Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier: lm39q9OsJdV2SzuDQ2SjNc0CklVMC7VO1J7vS14ZGzI=
Subject key identifier: 76:BD:E5:3A:5E:4A:DB:F4:99:23:EF:34:78:A4:07:9D:0D:8E:94:83
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 019357D25241532829FF01C1F8DC2F153ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number: 0354
Signing time: Sat 23 Nov 2024 07:00:21 +0000
Manifest this update: Sat 23 Nov 2024 07:00:21 +0000
Manifest next update: Sun 24 Nov 2024 07:00:21 +0000
Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: p26WIbzfnCOkHwBekBYgxNs5oATFDe3msZGtBdbesP8=)
2: qh2M-9li7g-aKoA7ORxP5MUbyws.roa (hash: Gwtx//c0FCgijC3Rb0zTBnHy7PcW89CDuXwo1dj3ZQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:52:41:53:28:29:ff:01:c1:f8:dc:2f:15:3e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: Nov 23 07:00:21 2024 GMT
Not After : Nov 24 07:00:21 2024 GMT
Subject: CN=76bde53a5e4adbf49923ef3478a4079d0d8e9483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:40:28:b5:40:0f:4c:8c:ac:da:bb:19:92:
f1:62:f5:61:77:6f:43:eb:44:a9:0a:b4:9d:16:17:
df:cd:75:ed:c4:f6:60:0d:a1:8c:b2:bf:36:f1:7e:
1b:e1:3d:30:60:0f:de:c0:7c:85:7e:8a:26:02:91:
ee:ec:02:76:d6:8c:69:86:50:ff:f4:0e:8d:ae:20:
0b:52:60:70:80:60:c3:9a:9e:8c:2e:35:4f:89:ef:
14:c1:1c:0a:2f:f1:3a:57:16:85:c7:80:3a:61:6d:
02:5c:b7:e2:51:5f:e5:95:bd:61:50:13:b1:a5:3d:
f9:db:27:e4:73:b4:c4:77:0f:fb:4b:d0:b7:6d:af:
76:8e:ec:29:fe:17:ed:be:bd:e9:b7:84:ad:85:63:
09:ff:65:b4:a7:43:5b:39:5d:28:c3:f3:13:71:db:
86:80:d6:8e:71:7f:7a:0a:9a:05:b3:93:e3:2f:b1:
e3:ca:79:14:ec:57:43:27:fc:63:00:42:db:d3:4c:
43:cd:86:f1:7a:8d:ee:a6:f0:12:f3:b5:cd:23:4c:
a8:dd:f1:91:f6:15:7b:a4:51:98:fd:e7:79:2f:af:
27:b3:64:08:61:e4:bc:d4:b1:93:25:f6:c2:f1:fc:
3a:56:73:7b:e6:ff:8d:9f:6f:49:8d:f2:70:fb:5d:
92:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BD:E5:3A:5E:4A:DB:F4:99:23:EF:34:78:A4:07:9D:0D:8E:94:83
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:42:bf:8b:0a:3d:95:e7:bc:b7:4a:77:11:f3:58:34:35:b2:
b4:08:00:b6:c0:bd:f8:16:3c:b6:ad:49:5e:b5:e9:29:0b:64:
65:90:4e:ee:22:38:0d:d5:04:52:4f:05:28:35:b6:1c:f8:a3:
d0:de:6f:eb:20:36:79:85:97:27:e5:bb:ca:9a:a0:fa:c2:be:
f1:f8:c9:da:28:04:2a:1a:57:93:6f:49:bb:6a:22:41:60:6c:
c2:08:23:30:49:44:66:55:9a:cc:df:e1:17:ce:1f:99:2a:c0:
00:d5:45:0f:07:c0:30:5d:e7:e4:37:be:5a:ea:8f:b6:94:b9:
94:f8:37:ff:ff:6e:df:23:36:45:a1:53:bc:56:93:2e:e0:68:
73:3d:0a:5c:cd:eb:8b:c4:65:46:4e:42:d1:57:e0:72:51:b3:
3d:09:28:d7:05:6c:be:d0:37:52:0b:42:ed:4c:3a:6d:ad:f3:
be:76:62:81:1a:4b:c0:e0:a8:97:ba:08:b6:99:b4:ef:a1:c9:
70:e8:c5:63:33:2c:0a:7a:a0:6c:03:91:1a:75:a3:de:bc:2a:
77:49:48:80:55:ab:c2:39:bc:90:9b:b0:12:58:a1:4e:3f:43:
30:9f:07:ae:c9:90:54:e4:84:0e:ad:b6:7d:9a:a1:b7:91:f2:
aa:c2:e9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:12 2024 by rpki-client on console-fra.rpki-client.org