Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
File: l1cFIHWWHp2Qwn0HElpLRGyv15A.mft (raw, json)
Hash identifier: hkoNdC5LHUb8XnPZsJ/+N5JBrWVo+gjx8+A7XpKZaFo=
Subject key identifier: 53:A0:95:48:9B:3E:76:AC:16:3B:1B:95:16:70:45:B0:97:9A:59:08
Authority key identifier: 97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
Certificate issuer: /CN=9757052075961e9d90c27d07125a4b446cafd790
Certificate serial: 019359C12EC10F540239A7C208AD5D3C37B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 16:00:52 +0000
Manifest this update: Sat 23 Nov 2024 16:00:52 +0000
Manifest next update: Sun 24 Nov 2024 16:00:52 +0000
Files and hashes: 1: l1cFIHWWHp2Qwn0HElpLRGyv15A.crl (hash: hTWQT77xeJbtNdfK5b/IUVUixzHEEodzDaK/LapmIY4=)
2: pZKtfAu5WXmsh1j7OftvlF4-AwM.roa (hash: ajyKh4r01mcDNUWXoV92elmusNQecRGj1vvPqmF/mAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:c1:2e:c1:0f:54:02:39:a7:c2:08:ad:5d:3c:37:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9757052075961e9d90c27d07125a4b446cafd790
Validity
Not Before: Nov 23 16:00:52 2024 GMT
Not After : Nov 24 16:00:52 2024 GMT
Subject: CN=53a095489b3e76ac163b1b95167045b0979a5908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:40:ee:48:94:62:cc:61:33:4d:47:8c:cc:
79:91:8b:4a:50:bc:cb:e8:13:b3:fa:b9:a5:7c:cf:
40:98:dd:38:db:ac:f3:a2:59:a4:16:aa:e9:a5:ad:
a1:50:17:25:eb:bf:f8:be:37:73:b0:d9:96:47:81:
78:00:a2:0f:7d:b6:26:a4:25:df:09:43:a8:aa:f9:
da:b0:2c:3c:8b:dc:0f:90:03:d5:6d:e1:bd:4c:6c:
73:95:49:29:8d:51:9f:e3:a7:d2:5c:9a:63:2d:0e:
4b:3b:f9:75:f8:70:a4:0d:d1:53:08:33:da:98:c1:
95:e8:b0:28:7b:fc:9c:a9:12:8a:a0:07:40:2c:24:
59:d4:73:00:0c:70:6f:b8:94:10:55:c9:31:56:96:
51:5a:2c:b9:53:8a:7a:d5:22:21:11:37:13:08:e0:
92:d4:98:67:f1:6c:d7:a6:be:cb:c9:48:29:ab:b2:
10:79:44:43:55:12:73:fb:d3:fa:96:45:be:de:fe:
bb:4a:c1:bc:35:25:35:d4:9e:6b:11:3a:05:ca:ab:
da:34:58:0d:ea:ae:4d:c1:df:4c:a6:a7:84:3f:d9:
f5:41:d2:84:6b:8f:9d:93:74:ae:1f:a4:ce:67:09:
8d:b1:e4:f1:2b:05:b3:16:00:9e:cd:88:52:3a:80:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A0:95:48:9B:3E:76:AC:16:3B:1B:95:16:70:45:B0:97:9A:59:08
X509v3 Authority Key Identifier:
keyid:97:57:05:20:75:96:1E:9D:90:C2:7D:07:12:5A:4B:44:6C:AF:D7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1cFIHWWHp2Qwn0HElpLRGyv15A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/968d41-4d77-42be-80b1-beafe0efc09c/1/l1cFIHWWHp2Qwn0HElpLRGyv15A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:af:40:05:3d:91:26:e7:77:3f:1d:ec:b0:a1:dd:7c:6f:54:
e3:09:4a:03:77:df:73:04:b6:83:94:aa:15:12:3a:20:da:21:
00:ae:b9:34:ca:b7:b0:a9:87:eb:7a:49:2b:4e:1c:d7:bc:87:
43:80:67:a6:8b:84:17:10:b6:40:3f:80:06:6e:a7:14:f5:b1:
c6:80:b6:2b:7c:ab:d7:83:3d:cd:ab:bc:2a:ba:ba:68:99:2a:
27:a3:73:de:b8:89:c8:44:db:01:43:84:b8:ad:c8:08:3a:3a:
9f:bb:7e:d1:83:73:d7:ab:43:39:b2:c6:e9:57:a8:77:38:64:
a8:3c:f8:da:11:8a:01:0d:35:4f:b6:df:47:c9:1a:87:66:42:
aa:52:47:e6:ef:52:b9:d7:63:68:d2:26:e1:48:bf:5c:51:cc:
86:70:fd:7e:f3:b6:d8:be:5f:6e:d1:67:41:c8:5a:40:e3:59:
83:37:2d:16:ad:68:d3:1d:01:16:7d:e0:d8:91:22:1b:d8:55:
03:ed:fc:01:80:24:22:21:f9:ef:d9:c7:52:c7:0c:07:02:36:
98:cd:19:33:e3:9f:b1:ad:5c:1b:a7:ec:d0:d4:69:fc:c9:be:
3b:53:1a:f2:f0:40:d1:50:94:a5:5c:cb:77:90:0c:6a:71:e3:
99:b7:79:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:04:32 2024 by rpki-client on console-fra.rpki-client.org