Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
File: A4Toj7eaN3bLBYPitnoL7G38aLg.mft (raw, json)
Hash identifier: RFSGbffVfIVPp27p23UOfte7H6U41tZiwPpQkx9aAGk=
Subject key identifier: 1F:77:ED:22:E5:99:4F:BC:CE:80:BD:D4:CD:F2:20:9D:FB:13:FB:79
Authority key identifier: 03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
Certificate issuer: /CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Certificate serial: 01935162EA75BFB014AFFD621A77C145E40D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
Manifest number: 0A03
Signing time: Fri 22 Nov 2024 01:00:57 +0000
Manifest this update: Fri 22 Nov 2024 01:00:57 +0000
Manifest next update: Sat 23 Nov 2024 01:00:57 +0000
Files and hashes: 1: A4Toj7eaN3bLBYPitnoL7G38aLg.crl (hash: 789oWolD39fDLdxxXKX+5TlCkHR62rq8lXtVbl1o4BQ=)
2: wYthNSrybyeQgUk5yZ4UZ4BFOAQ.roa (hash: sZcgnmG8qjbrJwEfEcW9qRXRayk1BiErZ7WUiE7LxyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:ea:75:bf:b0:14:af:fd:62:1a:77:c1:45:e4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0384e88fb79a3776cb0583e2b67a0bec6dfc68b8
Validity
Not Before: Nov 22 01:00:57 2024 GMT
Not After : Nov 23 01:00:57 2024 GMT
Subject: CN=1f77ed22e5994fbcce80bdd4cdf2209dfb13fb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:8c:3c:77:13:9f:8d:b0:98:32:b0:ea:2c:
07:8a:a6:ae:fd:c0:f0:21:11:e7:23:1f:ea:15:83:
24:c3:e4:fc:af:9e:c8:43:66:ea:30:4d:bd:79:62:
02:77:d6:ef:5c:f9:7b:87:66:25:8d:4c:2c:61:3e:
73:c3:eb:7e:f1:27:1c:50:1e:44:c0:bd:72:21:d0:
55:62:77:65:70:ff:a7:98:14:bf:91:f3:28:5c:f8:
42:2e:81:7b:4e:f6:58:6a:1d:83:44:71:06:80:22:
47:38:48:2e:8e:1a:23:29:09:52:07:36:2f:d1:22:
64:6d:89:99:58:77:5a:4e:d9:2c:39:f0:57:5d:4e:
89:8a:57:6d:55:a6:93:65:72:e3:41:18:f3:40:8e:
69:1e:b3:4f:e6:d5:41:87:2c:c5:b0:7e:c8:73:9b:
40:83:cf:79:51:a1:7a:84:7a:36:90:7d:50:41:d3:
29:ce:e0:01:33:85:a4:67:ca:db:cd:1c:e8:6a:81:
3e:99:e5:b3:c9:79:f5:50:a5:66:2b:2e:13:ef:b5:
43:ee:91:dd:d7:7f:e6:b8:c0:eb:ba:ad:4a:35:da:
88:7a:2d:39:19:a2:c7:a7:28:62:a6:b6:01:6f:bb:
a0:25:c8:a6:e9:7e:22:34:68:19:ff:2a:bb:22:e4:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:77:ED:22:E5:99:4F:BC:CE:80:BD:D4:CD:F2:20:9D:FB:13:FB:79
X509v3 Authority Key Identifier:
keyid:03:84:E8:8F:B7:9A:37:76:CB:05:83:E2:B6:7A:0B:EC:6D:FC:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4Toj7eaN3bLBYPitnoL7G38aLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7a0151-ce20-48e6-9053-333a384d417d/1/A4Toj7eaN3bLBYPitnoL7G38aLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c5:66:e7:9e:c3:7a:bf:ed:ee:26:b0:94:4c:c0:70:07:02:
3b:7b:54:08:b6:b2:44:44:23:aa:23:fb:76:27:32:8f:e1:a3:
fc:7e:bb:7e:61:2e:e6:63:df:eb:d9:55:a0:e7:e0:5e:dd:e1:
cf:92:ba:27:00:49:13:14:22:17:47:69:2c:e0:e0:f0:7d:9d:
cf:88:bc:64:9f:ec:b3:09:a5:f2:7a:50:1f:5c:b4:8f:cf:43:
92:61:cc:c2:a7:3d:fc:87:43:05:1e:bb:da:d3:3c:0e:69:2f:
a9:75:da:d7:c9:24:dd:58:21:c9:4c:51:a1:3e:de:2d:ee:bc:
58:fd:0b:f0:54:90:29:45:9e:ac:f4:5a:5a:dc:2a:1b:38:cb:
1f:46:0a:19:21:98:2d:2a:8c:b4:af:7d:65:89:3f:85:a3:05:
16:6f:7f:b0:fc:55:5c:21:49:d1:b2:2f:ca:cf:bf:97:c0:ca:
b8:9b:b9:17:dd:59:82:77:b7:12:48:ab:27:39:8e:09:1d:60:
48:41:de:12:af:15:3c:bd:f5:e1:fb:b2:13:2b:c8:d9:81:24:
29:a9:30:67:9d:a1:1d:b0:35:10:c1:fe:78:b1:f4:cb:cc:05:
0d:2a:6b:f4:6a:3c:bb:f1:64:04:cc:60:69:0c:31:51:66:0a:
7f:af:ec:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:09 2024 by rpki-client on console-fra.rpki-client.org