Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
File: sA09NPYeSEaIv_-cxwN1WCN3WZg.mft (raw, json)
Hash identifier: YpGKDkZbCbTHbid3qBwGe7zHtz1kCPcMjb026bLNIkI=
Subject key identifier: 97:34:A7:FF:0A:04:6F:04:59:6E:55:DC:FA:A9:B3:C7:96:C5:A0:29
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 01935878711A9E7514E7095422018C89EB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
Manifest number: 1025
Signing time: Sat 23 Nov 2024 10:01:48 +0000
Manifest this update: Sat 23 Nov 2024 10:01:48 +0000
Manifest next update: Sun 24 Nov 2024 10:01:48 +0000
Files and hashes: 1: 13C3mqx3OHv7QqeEvXVFmleE6FQ.roa (hash: Ud9s9LNVTvqP5tnP4yaMZmXAi+qHU1fTqX3RAIdfVwg=)
2: sA09NPYeSEaIv_-cxwN1WCN3WZg.crl (hash: rvo8vv1Dxm9zOb+8w+/63slw3ALfIixQFh6dW0/r+sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:71:1a:9e:75:14:e7:09:54:22:01:8c:89:eb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Nov 23 10:01:48 2024 GMT
Not After : Nov 24 10:01:48 2024 GMT
Subject: CN=9734a7ff0a046f04596e55dcfaa9b3c796c5a029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:88:97:42:de:b2:51:40:6a:02:b0:0b:f7:93:
56:76:39:61:d5:af:b6:46:6a:d6:91:53:9b:eb:7e:
d2:bb:36:04:01:76:1e:1c:2f:ff:c8:92:40:11:79:
ab:bd:95:a7:22:f7:de:9c:3a:7f:65:58:b3:10:88:
a2:0c:0b:1e:70:45:39:d7:1b:22:c0:b3:aa:68:77:
db:2e:a9:7b:89:e9:4d:15:9e:ce:4a:79:1b:9b:ad:
c5:38:9c:b9:66:a1:8e:c0:20:41:3f:b1:86:cc:14:
e9:08:87:e0:ed:95:43:80:60:7b:b3:9f:ce:15:45:
a1:11:86:cc:be:09:a3:b6:60:5a:be:1b:1f:20:5f:
dd:05:85:09:77:31:24:65:c5:20:5c:4f:97:62:aa:
6f:37:6a:f5:0a:35:25:a1:07:d2:0b:19:04:96:2f:
05:dc:bf:16:61:02:ea:4f:4b:01:7c:ef:53:5b:f1:
51:13:9d:02:4e:f2:e2:28:0a:cf:d6:88:3d:c8:fa:
3d:c1:cd:ba:b3:46:39:65:78:c2:60:58:a3:26:77:
b0:7c:6d:04:cd:69:be:ff:0a:7f:63:58:f9:2e:b8:
ee:b7:ce:ed:9e:39:95:65:f2:3d:fb:9f:a4:7e:b6:
60:c5:59:48:5d:2f:ad:28:01:12:cd:b3:9d:ca:96:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:34:A7:FF:0A:04:6F:04:59:6E:55:DC:FA:A9:B3:C7:96:C5:A0:29
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:03:b7:cd:e6:3a:d2:14:0f:3f:e3:ae:68:73:0a:0d:c1:1e:
b8:39:68:1b:94:ea:13:52:bb:4d:03:9e:50:b1:0d:91:63:78:
ff:69:d2:74:2a:6b:51:ff:75:23:62:6b:82:e1:3a:85:0a:84:
0a:d3:d4:9c:48:ff:c8:3b:4b:bf:1b:d6:f7:7f:68:53:59:6c:
5c:8a:6b:b5:65:55:bd:14:58:20:52:42:d5:0f:d0:81:c6:8e:
72:e9:f0:08:f5:92:c8:27:f7:d9:22:4d:8f:71:e8:14:08:04:
73:30:03:ee:42:d5:91:83:b1:76:4a:3f:73:fa:36:d2:3a:1e:
a8:90:ac:c2:cc:ce:be:9e:94:00:8d:d3:02:a3:a4:02:20:3c:
21:d8:c9:8e:5e:67:3c:d9:bf:3c:e4:11:e2:7c:80:04:97:c8:
ff:03:f5:29:8c:44:10:e2:a8:c9:2c:b4:86:45:0b:3d:2b:98:
8f:59:09:1d:12:9d:bd:3b:04:12:ba:a6:ca:41:e3:13:40:e4:
7c:aa:bd:e6:03:6e:e3:a3:33:d1:ee:6b:d8:ad:45:fe:d6:a5:
3a:4a:cd:64:91:fa:fc:fe:1d:c2:30:3e:72:2b:b4:ee:6d:5b:
6b:e1:ef:5e:63:c4:ea:e4:b7:12:ee:4c:47:65:2b:75:85:9c:
08:36:37:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:18 2024 by rpki-client on console-fra.rpki-client.org