Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.mft
File: lIlWwcZ2n0LWBAPeExm_RjRUoNY.mft (raw, json)
Hash identifier: Toe/FbXLWEfi9Jd0JU1bfFXbURCWbFbLMif6tgmuKlQ=
Subject key identifier: 87:83:95:3E:F9:F5:77:9D:91:55:CB:B2:D3:7C:DF:5D:29:43:8F:0C
Authority key identifier: 94:89:56:C1:C6:76:9F:42:D6:04:03:DE:13:19:BF:46:34:54:A0:D6
Certificate issuer: /CN=948956c1c6769f42d60403de1319bf463454a0d6
Certificate serial: 01935274DCF2C2A5D31E09485B9200FA6FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIlWwcZ2n0LWBAPeExm_RjRUoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.mft
Manifest number: 0554
Signing time: Fri 22 Nov 2024 06:00:10 +0000
Manifest this update: Fri 22 Nov 2024 06:00:10 +0000
Manifest next update: Sat 23 Nov 2024 06:00:10 +0000
Files and hashes: 1: dfDy_jmvFF391d5s2WSD8NpYSFM.roa (hash: ybwal1NjyKAJB/4R7x+Pijd35yCDBTirebrHvhdg86w=)
2: lIlWwcZ2n0LWBAPeExm_RjRUoNY.crl (hash: DZgi90NkB/6QWrzFVmf1juuW83BO5rcMMFUCYs0Ri0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIlWwcZ2n0LWBAPeExm_RjRUoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:74:dc:f2:c2:a5:d3:1e:09:48:5b:92:00:fa:6f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948956c1c6769f42d60403de1319bf463454a0d6
Validity
Not Before: Nov 22 06:00:10 2024 GMT
Not After : Nov 23 06:00:10 2024 GMT
Subject: CN=8783953ef9f5779d9155cbb2d37cdf5d29438f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fb:59:35:ad:b5:08:c4:11:e3:f6:de:04:88:
18:4a:33:0d:0d:61:eb:f7:2f:df:f0:d0:20:bf:f1:
95:19:97:57:a7:4d:17:4b:cd:cb:c0:1f:a8:9d:8d:
4d:8b:d5:74:8c:13:1e:26:2c:6e:17:aa:90:65:9d:
20:47:ce:6e:69:d2:a6:3a:6c:d7:fd:dd:a2:7d:79:
59:c6:48:cb:db:f2:e1:b3:15:13:67:4f:dd:bb:f2:
a3:c8:1f:53:0d:ca:c6:3c:2f:ee:2f:6c:18:0f:e2:
ba:70:c5:23:d1:f3:a7:cd:e4:27:5e:de:53:63:65:
c2:82:80:03:b8:b9:a2:1a:77:dc:3b:5a:96:85:c6:
c4:f2:6d:76:45:2e:da:f3:01:18:99:a9:25:ff:df:
93:f2:38:f9:4f:d7:20:0e:65:53:13:8b:bb:59:33:
92:ee:73:4c:92:eb:81:84:65:0f:36:5e:e7:fc:75:
6f:bf:c8:ca:ea:d1:8e:4e:94:30:f4:67:50:2b:4d:
57:f0:22:11:24:b2:6d:ce:ce:c9:93:29:f5:f0:d7:
16:24:9a:95:b0:95:cc:7c:4b:e6:47:5f:94:93:a4:
5b:e4:1d:23:aa:9e:9e:49:be:41:25:ce:1a:0e:1f:
a5:7b:a6:77:74:6a:b4:a1:bd:bb:84:d5:9a:5a:aa:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:83:95:3E:F9:F5:77:9D:91:55:CB:B2:D3:7C:DF:5D:29:43:8F:0C
X509v3 Authority Key Identifier:
keyid:94:89:56:C1:C6:76:9F:42:D6:04:03:DE:13:19:BF:46:34:54:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIlWwcZ2n0LWBAPeExm_RjRUoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a3869-37a2-4960-8415-4971e8a0c900/1/lIlWwcZ2n0LWBAPeExm_RjRUoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b5:f6:5a:f7:08:12:1f:56:f2:13:69:1f:bd:70:db:15:35:
99:ba:aa:37:c0:98:27:66:50:d9:1a:4b:45:4c:7a:4c:79:ea:
71:12:fe:b1:be:1f:5e:d0:12:ed:30:54:ea:9b:99:ea:47:12:
52:f8:8a:b6:df:93:a6:76:c8:d3:93:b0:56:65:e1:02:cd:b8:
b4:7b:1f:bf:2f:f1:9b:c4:0b:3d:a2:e2:31:1d:ef:0c:e3:9e:
c8:1f:fb:ac:8a:73:ac:fe:2d:fc:fc:a5:e2:86:6f:0f:8c:74:
57:3e:9a:3d:09:28:26:75:fc:ab:e7:14:35:17:dd:9b:64:b7:
9b:cf:39:3e:8b:91:e5:97:5e:3d:2d:91:e0:84:b8:51:7e:f8:
7b:61:8a:f8:f6:ab:6e:18:11:42:02:87:62:9a:bc:65:ac:bf:
1f:04:e0:f2:14:8a:3a:9f:7d:d1:8e:c5:61:6b:06:3e:89:9f:
2a:ff:c4:76:fd:fe:b5:9b:e2:1c:9e:54:f8:4d:bd:48:44:57:
5f:b1:ff:ac:1e:75:ad:be:95:59:bd:42:be:91:78:1b:4e:49:
2b:3c:2f:ae:a9:9f:8f:fa:07:59:d9:08:cc:78:9c:2a:7b:45:
6b:b9:e3:8f:3d:33:9b:02:5b:15:64:b4:1e:62:bd:76:68:4c:
f7:4a:a4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:41:07 2024 by rpki-client on console-ams.rpki-client.org