Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: 9xjdsq1F6PhSJYOsC9//Ku8g911994DN+5fOGKcrM9o=
Subject key identifier: 72:FF:E6:AA:40:88:9F:DA:02:73:A6:BE:0F:37:43:FE:E6:DB:CF:CD
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019356F7219AF952A9A4755842DCAB72A0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 03:00:56 +0000
Manifest this update: Sat 23 Nov 2024 03:00:56 +0000
Manifest next update: Sun 24 Nov 2024 03:00:56 +0000
Files and hashes: 1: 5O7EGZ-YPGS7LViYdkAWD94aKAo.roa (hash: yhe5yjeQiEWOuuL/WG8FI6Qh7BiD146+ixWJuLj8P9I=)
2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: ro0db3lKgKOX1zgZBrQL/gyxlOFSwtaa7Qv4aqK1Se8=)
3: nd6UaVxd_D7vsr3bkwQF6-gyCG8.roa (hash: 3Q/jn3FHXZUVQEH27wPd7CkcjgJ+DjfHku5Vp2ZgSk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:21:9a:f9:52:a9:a4:75:58:42:dc:ab:72:a0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Nov 23 03:00:56 2024 GMT
Not After : Nov 24 03:00:56 2024 GMT
Subject: CN=72ffe6aa40889fda0273a6be0f3743fee6dbcfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:aa:ce:eb:5a:80:07:ab:df:cb:5c:59:a9:
b8:f4:f6:cf:fa:fc:2c:2d:75:0f:1f:b9:d9:21:34:
80:2a:88:ee:29:b5:05:39:f4:16:4c:92:d7:55:74:
a1:98:ab:01:3f:e0:44:e2:e4:0d:82:2e:57:44:80:
13:e6:e2:48:65:d6:4a:24:d1:b9:f3:bb:c5:bf:f3:
97:6a:99:1c:d3:5f:eb:73:95:13:e1:e6:2d:6c:8e:
59:fa:54:17:69:0f:ff:9f:ea:ef:e2:cd:d0:e6:76:
ea:ff:5f:17:25:af:99:cb:eb:08:aa:1d:c9:9e:33:
ca:16:74:50:02:77:ca:33:71:79:6d:9c:61:fe:66:
60:bd:b8:06:84:37:2d:47:fc:aa:e1:36:d9:ad:31:
c3:a0:b1:06:fd:09:28:6c:d3:5a:45:0b:56:d0:98:
f3:62:9e:47:ec:6c:9b:2c:0c:ac:03:c4:77:e6:4c:
af:93:85:2a:0e:b5:17:ea:74:95:56:49:51:fc:90:
8c:ec:48:04:3c:6b:fb:ba:c9:ea:97:23:ed:32:19:
9d:dd:9d:b2:36:f1:5c:ed:f8:c9:29:88:00:15:36:
78:cf:50:0e:6d:3b:65:b0:15:8b:56:a4:17:35:dc:
dd:57:db:04:3c:0e:b5:af:e8:27:76:53:ca:f0:4d:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FF:E6:AA:40:88:9F:DA:02:73:A6:BE:0F:37:43:FE:E6:DB:CF:CD
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0c:84:df:27:db:84:78:ee:9b:35:ee:22:f9:77:fe:3a:33:
fe:98:06:e9:81:7d:35:94:a2:7d:ec:91:ca:73:95:2a:9b:19:
4e:9f:4d:03:21:0f:c6:fe:8e:a1:84:15:35:04:13:43:5a:59:
a4:19:da:22:e0:be:5b:4a:79:aa:a8:ca:70:0b:c5:99:39:e9:
b9:07:ac:20:bd:95:d9:74:60:91:36:dd:21:2d:3a:a0:74:97:
2e:ab:77:30:e4:ee:3f:90:e1:a3:ae:51:83:1b:96:a6:ac:a2:
6d:2b:c2:4a:9a:df:91:45:76:6c:8f:ee:b4:86:f6:05:6f:71:
d6:10:2b:46:d4:e4:56:97:4b:c1:47:d5:4d:4a:3d:87:cf:17:
2b:30:5d:e8:93:73:ea:07:97:21:d3:31:75:61:2d:6f:42:52:
4d:b4:ac:22:1b:a9:38:f4:4a:1c:ea:7b:22:59:a5:68:32:e2:
9e:c7:0d:ed:e7:cd:fe:70:6d:7c:a3:b1:43:4f:dc:e3:71:6d:
15:e0:8e:f0:71:7c:e5:e3:26:ed:02:db:0e:0a:47:4d:2e:05:
30:5f:77:d7:44:f6:fc:37:c5:08:c9:1c:3b:73:e8:00:3d:4d:
10:fd:37:fe:6b:e3:90:05:93:49:14:a1:41:f6:73:81:80:99:
8c:96:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:20 2024 by rpki-client on console-ams.rpki-client.org