Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: laYiOaQu6pvEsl5RAqJcfm1sRXfAW822bDbfkKR66cE=
Subject key identifier: 79:39:C9:E4:11:02:18:8F:CA:D9:43:DA:74:13:51:CB:DD:F9:4D:48
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 0192395D7A6C755F3A47FA3CD7736C026F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 12DD
Signing time: Sat 28 Sep 2024 16:01:20 +0000
Manifest this update: Sat 28 Sep 2024 16:01:20 +0000
Manifest next update: Sun 29 Sep 2024 16:01:20 +0000
Files and hashes: 1: 0ZLfi9VR51-tjoFl5GMOXrX_aIg.roa (hash: Pe4StWvcw7VKQKGAva+YurzArSzNe169s57NGunrJZI=)
2: JdlPsEncK64ZjPn6W4tGORr10zU.roa (hash: lO0cOUZrFXpbv8LiVi9xOkGRJyB6K0cP/z7foz4/e4s=)
3: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: Akp4zgYp4YuwxjHvwBX+ha+4OORxyIIzvDnh0ttb1qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:5d:7a:6c:75:5f:3a:47:fa:3c:d7:73:6c:02:6f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Sep 28 16:01:20 2024 GMT
Not After : Sep 29 16:01:20 2024 GMT
Subject: CN=7939c9e41102188fcad943da741351cbddf94d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:49:42:3c:e2:95:a4:a6:00:df:4d:56:5d:5d:
f7:ea:eb:48:f4:70:5f:2c:c7:20:e8:fc:f3:a7:15:
ef:d6:ad:76:4c:a6:f2:83:35:60:38:04:43:de:5f:
4d:ef:e9:0b:71:a6:32:af:0b:c8:50:a8:de:4d:34:
cb:86:9e:e2:8e:95:a0:9a:6f:c2:f1:32:f5:56:d8:
53:79:5c:47:ef:14:02:22:21:92:37:00:62:0d:b5:
5a:40:ed:bc:20:dc:5d:2b:b6:65:9b:39:19:5f:23:
78:4a:07:ff:a0:ff:f7:4b:46:49:a4:ff:d7:77:b3:
01:2c:d3:25:ec:40:ac:e8:59:94:bc:31:77:f4:4e:
2c:8d:69:2f:77:3b:47:cb:c6:ad:16:a8:04:b9:35:
b1:75:39:9c:46:b4:58:0d:9f:38:38:64:45:47:8b:
af:5a:1a:34:f4:18:52:9a:5a:05:e6:8f:11:a5:80:
0a:f4:59:98:36:18:f0:ff:3a:05:f8:7a:90:81:34:
5e:cc:f9:32:5f:4f:ef:c4:67:af:32:d1:bb:35:e4:
9a:a7:11:2d:ef:2d:e6:79:70:b6:71:1e:93:8d:63:
33:44:f3:4e:0a:cd:90:6b:95:4c:f8:bb:51:53:31:
76:67:98:94:a4:18:d3:0d:c8:24:b9:3f:cc:b7:d7:
bd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:39:C9:E4:11:02:18:8F:CA:D9:43:DA:74:13:51:CB:DD:F9:4D:48
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:54:ba:06:09:ad:2a:31:b0:e5:52:45:3d:f9:14:b9:5c:d4:
c0:48:eb:4e:fb:05:9c:5a:eb:16:e9:94:c6:69:48:f7:82:5f:
67:a9:f3:a7:de:33:f1:10:11:4b:c8:23:01:fd:ae:22:bd:f0:
fb:49:8a:d9:a0:77:4d:be:14:a9:2b:85:1a:59:e7:a6:1e:14:
79:16:a9:20:54:1c:e1:e2:7c:c4:17:87:d1:2b:d3:ce:b2:61:
0d:d6:20:17:7e:85:73:8a:b9:8f:84:e9:23:da:74:66:4b:7a:
8b:a6:fb:36:8f:91:65:89:35:60:9a:fb:da:4f:49:37:e5:c4:
78:f3:7d:a3:fb:64:62:57:a5:94:c1:0d:6e:6a:78:f5:35:0e:
9b:02:b4:55:52:e1:74:fe:5e:cb:d6:6b:bf:7e:93:a4:95:0f:
7e:d2:26:1d:67:22:52:df:15:8d:f2:c5:74:de:27:6e:0a:cd:
22:04:cf:ac:82:31:9d:20:50:39:31:40:5b:4c:09:73:fe:13:
28:ee:2f:96:25:76:27:a9:a3:5b:a6:82:dd:72:38:d8:3e:a9:
49:44:cb:ca:43:3e:ce:0b:c4:1a:6c:64:ab:8f:8d:6e:78:35:
30:47:be:73:c3:92:63:c0:44:72:83:7e:c7:91:26:21:5f:1f:
99:26:3f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:17:13 2024 by rpki-client on console-fra.rpki-client.org