Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
File: To25ZDiURsq8r3lBzRmDQsIzbdA.mft (raw, json)
Hash identifier: ZOMzzhnjRqipS2l2OXPbrAO4lFaGdfcnxUOSuTiQqeo=
Subject key identifier: 34:36:63:E5:C6:EF:B7:23:5F:19:0E:1D:DC:0F:E5:62:B2:29:CF:40
Authority key identifier: 4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
Certificate issuer: /CN=4e8db964389446cabcaf7941cd198342c2336dd0
Certificate serial: 01935764C45CB409F70FB6515023ECAAF212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
Manifest number: 0522
Signing time: Sat 23 Nov 2024 05:00:41 +0000
Manifest this update: Sat 23 Nov 2024 05:00:41 +0000
Manifest next update: Sun 24 Nov 2024 05:00:41 +0000
Files and hashes: 1: To25ZDiURsq8r3lBzRmDQsIzbdA.crl (hash: qRdaLmvC2XZiLIS8Qb8ellMf/9tnvShbuSfrMBzDV+Y=)
2: WTCvtBe919krc0kD_uCIEPo86io.roa (hash: EDkDVLTTxkraoKPoDVIEvPMI8lnoedvpH6c+FCs+eb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:c4:5c:b4:09:f7:0f:b6:51:50:23:ec:aa:f2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e8db964389446cabcaf7941cd198342c2336dd0
Validity
Not Before: Nov 23 05:00:41 2024 GMT
Not After : Nov 24 05:00:41 2024 GMT
Subject: CN=343663e5c6efb7235f190e1ddc0fe562b229cf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f4:50:40:e5:0a:cd:86:0b:6b:89:2a:72:35:
e5:23:50:ee:e3:46:2d:6f:87:be:48:7d:27:e1:07:
a4:3d:d3:21:85:3b:ac:b4:12:df:f8:81:4e:70:97:
52:ad:e6:16:62:20:bf:2a:1d:ad:55:28:28:37:7f:
b4:8a:8b:c5:ab:73:bb:8b:40:dc:3d:e8:09:0d:f4:
0d:76:bf:2f:46:94:ec:05:f9:b1:a7:71:5f:b8:a3:
f6:23:10:e8:1f:7b:22:29:e4:ae:61:fe:e8:99:78:
a9:86:a2:c2:75:63:31:ae:5d:ad:57:b5:3f:5e:e1:
ab:0c:aa:7f:84:5f:c1:44:b5:41:10:09:dd:42:2d:
65:e0:a1:ae:b4:89:1a:cd:e6:7e:1b:ec:2a:d5:c3:
4b:65:c8:f7:8f:f4:c5:d4:0f:c4:68:ca:1e:5d:c2:
5a:ae:c1:43:eb:d8:06:ba:23:f2:22:e3:a0:99:2c:
2b:9f:c4:a4:d9:17:f6:2e:e3:ee:4c:fb:9a:6b:47:
a9:82:ac:3e:cc:73:ac:f0:99:32:d7:49:00:e4:fd:
69:a6:f9:31:db:df:f6:8f:7c:12:47:ea:19:e2:da:
1e:84:5f:25:2a:0a:4d:53:3b:8c:37:5d:43:b7:ca:
27:8c:6d:29:06:a4:75:63:34:55:53:dd:36:f9:4f:
aa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:36:63:E5:C6:EF:B7:23:5F:19:0E:1D:DC:0F:E5:62:B2:29:CF:40
X509v3 Authority Key Identifier:
keyid:4E:8D:B9:64:38:94:46:CA:BC:AF:79:41:CD:19:83:42:C2:33:6D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/To25ZDiURsq8r3lBzRmDQsIzbdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b3961c-3f68-45c1-a04e-95469bf09340/1/To25ZDiURsq8r3lBzRmDQsIzbdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:99:79:10:8d:cf:7d:69:78:56:6c:90:ce:da:2d:de:f5:1d:
88:bc:11:08:89:78:62:49:3f:4c:4c:93:da:90:40:3b:23:c7:
7d:7a:56:a5:fa:28:9a:d9:d2:66:f3:d6:5a:f4:d3:1e:26:23:
8a:ce:b8:49:ff:dc:12:e0:fe:79:45:42:0f:a5:7e:ed:91:4c:
2a:50:54:9e:f6:2c:1a:9b:63:aa:25:23:40:da:97:20:ee:ae:
a1:2a:1a:d5:2c:ad:a3:58:4f:1d:c1:69:81:a6:43:00:ec:5f:
4e:ea:55:09:9f:24:e2:b6:5f:c7:5a:96:ad:36:b6:55:92:8f:
c6:b4:95:ce:8f:1d:10:e8:01:fa:a6:a9:8e:83:1a:9b:d7:66:
93:41:e4:8b:fe:4e:0d:a4:7a:2a:d2:5c:e9:96:51:26:d4:4b:
f7:a4:13:c5:48:2c:f5:ec:bd:56:91:49:e3:c1:8a:e9:66:37:
60:38:e6:07:f6:dd:35:98:f7:ac:0d:69:fd:17:2a:98:54:19:
a0:7e:3f:80:c5:e5:e1:af:5b:f6:9d:ab:fe:bc:ab:29:69:1c:
93:c3:fe:3e:3e:18:8b:0e:ba:7b:bf:33:ff:52:7d:8b:0b:02:
ba:39:8e:a8:c9:e8:6d:c2:3d:e7:91:09:c0:f9:04:78:09:c9:
c3:64:5b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:05 2024 by rpki-client on console-fra.rpki-client.org