Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File: 5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier: aisDwV8HDJQF5Ir80okpUllscebwnenF4g/s7U0DGX0=
Subject key identifier: 38:CA:5B:21:8D:97:59:84:E6:DB:40:27:3F:56:00:77:9B:50:64:39
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 019350F4560A3A47ACDB321345A847B2D77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number: 0DF2
Signing time: Thu 21 Nov 2024 23:00:10 +0000
Manifest this update: Thu 21 Nov 2024 23:00:10 +0000
Manifest next update: Fri 22 Nov 2024 23:00:10 +0000
Files and hashes: 1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: z8lrq7LoaBdlqKg5QhYz/Eje1INo9x0as+5LBKtB+2Y=)
2: OhdOQGsIAOFh3puxy1Vl8qKcsGo.roa (hash: VQfNhOVGtccnI1fJS/NKr3bCMkDjGCa43ts7qyDmqiE=)
3: bdPXIU3yX7KswZUTNRLfwt2T3pI.roa (hash: axhabltBlV7/lwnxJo7BhwUji+NGwMn6SxsaW2o2A8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:f4:56:0a:3a:47:ac:db:32:13:45:a8:47:b2:d7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: Nov 21 23:00:10 2024 GMT
Not After : Nov 22 23:00:10 2024 GMT
Subject: CN=38ca5b218d975984e6db40273f5600779b506439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:e3:8c:60:a2:d7:f8:11:66:10:c0:1b:92:
1e:de:83:53:49:59:7a:1b:3f:7a:34:ae:f3:ed:41:
b6:03:f5:9d:a1:09:5a:28:28:61:96:27:48:77:5d:
0e:41:95:c9:31:99:d7:6a:60:f5:e9:63:52:4c:0d:
15:c3:28:c1:fc:af:59:35:dd:1a:2e:90:bf:0c:09:
40:c2:77:fe:36:90:2e:8d:37:18:40:4e:52:d7:d5:
fe:24:68:9e:03:5b:8a:e9:5c:41:ef:4d:8b:31:8d:
e3:9a:cc:91:30:cd:ff:19:80:d6:a8:c6:23:7f:37:
4b:cc:85:39:78:72:96:25:d5:d0:f5:a7:e2:2a:78:
e9:3f:32:d0:c1:d9:5c:e6:53:d0:fc:12:84:19:e2:
0f:f7:c3:8a:73:0a:0a:e8:e5:89:13:ce:c8:9e:2e:
a4:26:5d:af:71:2b:ac:69:ab:26:bc:c4:b8:e5:d5:
77:a1:3b:25:89:64:2e:a7:8e:93:5c:f3:49:35:f5:
4f:4b:d6:b6:2d:b5:27:96:64:06:5b:aa:8b:7b:82:
5c:03:d3:a9:05:d3:c6:7e:7b:5d:76:79:8b:37:aa:
d3:b2:78:1e:f9:fa:81:43:46:2c:91:e4:ce:1b:bf:
fd:44:d9:e5:ca:ef:7b:25:5a:d0:9b:b5:7b:d2:03:
a2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CA:5B:21:8D:97:59:84:E6:DB:40:27:3F:56:00:77:9B:50:64:39
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:24:c2:bd:9f:21:14:34:a7:3c:71:79:34:6f:8c:b9:73:fe:
4c:31:a7:fa:77:c6:21:52:4e:e2:50:8c:70:94:4c:cd:0d:8c:
73:6d:3d:f1:80:f2:92:82:e0:29:d1:92:3c:4a:f2:57:7c:38:
7d:a4:92:23:d8:8b:c5:86:60:a1:87:5f:ca:4d:e6:5d:b0:9e:
8d:e6:bc:2c:c7:b7:df:81:bf:9e:c6:4d:9e:16:5c:c6:de:05:
c0:a1:98:a1:bf:ab:a6:58:03:73:00:97:af:b4:37:d6:74:af:
7d:63:fe:f1:36:a9:4c:93:9c:87:3c:be:6e:8a:f5:4a:80:4b:
f1:c4:01:82:5b:4a:f6:00:d1:9c:45:0b:06:12:e4:5c:51:58:
7d:1c:73:cc:0c:72:eb:08:f8:0a:41:0a:eb:59:3f:56:a5:41:
74:1b:8a:a5:c4:cc:1b:36:ec:f4:1f:c9:fd:54:1a:bc:c8:11:
4b:eb:28:7a:3c:c2:c0:b9:3d:78:9d:23:d4:f0:23:02:f5:e6:
89:32:bb:0e:d2:3e:d8:e5:59:a1:e9:ee:fc:3f:6a:e4:df:69:
c7:c9:2c:81:c8:28:0e:ea:c9:01:42:f9:d2:16:d8:74:52:01:
67:6d:8f:9c:21:3d:99:e7:1e:f2:72:99:24:d0:1a:fc:e7:9d:
00:7b:0c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:15:02 2024 by rpki-client on console-ams.rpki-client.org