Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json)
Hash identifier: RFcso6ohtrp7iapmogKDemuLi+dP6AwRcXq0vc7aHyI=
Subject key identifier: E0:CF:45:55:69:F7:64:6A:FA:F8:3F:3F:E5:60:C0:3D:F1:D7:0A:B9
Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Certificate serial: 0193549BFA7FA8C321FF89882A61D9500F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
Manifest number: 0505
Signing time: Fri 22 Nov 2024 16:02:08 +0000
Manifest this update: Fri 22 Nov 2024 16:02:08 +0000
Manifest next update: Sat 23 Nov 2024 16:02:08 +0000
Files and hashes: 1: BjqDNqIWtQuc_swoJ7kQC1Jm0fA.roa (hash: bHJQ29/VS+A7/WkEwNda9Ci68L4ccimHC4kkrquI5NM=)
2: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: b+gSTY9dKzgL9+KKxkQ2jlP9AiZz11ugLy1G6I0B9qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:fa:7f:a8:c3:21:ff:89:88:2a:61:d9:50:0f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838
Validity
Not Before: Nov 22 16:02:08 2024 GMT
Not After : Nov 23 16:02:08 2024 GMT
Subject: CN=e0cf455569f7646afaf83f3fe560c03df1d70ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e3:76:9b:e3:cf:bd:58:44:b2:a1:aa:a9:0b:
eb:7b:80:36:84:f2:d3:5c:46:44:c1:b7:e0:61:f9:
04:76:ab:5a:38:b0:d1:35:8a:c3:02:5f:ee:94:04:
71:be:f1:50:04:09:73:b3:56:c3:04:18:de:83:01:
98:ad:89:00:45:87:ff:d5:bb:9d:1b:36:38:75:8b:
89:6d:e8:47:c1:f2:c7:2d:e5:57:77:06:54:b5:cc:
06:12:80:c7:75:fa:3f:e4:2c:5a:be:5c:16:83:f9:
5d:1e:13:9c:f8:5b:82:6a:45:a6:15:5a:0c:c8:29:
95:4b:02:2d:35:f6:9e:3c:2d:b8:9c:90:38:ef:9a:
16:50:97:d0:a9:da:2c:f5:d8:47:7e:d2:ed:a6:62:
1c:f1:01:df:a6:f2:b0:ed:e2:46:a9:48:7f:f3:af:
48:8b:21:32:05:10:01:bb:42:58:97:2e:93:6e:25:
15:c8:68:62:bf:34:7d:05:d5:c1:4c:94:50:dc:34:
b2:45:c7:bc:a0:64:e9:2a:be:e7:6e:56:3d:02:16:
48:25:6b:c6:b4:54:53:05:49:b9:71:80:c6:fa:27:
a8:20:91:f5:99:6a:8b:2e:38:26:7e:76:c5:a5:d0:
3f:57:a2:a2:ea:4b:fd:9e:a7:50:b5:ff:d6:df:e7:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CF:45:55:69:F7:64:6A:FA:F8:3F:3F:E5:60:C0:3D:F1:D7:0A:B9
X509v3 Authority Key Identifier:
keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7a:de:ef:16:e5:06:dd:fe:f1:ad:29:a8:f8:de:01:5a:f1:
cf:45:34:fb:20:15:f4:f6:93:27:95:d4:f4:e9:6c:eb:44:4e:
37:ca:54:12:c3:6e:4c:c1:7d:76:84:ec:69:e3:d9:a4:c1:64:
e1:41:5b:f1:db:8d:93:27:45:9d:47:ec:77:1b:a5:f1:76:30:
b8:0f:01:e0:bc:99:c7:a3:9b:b8:40:dc:f5:25:cc:f2:73:00:
a7:76:4c:97:38:b0:f1:1b:57:75:56:47:dc:0a:a3:a3:d8:65:
d1:fe:27:10:40:f0:07:c2:2a:ad:56:50:46:01:e4:43:d8:51:
c6:f8:4a:eb:81:6f:fc:02:b7:9a:f2:53:8e:05:e8:b7:be:fe:
86:10:8a:51:50:02:4c:0e:56:c3:ab:4e:fa:2f:1e:2e:f7:42:
a3:0e:8e:12:dd:9d:eb:e2:7e:1f:16:90:1e:eb:1f:10:0d:42:
53:be:07:02:60:a2:64:4a:03:80:06:d0:0e:a6:39:ba:7e:c2:
cc:39:f5:83:47:4c:4a:dc:f0:4d:a4:9f:71:8e:60:37:47:16:
1e:cb:c9:b5:90:d6:85:3e:83:1f:7e:08:1c:30:9b:bc:21:46:
95:13:a1:d0:49:75:af:85:3f:f9:83:a9:51:40:e5:2b:be:ee:
5f:d8:c1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:05:51 2024 by rpki-client on console-ams.rpki-client.org