Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier: ZPNYnkKgl85xYyyjTMc6Im8Th2urFJawEZBeycwU4SU=
Subject key identifier: 9F:88:57:EF:4C:0E:51:3D:C6:E0:CF:A8:40:AA:56:56:49:D3:B6:E6
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 019355AD75AAC48C7B4666A4800D367EBDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number: 03EB
Signing time: Fri 22 Nov 2024 21:00:51 +0000
Manifest this update: Fri 22 Nov 2024 21:00:51 +0000
Manifest next update: Sat 23 Nov 2024 21:00:51 +0000
Files and hashes: 1: RHLrVhnqgRTqTrRub7sRGKpzbWg.roa (hash: p5GOiwGn0evIT9WzH+q7OTSa/9rTi99OE3xQeI6+A4g=)
2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: Ac1UOs648crjUBwRImyysyneir+k60Pw6fcTVbHYFQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:75:aa:c4:8c:7b:46:66:a4:80:0d:36:7e:bd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Nov 22 21:00:51 2024 GMT
Not After : Nov 23 21:00:51 2024 GMT
Subject: CN=9f8857ef4c0e513dc6e0cfa840aa565649d3b6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:5b:2e:0a:17:ad:28:8b:a2:9e:82:08:95:
bc:78:77:92:7a:54:bc:bd:c1:1b:95:3a:b7:ae:f9:
94:2c:8f:8b:f3:d0:b3:f9:fe:e9:25:06:90:dd:00:
95:2b:1f:c2:20:97:d0:50:5e:02:c2:ac:e4:4f:cb:
5d:cf:44:1b:0c:7f:f4:be:7d:b0:77:bc:58:6f:be:
58:ad:05:25:50:d8:c9:be:fc:7f:ff:c1:03:8c:28:
b4:aa:ee:51:c0:60:73:d1:94:ce:2f:90:22:68:ca:
6e:3b:fa:4b:8b:58:4e:a3:75:e3:55:e4:d1:92:e1:
d1:f3:8f:4c:45:d4:f8:9b:8f:f1:3e:e6:45:ae:f3:
b8:ec:22:2a:d4:f9:d2:b3:aa:80:46:e2:7c:fc:03:
ec:bc:46:79:86:65:65:33:e2:ad:98:e9:36:c8:ec:
46:70:66:95:f5:d8:19:04:e5:bc:9d:f4:82:b4:50:
1b:22:eb:22:95:f8:82:40:0c:48:7a:a8:49:0b:67:
11:6b:a8:de:7b:33:be:8a:ef:13:a8:d1:88:f1:b2:
cb:8d:ad:6c:5e:85:a0:62:37:51:94:eb:0e:45:c7:
ae:8b:e8:56:a8:ea:64:fe:d4:7f:5f:a6:d3:ea:d2:
71:c9:6a:d6:4d:0e:e2:b3:d6:04:80:0c:c1:b8:08:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:57:EF:4C:0E:51:3D:C6:E0:CF:A8:40:AA:56:56:49:D3:B6:E6
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:c2:0b:5e:f6:e9:ce:f8:83:dc:99:2b:03:1f:52:6f:7b:
9c:cd:95:fe:43:99:03:e1:30:11:42:9b:9e:49:ff:bb:bd:06:
7f:4a:34:9e:dc:09:1f:41:16:64:30:6d:79:57:66:26:07:b3:
59:3a:0c:05:03:5c:e4:8b:e5:2e:d9:47:fe:64:46:fe:a0:ab:
7b:ad:80:c1:f3:44:ef:0c:71:ef:a2:88:ed:ae:c6:39:79:0d:
91:db:b1:38:fb:96:97:7c:44:36:ea:8f:ed:c9:dd:53:bf:80:
9c:b9:a4:05:5f:4e:55:f1:03:a6:ed:23:fc:a2:cf:e5:b1:79:
64:e1:05:4e:d5:c2:7b:2f:fb:92:01:6c:28:b6:6d:fa:8f:29:
c3:5d:0e:e3:c7:95:cf:ff:b1:0c:3a:a8:f2:2a:ea:8c:87:6d:
1c:63:81:f9:e8:7d:02:e7:ac:7a:bd:c5:58:fb:00:ae:68:32:
20:93:b5:e3:50:58:5c:7f:1f:95:ef:f2:73:5a:39:d2:b6:fb:
69:eb:36:85:40:6d:64:03:75:39:c5:39:73:11:fd:5c:a9:50:
6d:42:44:f0:01:23:88:e9:5f:d4:72:39:fb:30:f8:fc:66:31:
6b:83:6f:48:d7:8d:f2:bf:aa:f5:4d:2b:7e:64:9f:8a:ab:f0:
24:c2:a3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:07:24 2024 by rpki-client on console-ams.rpki-client.org