Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
File: mJHESIaZ5tAk45zE1h7uq9OAEPo.mft (raw, json)
Hash identifier: B4xY5JPsEjfBAdnA37eijnLMLsBr7r1iaBvYLwdGY38=
Subject key identifier: DB:50:A8:5D:BF:81:FA:7B:4F:83:00:B4:5B:41:6C:CF:99:B8:33:1E
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Certificate issuer: /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial: 019355088B803589EA519B4DE17351293F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 18:00:43 +0000
Manifest this update: Fri 22 Nov 2024 18:00:43 +0000
Manifest next update: Sat 23 Nov 2024 18:00:43 +0000
Files and hashes: 1: HaPjKoO1y3nEpjVyBAMKHcpQ2aY.roa (hash: RTVXlr1AaYmUT22be4F+G8m7kvJJRn+cyKHlvXDCVUM=)
2: HqQaQkzt1dcnxGGmGompdTfu2jI.roa (hash: losKrV0+DOmB6mOrdznRhlMfbcag3lg+t9YI9ihggIE=)
3: UVvzMsAW5Cz-gJuiKw_bCzwZ_uw.roa (hash: lD4lXvd/aSQs7j1RCTvl9WAb0URBUaZBcxVrLBZe6XA=)
4: Uk1R-rtw08p5xLmEPvlebcp5bkA.roa (hash: IrnRidpvKx1Xa46ym1q3rIhb1GsbkHYIP1WCBTtQPQI=)
5: XBmeJD0YnVPkyPrbFZs_3Kc9gvw.roa (hash: KdBsqfL8sOR/FvcGfo1XV3qrmhZ4uKVMRLo1IovkvzQ=)
6: aNMSYQbhe9W00nQs_Qy5NjrXt1Y.roa (hash: 1eMwPM/+L7oDLGcp3KOyRoSWbmrJY07Zca4lje8hpo0=)
7: ib8060HsWhLuUIh0pVr2nzQRBWk.roa (hash: Pp9sVkPvGtEeBPNSPaniuhm9/UnYeIdECybFKBu5PsA=)
8: mJHESIaZ5tAk45zE1h7uq9OAEPo.crl (hash: mJyPHpkTXs0r4zOqO/JF6Onp+fo/4RVojRGtVb68Z8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:8b:80:35:89:ea:51:9b:4d:e1:73:51:29:3f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Validity
Not Before: Nov 22 18:00:43 2024 GMT
Not After : Nov 23 18:00:43 2024 GMT
Subject: CN=db50a85dbf81fa7b4f8300b45b416ccf99b8331e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:05:74:2f:39:7f:dc:27:d7:df:e2:85:39:
52:dc:11:eb:4b:61:e4:34:4b:f5:4c:71:ac:ed:71:
45:01:68:96:5d:95:53:13:fd:fc:e7:63:be:81:47:
55:5f:99:44:4e:02:c8:0b:14:15:84:b2:ee:02:36:
db:b4:0e:bd:ef:c0:04:95:32:cf:3c:26:1e:a7:22:
82:58:f2:9b:35:c4:33:d6:55:ff:fa:cd:de:bc:a9:
67:65:59:75:f5:f0:4e:5b:24:5f:5d:34:5c:ef:ce:
84:5b:8f:4b:73:b0:35:7c:da:a4:44:1e:32:99:cc:
ea:6f:c1:b6:6a:52:84:fe:68:6c:c6:df:e7:40:af:
74:6d:51:98:71:e2:e4:15:2c:86:17:83:6a:97:88:
ed:a1:fd:85:7a:96:de:18:03:ae:a2:c3:2c:34:cd:
69:fd:ba:65:91:97:f2:b3:6a:2f:c5:6e:95:16:16:
7d:72:c6:f4:40:83:5c:e5:27:0e:df:12:1b:c9:36:
03:86:11:31:d6:41:4b:04:d5:79:1a:1c:2b:8b:f6:
9a:c9:50:04:59:b5:c4:20:d5:9f:d0:52:00:e9:e6:
28:c9:8d:b3:85:29:d9:99:62:47:b6:e7:a8:82:83:
a6:da:88:d8:82:f0:86:d0:e6:27:60:e8:c9:ca:4b:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:50:A8:5D:BF:81:FA:7B:4F:83:00:B4:5B:41:6C:CF:99:B8:33:1E
X509v3 Authority Key Identifier:
keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:98:29:da:90:93:6e:6d:0f:0b:23:f3:6e:e2:e6:fc:de:ff:
fc:3b:1f:3c:ff:f5:f6:d6:13:fd:9d:44:1d:d3:3c:b3:3f:18:
e9:24:ab:e2:e1:67:b9:b4:6d:f8:4f:c5:0d:be:b2:4c:90:7b:
d8:48:49:ec:ee:9e:2b:ed:11:4a:63:7a:f4:7d:e6:39:88:72:
0d:eb:a9:01:e5:4b:29:49:b5:3b:67:ff:aa:71:bd:eb:65:3c:
86:6d:77:f7:3e:42:10:cf:c9:d0:c0:a2:10:5b:74:ee:ee:94:
eb:03:39:ce:27:92:c2:44:c1:fc:71:bd:3e:2d:8d:de:f3:65:
21:6a:74:9b:ae:7c:b3:ed:4d:45:62:10:4b:09:73:c5:d4:80:
6a:dd:16:66:50:62:a4:dd:0d:4e:0b:28:74:57:3d:f6:00:31:
21:b6:59:eb:5d:02:93:23:a3:1f:13:e3:40:66:f5:85:7e:ee:
1a:89:e4:f2:03:c9:65:1c:75:e5:9b:de:a6:d0:4c:e2:d0:a7:
dd:aa:93:93:43:b6:08:dc:8d:57:60:43:31:5d:ef:df:e8:46:
5f:86:0d:fc:6c:10:e6:a6:e5:7b:47:35:68:29:5b:6a:c0:0e:
e2:f8:a1:ba:2e:67:83:b3:f0:b2:e4:36:8f:5e:a8:aa:7e:78:
40:7a:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:21:41 2024 by rpki-client on console-fra.rpki-client.org