Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: F9xIDMHU10ApTyXaG3mk35924VClyDO6qELaWy2wMB0=
Subject key identifier: 6D:71:CA:9C:83:1B:AC:63:E6:21:9C:40:F8:89:61:0A:1D:1C:4D:3D
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 0193568AC2CCCB35220D876631C753BAE2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:02:34 +0000
Manifest this update: Sat 23 Nov 2024 01:02:34 +0000
Manifest next update: Sun 24 Nov 2024 01:02:34 +0000
Files and hashes: 1: HvGAbkDvndEozV86olP1mR8Chn0.roa (hash: U47FehNEv9StYT8x1ByFscZWk5t/Vr9aPBPYaSr1JiE=)
2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: 4WsXIZ1rTAvhproY95Ry50uOD6xO0qGATlPdPkHgT80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:c2:cc:cb:35:22:0d:87:66:31:c7:53:ba:e2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Nov 23 01:02:34 2024 GMT
Not After : Nov 24 01:02:34 2024 GMT
Subject: CN=6d71ca9c831bac63e6219c40f889610a1d1c4d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7f:c8:a0:9b:31:20:14:61:58:95:b3:40:b0:
e4:38:a8:5b:e7:7f:e4:7f:44:35:eb:d8:cd:b8:ea:
88:b1:b3:a8:2e:82:56:fd:f3:b8:48:38:e9:c1:a7:
7d:13:ff:63:21:40:3b:4a:96:b4:25:a7:d7:6f:93:
7d:c6:84:81:56:ba:a4:6b:c9:fc:49:35:03:a6:dc:
ee:59:c0:78:45:43:0e:f6:48:1b:2c:42:66:41:4f:
3c:54:f0:e1:9b:04:ba:14:f4:5a:72:de:31:26:3a:
0b:76:1a:a0:1a:d9:8b:64:f3:72:16:35:3c:0d:35:
63:ba:43:c8:8a:00:2f:ca:ac:9e:cd:f5:28:54:10:
10:04:bd:e3:88:00:0f:83:d8:df:24:56:09:ce:08:
e9:97:08:c2:d7:96:57:b1:1f:09:74:87:2f:99:b1:
16:7c:48:36:b2:5d:d7:4d:ef:3d:6b:ae:2c:10:7d:
f8:00:21:9a:c5:03:0c:8c:a1:e4:54:d4:7a:3a:cb:
86:de:38:98:73:d3:67:02:28:dd:51:ee:ba:e5:31:
7d:0e:a9:52:ac:3b:71:35:cc:24:c2:39:b0:4e:6e:
03:a6:d9:b1:61:cd:b9:38:a0:9b:10:23:c9:a6:80:
65:3e:4e:4d:ba:c2:e3:26:e1:dc:e2:6b:de:49:7c:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:71:CA:9C:83:1B:AC:63:E6:21:9C:40:F8:89:61:0A:1D:1C:4D:3D
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:23:5d:42:07:58:f1:c8:d4:92:6c:ee:f3:dd:68:14:6e:b7:
57:33:a5:e0:05:59:3b:40:dd:48:4a:e4:6a:70:af:9a:b2:ae:
df:c2:09:e9:dd:de:6c:bc:67:29:9e:84:5c:bd:47:c7:33:ec:
88:35:e1:23:ca:b2:cf:48:96:b1:1e:31:36:ca:f4:dc:5e:7d:
25:97:9d:a1:10:0d:4b:d2:db:70:be:f5:a7:21:cb:b9:ff:00:
fe:6c:63:c3:c0:76:1d:61:e2:cf:b6:88:57:e7:a7:f5:3d:dd:
f3:99:12:f5:ae:a2:12:86:5a:48:38:0b:d2:22:6b:61:f4:34:
68:27:64:33:aa:76:18:f9:05:84:0b:e1:1a:23:83:51:bc:77:
66:9a:de:7b:31:a0:4b:ac:23:01:fb:05:98:16:c5:7d:f4:27:
f3:33:70:31:86:35:2c:49:10:4f:81:72:f4:b7:10:c7:ec:74:
ac:a5:5a:81:c2:56:b9:64:3c:3b:fb:3c:d7:af:17:0c:9e:23:
ee:3a:0c:2c:52:d6:68:2c:37:40:f7:06:3b:85:19:e2:33:24:
65:94:cb:c2:cb:1c:58:01:05:93:4d:05:d6:74:c4:7f:8b:89:
67:c3:0f:b2:83:12:6a:03:c4:36:47:08:06:4e:e5:48:19:92:
e4:d7:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:23 2024 by rpki-client on console-fra.rpki-client.org