Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File: IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier: usjlZvIDWiJwmfK+3S+WQ4NigDBnlY8OfPTGDf0SAr8=
Subject key identifier: 82:FE:9D:4C:D1:9D:FB:15:79:4C:84:C1:3D:23:B6:FC:E8:D3:4A:D2
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019363690AB26C8AF567C60DD4A0D685B215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number: 10B2
Signing time: Mon 25 Nov 2024 13:00:48 +0000
Manifest this update: Mon 25 Nov 2024 13:00:48 +0000
Manifest next update: Tue 26 Nov 2024 13:00:48 +0000
Files and hashes: 1: 07NWID6jL0m5jirJinvrrEJ4kNU.roa (hash: 9WZ9BexeSLxuwcQaPTctipRPoq8r5S6vpHcmIv4h3eg=)
2: BAOQzdYO52x5pHX4hBMM3XiCEcM.roa (hash: 2IOWLlDaPWkY3HIF7qq9PR5LxTzh41NtrMS4tChz3zM=)
3: DnnsgAS5y0LUX_6yAETNrAg5FjY.roa (hash: NrNAPqDPZQjIfbjbFOMBVEkPuLSBi/e3igCi8I65Qhs=)
4: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: UYaAbNYglH/Q46jSWOCK9OgbBBKqfNkU3oobvvDRBsw=)
5: P8iOL6sNbyT27rc5CMFHFJksCeg.roa (hash: lpEt2ZPxtqo4PRq5v3/kiJ3Zf3sZszL7ruxt2HHEMqo=)
6: PswHu72EXw-9uVwXFSkur3b8WUo.roa (hash: U1MGzETJsMRdLoLvQpIYrFdD62RfExlGvaak4z7I4Cg=)
7: Sbf_XS2_PTdkgRN73ERJ5kpCiBk.roa (hash: nnyt7doHD3rvbRLG4Y7ikSpWhPPEEDnQ/LAOOsa6brA=)
8: gYWRW67XbhEYEAtBzXVGyMJ2iV8.roa (hash: xn5Qu6TrHpydk557pLufqdlLEgVHlgWw7N1ZzCJhZE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:69:0a:b2:6c:8a:f5:67:c6:0d:d4:a0:d6:85:b2:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Nov 25 13:00:48 2024 GMT
Not After : Nov 26 13:00:48 2024 GMT
Subject: CN=82fe9d4cd19dfb15794c84c13d23b6fce8d34ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:3d:23:d9:e6:02:45:09:df:17:7f:7b:61:
9d:ea:9d:73:34:5f:32:6c:5e:54:57:11:f7:e3:9b:
4e:a7:6e:1f:0d:7c:15:ba:2e:ce:b4:a0:d4:64:db:
ac:7e:7b:90:14:a8:29:7a:e9:b4:88:b2:54:a8:ed:
6f:a7:df:c7:c3:84:af:eb:6f:4b:ba:92:76:05:55:
69:55:95:1d:8a:4f:4e:a9:67:9d:e7:d4:48:95:7d:
da:6b:ce:1e:10:d7:c2:96:25:ce:24:16:cd:76:d1:
87:d6:a2:d8:d4:c3:58:70:fc:25:b3:4d:d0:d8:6d:
90:fb:23:de:f3:fd:03:5a:27:57:4f:20:ac:74:4b:
38:a7:d8:4e:5c:e7:60:0b:2f:17:8e:e0:55:80:c7:
f6:ef:9e:f2:0b:0a:42:dc:dc:c6:1c:26:f7:91:be:
9d:58:f7:3d:2c:95:eb:47:b8:79:e7:dc:3d:85:bf:
fd:a5:a6:1a:4f:1d:f9:f4:12:9b:ea:93:7e:92:64:
c6:d0:19:74:01:4f:36:da:d8:cc:1c:7d:7f:77:2b:
69:ae:a5:26:20:cc:f5:fa:a9:e7:05:77:94:f1:eb:
2b:f5:9d:2e:7a:a3:a7:00:c0:99:4e:a6:8f:70:b1:
72:38:d0:4e:12:83:08:8a:f3:eb:38:55:b2:fe:34:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FE:9D:4C:D1:9D:FB:15:79:4C:84:C1:3D:23:B6:FC:E8:D3:4A:D2
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6b:b2:d5:7b:c9:d5:64:11:f0:1d:17:50:73:50:43:2d:1c:
d3:32:44:57:20:17:b7:eb:d5:bd:6c:e7:ea:01:47:f5:4f:0e:
5b:f9:88:d1:16:24:c0:45:f2:51:f5:f1:05:bc:89:21:55:00:
d0:bd:ab:57:6d:52:ea:fa:49:e8:78:32:29:6a:70:25:c7:bc:
cc:b8:81:04:f7:b2:d2:9d:1d:ab:1c:0a:4b:55:a3:e2:93:26:
2f:0e:68:9d:dc:12:99:9f:a9:f0:3c:ea:8f:c9:34:3c:b3:15:
81:76:7d:0d:38:b6:28:6a:3d:84:90:f6:69:85:5f:e6:d7:a7:
df:0d:0a:16:f3:33:60:87:68:fb:f6:cb:86:04:25:b9:7e:b1:
68:eb:59:c5:23:55:31:5b:4e:6d:ee:96:b2:f3:eb:7a:28:a3:
41:b1:85:ed:1d:52:fe:17:5f:39:20:34:dd:8f:ee:4e:c8:67:
d6:64:4b:f8:f3:93:b9:1b:71:c7:96:44:a2:c5:f2:69:22:55:
68:f7:61:f4:87:46:57:d2:20:03:77:a6:80:8d:3e:d9:a7:d8:
b7:37:fd:26:5b:ae:3d:21:b3:a0:39:18:bd:35:b8:c4:cc:30:
d2:f6:5c:74:28:c5:07:ed:b3:27:b7:d1:a5:a6:3a:29:37:9b:
f7:b7:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:17:42 2024 by rpki-client on console-fra.rpki-client.org