e:e7:0f:b8:aa:33:1d:52:
00:4e:6d:64:10:e4:97:51:25:f0:32:b1:b9:1e:db:
de:04:9c:49:41:0a:3c:a0:fc:c0:c5:56:8c:08:5b:
19:36:80:a0:06:2a:a9:0e:7d:c0:e7:4c:49:78:e4:
b8:60:82:8a:f9:72:8e:84:c8:d6:cc:d7:fa:ae:74:
21:40:83:88:81:52:d0:3c:54:65:06:a1:a0:28:54:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B4:13:A1:02:61:48:11:92:5D:5C:E1:09:26:41:DF:E4:25:94:4D
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e4:3b:a1:a2:62:cc:2f:eb:28:58:ad:a9:3b:9e:0e:f6:d7:
f6:46:06:07:dc:be:a1:4b:04:0e:9d:f0:ac:ba:02:cc:d0:a4:
a8:a0:45:e9:a4:c8:b3:26:70:e1:4c:12:86:bb:1e:94:19:79:
db:b0:74:f4:90:33:77:ff:51:2e:9d:59:f0:c3:82:d2:6a:70:
2e:8d:37:b0:c8:2f:76:01:75:ed:81:79:70:d6:8c:06:a7:67:
c2:cd:fd:0a:8d:12:e0:16:52:66:95:9f:c6:de:11:ac:00:f1:
45:9d:e3:95:5c:65:2f:67:73:8a:1e:19:88:29:64:c1:2b:c6:
4f:82:32:f4:a1:f1:06:06:99:9a:de:42:69:ea:eb:b3:c9:1d:
40:6a:93:36:18:c4:0d:d2:cd:30:29:47:dd:1f:ba:d3:79:b1:
a2:1b:56:b4:e8:98:67:63:64:58:be:b7:db:b4:ef:a6:a0:3f:
db:aa:78:fa:3c:d2:a9:2c:3e:97:cb:49:fd:f2:59:30:99:74:
d7:8e:50:f6:ad:4c:66:ed:05:f1:17:92:cd:2f:01:8a:9f:3d:
c7:43:28:63:56:97:82:ce:24:1c:5b:e5:60:94:02:67:48:7d:
bd:f2:f4:97:a9:f5:c8:b7:bc:49:08:19:1d:60:18:28:60:2f:
10:d5:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:21 2024 by rpki-client on console-fra.rpki-client.org