Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: rNw4RmJLXtwtVH56HEScqZ958dE+RRA6r1GVWLIvFjE=
Subject key identifier: 6F:0B:21:88:60:DA:A9:B3:F1:3C:98:70:0A:4B:5C:28:83:8B:4F:9E
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 0193587879312FE775F6B7EBA9F963633688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 10:01:50 +0000
Manifest this update: Sat 23 Nov 2024 10:01:50 +0000
Manifest next update: Sun 24 Nov 2024 10:01:50 +0000
Files and hashes: 1: fCE4QuOsyLkvprYOCbN2xs0Vvps.roa (hash: txyFJb5jBymPLgm5faELUARzeChspVbKIa6vRw1WcyY=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: BjbKV0G/21cWb7xtwEhMzoK9mm11YIESTaQHPWF/SlY=)
3: koksl5Wu0AuPCnRu02seBup4nlc.roa (hash: JnBCAAfjFAjzNHyMvaUDJ0z3qZ5KMYGb7vs18cqxHIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:79:31:2f:e7:75:f6:b7:eb:a9:f9:63:63:36:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Nov 23 10:01:50 2024 GMT
Not After : Nov 24 10:01:50 2024 GMT
Subject: CN=6f0b218860daa9b3f13c98700a4b5c28838b4f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:37:9f:90:17:bd:23:06:49:0f:36:0f:68:
bf:33:2b:17:ac:62:54:6c:37:74:0c:7f:ed:85:95:
c6:a2:b1:0d:8d:94:9d:32:25:76:ca:95:41:21:a6:
43:be:68:c3:5a:9f:c6:ea:a5:a6:44:9e:38:b2:55:
1f:35:bf:99:9b:cd:c4:18:3a:d9:23:76:dd:4a:45:
e9:79:c6:a9:87:de:95:c9:dc:f5:02:1a:3b:7b:2c:
87:22:9f:d1:f1:09:cb:bd:fc:5a:97:4e:2f:f3:91:
e3:52:35:28:42:5a:cc:57:76:c8:af:07:01:c3:16:
01:d2:ad:52:6b:0a:32:d6:74:03:bf:2e:c9:a7:2a:
86:ef:43:69:33:84:59:19:e4:d3:45:04:b5:93:32:
9b:ec:b7:3a:4c:3d:bd:1b:3e:9d:5e:db:23:40:3f:
f1:5f:30:1d:8b:78:e9:d1:c2:80:1b:28:17:e8:52:
17:d7:d2:8f:77:14:62:d7:bf:6e:18:08:95:11:5e:
d2:a0:61:7c:21:5c:d7:48:c5:06:1f:2e:0a:e8:e9:
b7:d6:a3:2d:02:04:85:d4:29:75:f4:c0:cd:10:5c:
b6:c4:f7:39:c4:fb:54:ea:e2:0b:01:4d:3f:48:40:
7d:13:80:8b:46:78:41:da:13:07:86:26:1c:d8:96:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0B:21:88:60:DA:A9:B3:F1:3C:98:70:0A:4B:5C:28:83:8B:4F:9E
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5a:00:b2:db:00:c9:38:9f:c7:39:88:64:64:98:2e:2e:13:
4d:1a:54:8c:33:da:62:a4:a0:f3:5d:b8:eb:9d:be:97:a3:58:
f8:07:18:bd:68:60:1d:29:3d:fc:c3:6f:9d:af:72:c9:ea:27:
25:dc:d9:2e:19:f8:3d:21:73:54:90:31:a2:a6:8e:9a:1e:0f:
0c:3f:d6:fc:c9:7f:c2:5e:76:b4:91:94:27:78:39:54:34:d7:
b9:89:81:e7:91:6a:47:45:b5:f7:8b:44:b3:24:85:66:3a:07:
64:72:67:26:9e:a3:81:6a:4f:9e:0b:30:1f:e4:32:ca:4e:11:
cc:78:00:c7:a4:4f:be:92:60:5f:21:4b:24:8e:20:ed:d6:a1:
9d:b5:a5:de:aa:e7:a4:a3:40:ff:74:8c:16:81:73:00:ad:c9:
6f:03:d5:74:f3:eb:fa:6f:5a:d9:5e:c5:49:39:ea:32:33:b3:
42:a5:8e:24:3d:28:7d:81:49:02:2b:53:09:43:d8:11:63:42:
58:0b:b9:9c:7a:35:5e:01:e5:af:8c:90:71:01:5e:df:31:97:
eb:62:98:7e:e3:1b:ca:b4:5b:a6:2d:fe:f4:8c:c7:bb:7c:e7:
2c:61:35:f1:7c:c4:47:75:af:eb:fb:73:9b:df:8e:c4:5b:52:
65:15:3a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:09:52 2024 by rpki-client on console-ams.rpki-client.org