Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: ItlzgGvB/DAl0l/Hfumagh6FPJ4ZWbHBXI0gyx3jw60=
Subject key identifier: F0:AC:57:E8:AA:E6:81:99:9F:8F:D0:CE:5B:EE:30:F7:FD:40:63:34
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019352ACFADE4FFEDF8DC2E31FDF0F79B1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 0B8B
Signing time: Fri 22 Nov 2024 07:01:28 +0000
Manifest this update: Fri 22 Nov 2024 07:01:28 +0000
Manifest next update: Sat 23 Nov 2024 07:01:28 +0000
Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: DXX0rVaDx8wcC5V3JI0f+2Wpen0ufhvqjOPt2lNjkqc=)
2: STqApr7X1ug1uqSaDPqxzAwqcYs.roa (hash: EiNnN4KMS8MWRBeApq2yhm40SJvdY76bImhzgcNjTV0=)
3: qpERSnH4Aqhg72wW15GA57f3WF8.roa (hash: yDfkRMnmnNihj+FTjCo5VWTFjCH2QIg6BWunHAW5H88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:fa:de:4f:fe:df:8d:c2:e3:1f:df:0f:79:b1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Nov 22 07:01:28 2024 GMT
Not After : Nov 23 07:01:28 2024 GMT
Subject: CN=f0ac57e8aae681999f8fd0ce5bee30f7fd406334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:0c:0f:53:ef:e9:9a:eb:8a:01:56:74:9c:
8d:f0:21:e6:5b:6b:01:e5:b5:56:4e:00:be:f9:98:
1b:95:87:d5:cb:6f:98:8a:b3:2b:5f:fb:bd:9d:83:
02:41:b8:5a:22:23:21:1d:0e:6d:af:2b:6a:4c:dd:
16:25:ec:1b:31:43:f9:49:3c:cb:6f:37:32:5f:9c:
e5:06:f8:6d:f4:b3:4f:db:2e:da:3d:21:bd:78:b6:
78:28:7e:a2:41:47:2c:d7:7e:11:b7:b0:ee:50:ef:
5a:68:40:59:76:26:ff:7b:33:d0:e2:eb:02:78:e0:
fb:d8:c4:f9:0b:00:ba:e8:8e:a0:cf:71:a0:d1:9a:
0f:65:bc:1f:0c:74:0c:8f:2b:8a:d0:87:02:34:73:
7a:1a:63:9e:98:c9:9e:e3:09:93:42:a2:ef:95:ed:
7a:9a:31:12:1f:52:26:89:74:6b:00:ec:8b:3a:d4:
fe:56:4d:bc:0c:db:2e:c5:45:b5:51:f6:64:aa:b3:
7c:1e:74:62:59:a2:94:4b:10:ee:10:3b:e1:0d:c8:
87:71:e4:b3:9b:07:9e:08:a1:cd:da:90:ce:d9:a6:
16:d1:ed:91:06:30:4f:91:6a:9a:88:e9:43:44:1c:
7a:21:f1:31:6b:fd:60:54:c6:94:f6:3b:16:82:40:
bb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AC:57:E8:AA:E6:81:99:9F:8F:D0:CE:5B:EE:30:F7:FD:40:63:34
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:48:f3:cc:8c:5d:5f:e6:8a:22:11:ed:8e:e3:f9:24:f5:82:
e1:b2:cf:f1:96:6a:86:2e:c2:a7:25:95:04:60:ae:d5:81:ae:
51:2e:8f:52:e7:c0:b7:db:7f:40:fa:ef:e1:c2:9f:c7:b3:67:
bc:7f:09:52:d6:f2:ec:76:7f:36:3e:51:e8:6f:b0:b4:ff:0c:
97:cb:bb:87:08:80:8e:2d:b3:ae:78:8e:23:d2:fe:5e:e5:a8:
41:2f:31:84:39:57:cf:91:f6:71:33:d8:fd:b9:8e:18:5e:06:
9e:f5:c2:59:5a:3d:3d:64:1e:5d:45:d1:1d:02:89:bd:e3:57:
44:01:bb:fb:7b:34:f5:44:a6:c6:18:7f:65:1f:ea:df:2e:35:
80:2e:f6:a2:bd:76:6a:bc:22:e4:b9:87:ab:83:ad:46:06:fa:
00:99:87:72:13:5c:20:db:fe:e2:9b:19:1b:54:7b:0b:11:de:
83:d6:65:d5:54:74:e4:fc:e7:66:62:33:50:c6:c5:7c:b9:2a:
bf:a2:08:fb:93:1d:4c:90:90:aa:ff:d0:7c:3e:aa:4d:f8:47:
d9:42:8b:6b:95:35:b1:12:35:ca:aa:a9:97:f3:cd:a2:1f:3f:
70:f9:6c:7a:84:2d:0e:56:50:5c:a2:ed:d6:09:22:4a:7b:41:
0d:ca:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:51:12 2024 by rpki-client on console-ams.rpki-client.org