Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
File: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft (raw, json)
Hash identifier: 1pO6Trw+xRz8ftuzRBJMyocO10+V40KrVAu+FsGkjJQ=
Subject key identifier: EC:9D:C6:3B:2A:80:C0:34:CA:C7:B4:5A:7A:75:D0:C6:EC:AF:91:E3
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Certificate issuer: /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial: 0193572DA519EE3B4B08C3AEC4A8D04792F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
Manifest number: 0344
Signing time: Sat 23 Nov 2024 04:00:29 +0000
Manifest this update: Sat 23 Nov 2024 04:00:29 +0000
Manifest next update: Sun 24 Nov 2024 04:00:29 +0000
Files and hashes: 1: CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl (hash: PixBjotURW9uNi8cJcvVOCdsbA0r+KVpYHiScMrYdtQ=)
2: ilIazBLCWMrLR4XVHrPv7DdkpsY.roa (hash: ZHG/RSGxIc1A9mWmfB3rC+TW0IMv3EtwwzKfH1kAlR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:a5:19:ee:3b:4b:08:c3:ae:c4:a8:d0:47:92:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Validity
Not Before: Nov 23 04:00:29 2024 GMT
Not After : Nov 24 04:00:29 2024 GMT
Subject: CN=ec9dc63b2a80c034cac7b45a7a75d0c6ecaf91e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:f6:53:c2:02:ae:d6:b9:28:05:36:cf:ee:
1d:2f:ac:28:29:0c:8e:43:af:ce:5e:d6:43:9d:7a:
af:95:e2:0d:6d:50:02:e1:8d:d1:e6:b2:7d:6a:db:
65:87:38:8a:aa:06:b7:c4:f7:1e:ef:e3:40:0e:35:
59:37:c4:c9:7c:c7:ba:6d:12:16:43:63:b1:a4:1e:
7c:8d:b4:13:db:d2:17:3a:b1:e8:31:32:c7:d5:6a:
0b:ba:80:48:2a:95:97:e0:d4:dd:ec:70:68:f8:aa:
11:9f:93:1f:90:0d:9c:bc:35:d8:4e:d2:1d:98:3f:
8c:24:68:37:d9:04:1f:d9:28:cb:fc:28:66:1c:92:
e9:67:af:cc:2f:b3:d4:18:f4:e6:8f:ba:e3:cb:27:
c5:48:95:21:37:47:48:02:28:b9:99:6e:c6:c9:74:
67:d1:33:e5:64:2d:09:d9:63:64:62:87:ac:78:9b:
08:32:6a:23:11:2e:ba:de:a0:b2:85:01:e1:17:90:
79:f9:04:48:cb:2d:ce:7d:cf:c5:d2:90:d7:59:c8:
b2:ed:f6:e7:8c:f9:ac:4b:67:60:0c:29:26:ee:5c:
e2:a5:89:94:5e:9f:29:34:62:15:74:de:76:4d:26:
ac:c6:03:91:d1:0b:a9:61:23:7f:8d:62:90:4b:d4:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9D:C6:3B:2A:80:C0:34:CA:C7:B4:5A:7A:75:D0:C6:EC:AF:91:E3
X509v3 Authority Key Identifier:
keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:21:e2:78:f1:70:4e:67:24:ef:96:fa:c9:81:e5:32:a0:ca:
cb:08:80:dc:5f:60:65:74:a0:a7:95:0c:0e:b5:41:7a:24:d4:
5a:04:bf:ae:4d:40:62:dd:bd:ff:10:62:9c:07:56:b3:36:a6:
a5:07:bd:f5:d1:8d:53:ba:41:ae:82:32:e4:5b:2d:9e:b3:43:
a2:b3:00:b1:43:ef:b4:f7:01:b4:b4:43:d3:d0:fb:7b:b3:69:
18:a3:a9:89:e6:49:e2:90:b4:16:2f:a3:83:ba:44:d8:d5:53:
2c:5c:92:4a:89:d2:f0:38:fb:77:0c:fb:c2:2f:e3:78:31:47:
f5:77:77:55:41:ae:37:f8:69:ae:07:fe:32:90:5d:cc:7b:e8:
f3:9f:3b:fa:5a:93:8d:70:36:48:4b:3c:02:b1:cc:70:2e:d4:
ab:67:62:66:9e:82:56:d6:06:95:0c:2e:57:db:aa:47:7c:ee:
ce:b8:54:b2:8d:48:fa:8e:17:87:1f:bb:03:40:1d:e8:ec:16:
8b:d4:3b:e4:9e:8b:e3:2e:04:b7:f0:3c:bf:0e:ab:4c:53:57:
ab:08:aa:65:f5:bb:0f:c6:7e:2a:73:9b:f5:9d:20:34:8c:8a:
9f:dc:f8:6e:53:98:81:bb:be:f3:f9:ef:4e:f2:bf:7c:37:4c:
57:62:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:56 2024 by rpki-client on console-ams.rpki-client.org