Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: R0G1hStmB7Kwh69ZGAGe9RTudRU0ha/hNdYtGnMBDjY=
Subject key identifier: 40:58:AC:66:89:A2:D1:D3:CC:78:21:7A:DD:7F:27:E7:BB:31:52:5C
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 019238B9822FC8C44B01616E03761B4EB483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0624
Signing time: Sat 28 Sep 2024 13:02:14 +0000
Manifest this update: Sat 28 Sep 2024 13:02:14 +0000
Manifest next update: Sun 29 Sep 2024 13:02:14 +0000
Files and hashes: 1: U_5TAAB6V7LAJUvdhFutJT6pmWA.roa (hash: v0mSb9I+RQt+Yv9UVXIhNOyx2PcELDpI6dbD7V7E3Hg=)
2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: 2BFAm0mNI0epztJMkMLULNeNWb/GXHGgci1Kw8CZrXs=)
3: fJj7CEyJYAazEsfhRdkFdGrnI08.roa (hash: th6x2ePYuT4N6IkQf790hS9a8qAd8dnp3DKO0FrPXtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:b9:82:2f:c8:c4:4b:01:61:6e:03:76:1b:4e:b4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Sep 28 13:02:14 2024 GMT
Not After : Sep 29 13:02:14 2024 GMT
Subject: CN=4058ac6689a2d1d3cc78217add7f27e7bb31525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:a1:0e:43:14:57:f1:a9:2f:07:80:62:85:
3f:7f:e6:dc:ed:fc:32:23:ed:4a:30:4e:8b:9e:36:
54:e7:1b:6e:6f:78:de:5a:10:ae:1b:9a:01:6f:18:
e4:69:79:39:1d:38:02:81:2f:02:10:68:68:32:6c:
2a:de:b0:15:f5:1a:7c:a0:3f:06:33:92:03:41:c8:
f4:1a:b3:70:2d:ea:e4:81:73:d0:8a:13:3b:4a:b9:
01:9d:cb:83:b9:3b:ee:05:43:eb:2e:00:c7:59:f8:
d9:50:fb:57:73:ea:2d:c1:d1:f2:3d:1c:c1:76:8d:
f4:14:3f:64:f0:74:52:50:47:b7:ea:88:70:e4:83:
b2:2b:8d:3d:7e:1e:c7:b1:e7:0a:34:c3:72:b7:5f:
06:0f:17:85:a8:d8:a7:00:d0:59:55:0c:be:6b:92:
67:30:a2:0e:0f:be:20:5e:40:2d:a1:38:9f:7f:13:
1c:07:d2:3d:aa:89:ff:42:bc:30:ca:53:4e:16:c4:
55:f1:9b:28:80:09:26:e9:83:3b:7f:8f:63:3b:f1:
1a:10:c3:65:2d:52:d7:81:31:b0:65:80:94:6b:e2:
76:db:ee:08:58:31:8f:9c:76:5c:0b:3d:37:d7:e1:
db:86:7f:02:c2:ef:b9:67:fa:5e:3f:c5:bb:07:b4:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:58:AC:66:89:A2:D1:D3:CC:78:21:7A:DD:7F:27:E7:BB:31:52:5C
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6d:d4:6c:ea:d1:a6:db:6b:c3:82:df:3e:65:e3:e0:12:1d:
73:ce:2a:73:3c:ee:bd:f4:73:df:88:48:83:43:dc:5c:67:4e:
cd:21:d4:0b:9f:7c:98:8c:a4:1f:79:91:cd:10:79:08:4b:8c:
49:9d:3b:cf:22:f7:70:20:f7:c2:30:ef:4c:ce:81:7d:66:cb:
32:d8:c9:f6:ce:21:92:a0:3e:27:3f:85:f5:71:6e:ce:08:be:
01:a2:2e:ab:fe:79:6f:11:a8:a3:88:31:03:3d:22:cf:03:69:
1a:43:78:19:80:fd:c8:78:fb:7d:03:20:33:d1:34:6e:2b:cb:
98:c7:cd:99:90:8c:be:14:7a:a0:a5:18:f4:52:10:fe:bf:94:
19:32:8e:45:bb:12:28:07:c1:30:37:2f:85:e2:d0:3a:f2:ed:
16:10:98:0d:05:74:4e:a2:79:45:3e:2c:78:c9:25:b9:f0:37:
0c:ab:67:50:ca:0f:10:f4:1d:e3:05:2e:7c:70:60:9a:9c:e7:
a7:cf:bd:bc:fe:a2:ce:2c:df:58:36:34:31:ba:fa:86:aa:b4:
5e:a3:ae:2a:66:62:82:16:75:b9:43:77:1e:ba:f0:c1:a9:99:
3a:d1:27:69:59:79:96:57:40:af:96:a0:68:c1:d1:a5:a8:95:
e8:d4:f5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:03:26 2024 by rpki-client on console-fra.rpki-client.org