Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
File: l7y-5E9M7wkZheVGpoVPnMsq2oo.mft (raw, json)
Hash identifier: yCdFXcnswpyySyPQiKbgrVLLKbBtbyCu0QcScDNv5+s=
Subject key identifier: BE:AA:21:38:66:02:67:91:06:13:58:08:9D:0C:3A:72:10:C2:6B:AD
Authority key identifier: 97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
Certificate issuer: /CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Certificate serial: 019356F66D0F18EC4B5753F357C2116AD35C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 03:00:10 +0000
Manifest this update: Sat 23 Nov 2024 03:00:10 +0000
Manifest next update: Sun 24 Nov 2024 03:00:10 +0000
Files and hashes: 1: 1ZUApkpoA4JxbENM9fdLq9RCw6s.roa (hash: ENqCY5S+xeW/zqIKhj0aOu8TaP/f2U9kHEfTysqP98M=)
2: l7y-5E9M7wkZheVGpoVPnMsq2oo.crl (hash: 4xcevNHUIIuumuosXsO5QFgAoARst/8E7c2W9FuVMSw=)
3: tE_QdmM4PQ4J5vmHtjGlbRDxmC4.roa (hash: fGLofq8CtG8Ve5LfMF5mwBVhEiti2I02JqYJ2kOU0fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:6d:0f:18:ec:4b:57:53:f3:57:c2:11:6a:d3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bcbee44f4cef091985e546a6854f9ccb2ada8a
Validity
Not Before: Nov 23 03:00:10 2024 GMT
Not After : Nov 24 03:00:10 2024 GMT
Subject: CN=beaa213866026791061358089d0c3a7210c26bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:74:f5:a2:27:74:78:c7:7c:62:56:c8:57:
49:66:17:f8:63:a4:73:36:ff:ea:a0:ad:3d:82:fa:
91:81:6c:05:5e:ea:1f:b0:ca:52:7a:e5:57:4c:fd:
e3:3c:e1:4e:90:ce:e4:59:4a:8b:ee:f8:d1:1e:d3:
4e:8e:74:51:7c:77:3d:9d:7e:1e:58:2f:66:c9:dc:
c7:ef:6e:0a:47:01:cb:fc:d9:b2:3b:45:31:8a:39:
47:3d:43:5d:e2:ad:f6:64:d6:99:0d:b3:97:64:e1:
dd:5e:83:7b:78:b7:8b:4a:79:a8:1f:fa:ce:c0:64:
38:00:67:9d:44:9f:13:28:f6:98:16:f7:fe:4c:ab:
a5:bc:63:04:67:87:92:48:61:87:47:a8:e1:22:10:
cf:2a:7d:e3:1f:66:78:0f:38:b6:12:b8:90:ed:6b:
bf:7b:dd:1b:f2:8e:c4:ce:a5:6b:23:df:2c:ce:3d:
93:9f:1a:fa:ab:19:19:d6:e0:b2:f6:eb:ba:be:d8:
32:e4:c1:38:e5:52:04:cd:d6:19:6a:53:38:0f:e8:
cc:58:2f:75:21:61:b9:3c:43:f7:b5:95:4c:b7:89:
9b:d1:4b:62:8f:cc:b1:37:c4:10:1c:35:2a:98:bf:
ec:4c:db:57:b3:3e:bc:c6:d4:f6:2d:4c:ed:8b:fb:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AA:21:38:66:02:67:91:06:13:58:08:9D:0C:3A:72:10:C2:6B:AD
X509v3 Authority Key Identifier:
keyid:97:BC:BE:E4:4F:4C:EF:09:19:85:E5:46:A6:85:4F:9C:CB:2A:DA:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7y-5E9M7wkZheVGpoVPnMsq2oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0b2eef-75e9-43b2-9088-8303ad1371dd/1/l7y-5E9M7wkZheVGpoVPnMsq2oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:82:21:40:fd:40:a7:4a:6f:56:76:b6:43:e4:60:c1:50:c5:
e0:92:fc:32:05:a5:80:fe:b0:42:49:f0:14:ba:83:84:7f:cc:
e2:f7:32:71:d9:88:8c:dc:e4:4e:fa:f7:b2:51:cf:39:00:88:
55:78:b8:21:18:f2:13:07:54:44:bf:ce:7b:c8:c4:30:b7:c6:
78:71:7f:39:43:39:fa:01:f9:50:99:05:fd:ad:6a:34:b2:84:
48:79:7a:99:87:7d:90:3e:1b:49:58:b3:90:55:09:8a:45:fb:
07:ef:3a:1b:1a:e0:17:d6:1a:f8:70:cc:83:d0:11:75:e3:fe:
c1:0a:b0:b8:99:e1:a2:56:eb:2c:50:1c:c4:1e:30:67:a9:12:
98:e1:c9:a8:1e:05:35:ce:60:77:d2:49:7d:24:39:82:8a:16:
2e:ef:de:9e:98:74:c9:4b:3d:bc:28:77:af:c9:ef:46:fd:39:
9c:d6:f8:99:2d:7e:47:7f:66:b7:90:63:b9:27:b1:95:a8:89:
97:f3:b9:35:95:90:7b:89:85:a2:e1:f8:8d:5d:e2:f4:15:91:
51:d2:3f:1c:ab:7b:b0:46:19:3a:fe:d9:a2:9e:0a:46:ba:f2:
5b:40:21:92:28:47:cd:cd:4f:2f:88:97:f4:bd:a4:d8:bf:5e:
3c:a7:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:29 2024 by rpki-client on console-ams.rpki-client.org