Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: HNr1iNg9pP1vgKwOH2Hl40XQVtg+a86m6FwpKgy37dY=
Subject key identifier: 1C:2A:F8:E7:80:9A:42:8D:2C:45:A5:81:C8:E5:FA:3F:7E:48:16:1D
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 019365C4D9CA7A2552723B05A4FB3E9205D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 036A
Signing time: Tue 26 Nov 2024 00:00:19 +0000
Manifest this update: Tue 26 Nov 2024 00:00:19 +0000
Manifest next update: Wed 27 Nov 2024 00:00:19 +0000
Files and hashes: 1: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: l9xkds0RTGuDnadN2S0s0gHQZQ3G+PBfgya5t/qSyfs=)
2: XXO-eiQCCswvsOOOEBsiqiI1cGo.roa (hash: iWvLZo5B7qC7wkFDLN8Kb5Zc3x3qrV051nPJ6vNSWUQ=)
3: e_6i7A3QGxMV_hm-ktYiXcNRaeg.roa (hash: on5VcvcKB/eGxewEimFDdM1FiW4Nsis5X+HxARyWdi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:c4:d9:ca:7a:25:52:72:3b:05:a4:fb:3e:92:05:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Nov 26 00:00:19 2024 GMT
Not After : Nov 27 00:00:19 2024 GMT
Subject: CN=1c2af8e7809a428d2c45a581c8e5fa3f7e48161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:95:df:13:94:7e:29:e6:86:aa:69:33:58:
38:f7:0c:71:00:ef:1c:8b:89:62:8f:f0:16:72:72:
e5:41:95:9c:56:0c:7f:bf:c6:f7:4b:36:f2:b5:7f:
a6:ef:04:29:60:45:92:93:b4:43:0b:0e:25:65:7e:
73:c4:cc:c4:12:36:7e:7f:63:ee:ed:85:17:a9:81:
00:23:63:61:a0:62:6b:38:94:f5:11:7f:95:01:4d:
66:fb:37:02:40:ee:6c:f3:ca:6d:f9:e8:ce:ca:24:
1e:25:19:15:b2:e4:c3:c2:1e:f3:91:57:47:37:b9:
07:3e:d5:48:f3:da:5c:93:ac:23:42:86:67:9f:fc:
cf:29:9f:b2:a5:4b:6a:07:e1:dd:b4:e2:9f:93:13:
2b:0c:58:a0:b6:0c:27:5c:21:1a:f6:10:1c:b2:e6:
99:b7:1c:04:05:ab:75:f5:fc:c7:5c:c8:b1:f7:d9:
f5:ad:c9:a0:51:e2:1d:b1:0c:3d:94:a3:97:6e:2c:
bb:2c:f2:0f:30:f4:06:8a:a3:83:80:e5:44:fd:ab:
15:50:3d:a7:13:1e:23:eb:b5:97:72:6e:db:fc:bd:
60:a5:a2:a9:65:80:c0:e5:bf:a7:7b:fc:d0:c3:f3:
99:d0:9a:61:44:32:24:4a:df:ec:cb:4e:7c:2c:cb:
32:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:F8:E7:80:9A:42:8D:2C:45:A5:81:C8:E5:FA:3F:7E:48:16:1D
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:90:58:4e:cb:b0:a8:b2:1c:31:0f:8f:f2:5c:48:fc:cd:86:
0a:34:be:3a:f0:5a:e0:a6:02:e8:8e:42:70:dc:2c:5f:76:65:
01:04:52:d1:25:a6:fe:51:e6:e7:a8:0f:8c:29:2c:c4:2f:a4:
e9:66:c4:15:f7:fd:cf:2f:f2:86:51:50:fd:1e:fe:cb:db:b6:
13:da:b0:92:9f:15:bc:ec:fd:2e:c1:f2:e1:3e:ac:b8:9e:e8:
6c:ce:05:23:44:86:60:8e:96:af:c1:26:08:f3:23:73:13:af:
36:a3:1f:65:79:fd:1d:40:ff:a0:7c:e7:0f:e1:de:3e:59:6f:
f8:43:5a:62:8b:ac:bc:40:77:2f:39:53:e7:3e:82:c2:d3:ec:
ab:b8:c0:12:25:ff:4f:52:48:17:ba:36:f1:26:62:ba:59:b6:
c0:05:b7:ab:5d:cb:da:5e:0f:ea:8c:cd:ed:01:c6:ae:53:81:
c8:ed:12:8e:cc:58:3a:c2:eb:93:18:a5:2e:1e:ba:f5:ba:55:
5c:e0:d2:d1:55:10:ba:77:67:b3:fc:d2:98:56:d3:a1:63:53:
9c:3c:4a:fc:43:fa:31:92:13:ca:11:bc:3f:48:ed:f6:89:a5:
40:64:8f:f6:98:cc:3b:35:3c:7f:34:df:cf:d8:07:9d:1f:d3:
6a:dd:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:16:17 2024 by rpki-client on console-fra.rpki-client.org