Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: 1/BW8PjQ9HVu93shsvj8sTih0J7r4IKIVLc7fgDzQNw=
Subject key identifier: 98:70:B6:E2:55:46:57:6F:AB:A0:FE:80:CA:D4:7C:33:AD:1B:14:55
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 01936A7D6890FAB1DA36A0FB125E9DF1C367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 074B
Signing time: Tue 26 Nov 2024 22:00:23 +0000
Manifest this update: Tue 26 Nov 2024 22:00:23 +0000
Manifest next update: Wed 27 Nov 2024 22:00:23 +0000
Files and hashes: 1: H7ZarTI9x30LTio2uaInw4l0cbU.roa (hash: FUVM7vZBSUp2Z9wOg1NUZK9yE+BZSDKZPAUy162MtTQ=)
2: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: alu81h24NtQ+fXQ0TsFNgcLlfw3vKCHMpLOxTWli1qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:68:90:fa:b1:da:36:a0:fb:12:5e:9d:f1:c3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Nov 26 22:00:23 2024 GMT
Not After : Nov 27 22:00:23 2024 GMT
Subject: CN=9870b6e25546576faba0fe80cad47c33ad1b1455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:2b:57:d3:2a:57:b0:e0:d4:61:a6:9f:17:
9f:b9:6c:bc:44:78:40:e9:f8:1c:8d:f8:4f:f3:d8:
78:c1:29:e0:b0:4b:22:94:8b:44:21:5e:04:ac:f9:
c4:94:cf:e3:56:ee:c0:e1:c3:ba:24:fc:93:23:52:
8c:ee:c9:40:47:af:df:2f:16:09:ea:f5:40:a9:d5:
51:4d:9b:1c:49:68:a5:67:85:c8:e2:e3:57:0d:53:
2d:90:a7:cf:c4:df:ea:bd:92:86:d9:9c:9d:78:e5:
2e:ba:be:a1:fe:8a:67:a0:48:f7:c1:96:33:8e:12:
6c:e3:ac:50:82:1e:ec:79:84:fe:d0:f6:f0:fe:ea:
cb:b7:fd:78:13:18:1b:79:bc:13:e1:d9:da:06:62:
cd:39:71:42:8a:94:66:8b:45:8e:d1:1d:ef:96:c6:
09:db:b2:5c:de:d2:a9:a6:1b:cf:c9:43:a8:81:7f:
b8:c7:a5:b2:a8:fa:ef:40:3a:cb:d3:2a:d2:d3:3e:
b5:dd:5d:c0:99:5c:0a:05:10:3d:a7:df:25:43:21:
8f:18:63:d7:04:72:43:e3:39:5e:63:37:1f:54:ea:
d1:92:0c:54:88:85:cf:b4:bf:a6:67:a2:c0:b9:a7:
fa:4d:df:40:83:14:f4:c0:5a:9b:48:70:28:b3:c8:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:70:B6:E2:55:46:57:6F:AB:A0:FE:80:CA:D4:7C:33:AD:1B:14:55
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d9:c5:4d:56:73:12:53:ff:02:60:6a:0b:92:e8:49:2f:3a:
40:10:63:8a:3d:b0:92:8c:fb:5d:a1:d2:2e:16:f4:2b:a7:b6:
fd:4b:18:ef:6a:97:13:d3:6d:15:48:a2:e3:47:0e:b9:d8:f7:
c6:e3:1f:15:7c:7d:b2:4a:08:97:49:ed:33:c9:33:61:67:1c:
99:d9:a2:ca:33:df:c0:bd:e6:3f:30:70:5b:f8:0d:d6:00:90:
d0:0a:7d:29:9e:3d:72:67:67:d1:08:fa:e4:57:1e:8c:da:ce:
ae:67:b8:76:1b:5e:93:21:eb:aa:29:81:fa:2a:51:e1:7c:67:
13:2c:ba:58:71:6d:32:e0:d0:fb:38:4a:18:57:35:bb:de:3f:
49:c4:79:c2:1b:69:73:d6:06:6b:8e:88:dd:7d:51:77:d6:01:
ca:33:77:6e:34:ba:89:66:4b:0d:94:b1:df:ca:f1:c1:d3:cd:
46:79:94:ac:3f:d8:7f:cb:49:ef:e8:89:b2:1a:b0:7c:d4:b3:
90:e5:38:fd:4a:e3:bf:c1:23:a8:95:d6:20:58:e1:71:6f:64:
33:53:b1:ea:bb:87:d8:f4:1b:ac:78:db:76:c3:a3:34:ca:de:
2f:ad:41:00:1c:b0:3b:ef:55:57:9b:20:b6:ee:b9:45:3f:b3:
49:73:d0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:51 2024 by rpki-client on console-fra.rpki-client.org