Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
File: x3cBNdDw0wqGjfVR2HUtS0utwsE.mft (raw, json)
Hash identifier: VQHV7hXVSCZK+UrNnRSa+uc1jMrfLaIEZhFgAdNZSfQ=
Subject key identifier: 9A:D2:CA:56:BC:35:7D:35:AF:9A:E6:67:DE:D9:6C:D0:CC:C1:7F:17
Authority key identifier: C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
Certificate issuer: /CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Certificate serial: 0193572D6BAB260F3D897C0A86A2F624F134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
Manifest number: 137B
Signing time: Sat 23 Nov 2024 04:00:14 +0000
Manifest this update: Sat 23 Nov 2024 04:00:14 +0000
Manifest next update: Sun 24 Nov 2024 04:00:14 +0000
Files and hashes: 1: cCn90OjAoQU67DS7qpqLwGzvcdU.roa (hash: mHw4fsPqQ906Pz1p29c/ONgFxjgvaWw5bmFwvoffZuI=)
2: ueXErPRt9vifMuV8GlmOLMofjOI.roa (hash: H9qvMzmLopadybBfGhNM2Fbjhhw05F89DnmBX1c6dLs=)
3: x3cBNdDw0wqGjfVR2HUtS0utwsE.crl (hash: zAdvrHjACHDjd8LtHt/9Nv1w/EkqPPpCtqQYkpxmhpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:6b:ab:26:0f:3d:89:7c:0a:86:a2:f6:24:f1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7770135d0f0d30a868df551d8752d4b4badc2c1
Validity
Not Before: Nov 23 04:00:14 2024 GMT
Not After : Nov 24 04:00:14 2024 GMT
Subject: CN=9ad2ca56bc357d35af9ae667ded96cd0ccc17f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:b6:3e:d5:0f:4c:73:98:03:9f:03:f3:d6:
e1:31:ab:f5:cd:4a:7b:7f:af:71:8d:03:24:cf:d2:
bf:0b:2e:f8:6f:12:23:98:f8:c1:8b:8e:bc:83:15:
52:a3:b9:16:05:bb:10:0e:ea:ef:84:29:70:3d:ce:
55:a3:da:0f:1a:da:c0:f7:71:12:7a:b3:4b:6d:00:
a9:02:d7:05:e3:6d:ea:48:a6:61:95:1c:75:d2:1b:
6b:70:9c:f0:fc:0e:b6:c0:38:c0:59:36:83:03:fa:
b8:ce:76:b4:d0:17:68:4c:c5:4b:8a:f1:e6:10:59:
ad:7f:6d:37:1a:bd:69:34:36:68:e9:ce:ea:6d:f1:
aa:69:3a:06:47:21:55:73:d3:9f:6c:70:93:fd:5d:
8e:3d:22:4a:c5:f4:aa:5f:0f:66:79:d3:ee:2c:65:
56:31:da:1c:d6:2d:e8:1f:66:5c:b6:dc:d3:4a:ef:
82:7d:fc:81:75:7c:48:ab:7d:92:56:74:12:6a:fb:
0b:c5:8a:cd:43:7d:c3:2e:81:f6:47:b9:88:5a:b2:
7c:30:31:95:d7:22:88:c9:c6:5b:30:12:8e:b2:4d:
60:1a:65:b5:35:ea:f9:24:61:63:c6:55:36:d6:70:
64:61:40:4d:b9:76:7d:53:1b:c8:ea:f9:d9:d9:31:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D2:CA:56:BC:35:7D:35:AF:9A:E6:67:DE:D9:6C:D0:CC:C1:7F:17
X509v3 Authority Key Identifier:
keyid:C7:77:01:35:D0:F0:D3:0A:86:8D:F5:51:D8:75:2D:4B:4B:AD:C2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3cBNdDw0wqGjfVR2HUtS0utwsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b97070-c5f4-4410-94b5-d64d75394037/1/x3cBNdDw0wqGjfVR2HUtS0utwsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1a:4e:d8:df:8f:e0:95:42:e4:32:a4:94:e6:22:3a:f2:c1:
4b:49:ef:e5:30:4c:f0:d2:94:9e:38:e6:fd:00:f1:ce:d6:4c:
a5:79:b8:50:88:b1:3b:7f:fb:68:37:62:69:8e:cb:46:e4:76:
bc:f0:26:14:d9:43:9a:b6:1c:c0:69:2b:c9:35:bb:fb:95:c8:
88:09:af:ad:7a:9c:31:98:58:bf:1a:f0:9d:9a:03:85:82:32:
dd:d6:18:f7:96:d9:86:57:66:ef:8e:c1:1b:49:36:1f:f1:c7:
f1:7e:10:d9:f1:3d:86:6a:a6:b1:89:b7:27:c7:f0:31:a9:12:
60:3e:42:62:b4:2b:66:ba:b6:d7:db:d0:e5:b8:00:2e:99:5c:
90:37:d7:61:0c:c8:2d:93:ac:4d:e6:c1:c2:e9:bb:5e:3b:99:
d5:98:bf:a1:71:3d:fb:2c:e8:df:a9:80:51:b1:a1:28:74:54:
e2:13:60:b0:12:4c:73:9d:a6:b4:57:f0:e7:81:8a:06:57:24:
22:e9:d0:3f:a0:6a:bf:52:33:9f:ce:ed:72:f2:10:f6:02:91:
0d:0b:e8:c9:1b:97:cd:f7:bf:ff:9d:0b:6f:b3:f3:45:d5:01:
da:80:90:dc:67:3d:cb:39:51:e0:35:26:18:0c:03:4f:43:89:
ca:41:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:23 2024 by rpki-client on console-fra.rpki-client.org