Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: xm0pvLd1JRXl9e2xhmpC2YMRA8hqEVt1ruVFrDUxumk=
Subject key identifier: FA:36:9A:9F:64:17:EF:D2:5E:36:E7:D0:CF:ED:4C:EE:63:2C:80:58
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 0193579BA4E90C9FAEFFFA6E7D2C4ADB04A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 06:00:38 +0000
Manifest this update: Sat 23 Nov 2024 06:00:38 +0000
Manifest next update: Sun 24 Nov 2024 06:00:38 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: Y0TWL5/TcmoZP0xjHW0Bin+CM0maOJr+751p/3MXSTo=)
2: N2FtKKOqa4K2finHqfhSUqsziPA.roa (hash: ktTSW5gqVxT/6ADwVcQDZ2e+7MKRUW68fcXqEwpRu64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:a4:e9:0c:9f:ae:ff:fa:6e:7d:2c:4a:db:04:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Nov 23 06:00:38 2024 GMT
Not After : Nov 24 06:00:38 2024 GMT
Subject: CN=fa369a9f6417efd25e36e7d0cfed4cee632c8058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:8b:f2:6d:e8:fc:b1:db:d9:1e:19:1d:42:
5c:c3:b8:3b:8d:6c:46:21:fc:1c:ef:3a:df:10:d8:
79:73:1b:06:6d:7d:56:8c:26:23:16:cc:62:b9:2f:
ed:0f:43:48:92:7c:4a:b5:cd:9f:ed:74:6d:db:76:
03:8b:e2:4d:e2:5a:2d:89:56:4d:fb:a5:d9:de:c2:
fe:40:0d:4e:99:c5:95:bb:f9:31:41:9a:90:bb:96:
16:75:fc:67:0e:93:89:36:ed:ec:19:55:92:53:68:
b3:12:b3:7c:62:62:e7:48:8e:03:7a:be:d3:56:2e:
2d:cd:3c:4d:3a:73:cb:07:3a:40:0e:f7:17:b1:c7:
df:51:25:55:72:14:62:fb:45:7a:23:79:54:17:37:
d0:b5:92:88:b3:63:58:e9:08:5b:65:c7:91:3f:07:
94:e7:97:37:27:b9:d3:43:fa:ee:18:83:44:e8:bc:
d8:48:a3:6b:d2:1b:94:02:71:65:02:91:ff:3f:9b:
b8:5e:7a:07:e0:7e:93:a8:8d:59:3b:63:7c:a5:7d:
96:7e:96:78:12:2c:a5:1b:3c:ba:72:3f:e3:c6:39:
96:22:e2:48:e6:a5:4f:a6:0a:1f:02:60:0b:eb:24:
d0:14:c6:36:a7:9f:87:22:76:47:6c:c2:3f:49:9a:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:9A:9F:64:17:EF:D2:5E:36:E7:D0:CF:ED:4C:EE:63:2C:80:58
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:af:83:05:8a:5e:88:a7:ba:32:fe:b7:d9:b6:71:61:ad:
1e:30:37:3b:d5:cf:0f:56:91:03:6e:c9:03:27:8b:bc:2d:3a:
be:00:5e:4a:c5:88:f1:2f:21:bc:a6:95:30:a4:ae:3d:2f:ec:
2a:c5:1f:78:e4:9c:cb:03:93:0e:73:18:3b:94:85:f6:ef:ab:
9f:7e:b7:7d:00:46:17:5c:73:b8:f4:12:75:a6:92:2b:07:71:
44:b2:44:91:01:e6:6d:97:99:99:5f:b2:11:f5:bc:69:ce:12:
f7:53:59:ac:ba:27:73:c3:76:4e:a3:53:d3:5f:46:ba:f4:9e:
e1:1e:9e:7a:5d:59:25:c3:06:dd:a4:62:9e:f4:20:74:61:14:
00:c0:e3:ef:29:08:22:94:b2:29:f3:67:53:7e:ec:a9:4e:f7:
b6:4a:ef:dd:79:37:d9:a3:7b:0a:65:fb:66:5c:7d:fc:54:a4:
60:51:f1:d0:39:9b:8e:b7:36:ca:ad:15:80:0b:99:82:2d:86:
e4:1e:8b:b5:90:da:63:eb:58:c4:22:b3:10:f8:c5:60:f3:72:
86:f7:76:b1:f1:01:9c:bc:a7:c9:5c:70:34:a4:06:dc:ff:4d:
55:39:a6:27:e0:85:22:50:2e:81:74:3c:44:11:06:58:aa:69:
7e:14:4b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:36 2024 by rpki-client on console-fra.rpki-client.org