Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
File: 76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft (raw, json)
Hash identifier: jsh+mspk0HnhWWRciciRtdRv1SBSOdGPgl6vuc9N7MM=
Subject key identifier: 9C:55:15:0A:00:CD:80:03:EA:CE:41:D9:AA:67:21:BD:4B:FF:32:5A
Authority key identifier: EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
Certificate issuer: /CN=efa842e67147252505f41551f0f735b7f72e3e97
Certificate serial: 0193512C025EF4E0641C94BBD210FC083638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
Manifest number: 0279
Signing time: Fri 22 Nov 2024 00:00:58 +0000
Manifest this update: Fri 22 Nov 2024 00:00:58 +0000
Manifest next update: Sat 23 Nov 2024 00:00:58 +0000
Files and hashes: 1: 5mIrNQoatIIIB4z91I9IIV3k9SQ.roa (hash: GWP0JMSiS0pvRG9A5xT512heO9BpZYoEUn/zhlQbNX4=)
2: 76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl (hash: b1Bq6TfMBfmSeN/u243TdOeIMHuhz74TXFALw0KeToA=)
3: T5byYDOE50G6ye_wRxX-GgwSJ80.roa (hash: MbQdbiiAnXCH6waCTqqD8DqTyaXPjMXqf4U9ywFak/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2c:02:5e:f4:e0:64:1c:94:bb:d2:10:fc:08:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa842e67147252505f41551f0f735b7f72e3e97
Validity
Not Before: Nov 22 00:00:58 2024 GMT
Not After : Nov 23 00:00:58 2024 GMT
Subject: CN=9c55150a00cd8003eace41d9aa6721bd4bff325a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:c4:f8:a8:d1:c5:8f:49:c2:2f:37:6e:3f:
a2:36:4e:ad:2f:95:44:1b:c8:ff:4d:d9:85:86:1a:
1c:b1:98:d4:a5:2e:64:b8:af:5e:95:fb:5f:42:4b:
e6:18:8e:03:f3:71:9c:bc:a7:a3:5d:3a:11:ba:64:
bd:ef:80:21:62:27:68:b8:92:ae:5f:60:94:25:23:
c9:c1:13:b9:86:35:cf:c5:f3:02:e2:04:49:5a:ea:
71:18:49:74:cb:5c:48:cc:11:a8:82:e2:ec:17:84:
eb:84:ff:ab:b7:5c:a9:23:2b:ed:3d:b5:4f:d0:a3:
bc:54:fd:3a:8f:c6:cf:75:72:22:e9:cc:bb:65:c5:
96:bf:aa:b6:8c:41:d1:44:1f:5d:02:a9:76:20:25:
f0:64:62:7f:1b:79:14:c4:22:21:60:26:ad:5d:79:
0d:6a:0d:89:28:e4:9e:d9:d0:f9:a7:d9:4a:82:47:
37:e4:bb:31:04:d5:da:ec:ee:f0:51:63:96:34:4c:
81:d9:1b:39:77:71:11:35:79:63:32:31:a9:f5:6d:
c7:6f:3d:17:88:00:bd:c3:39:d3:6f:6a:c4:a4:96:
bc:0a:a3:fa:c5:6b:08:e2:b9:11:c2:1c:d5:88:8e:
dd:38:7c:52:97:d6:2a:46:2e:e1:5a:3e:d2:1d:1e:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:55:15:0A:00:CD:80:03:EA:CE:41:D9:AA:67:21:BD:4B:FF:32:5A
X509v3 Authority Key Identifier:
keyid:EF:A8:42:E6:71:47:25:25:05:F4:15:51:F0:F7:35:B7:F7:2E:3E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76hC5nFHJSUF9BVR8Pc1t_cuPpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e9c8e9-b954-4d20-a426-8e0c31223db8/1/76hC5nFHJSUF9BVR8Pc1t_cuPpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a1:4b:da:d4:4b:c3:9e:25:1e:db:34:9e:31:9e:db:0a:8d:
7a:69:88:80:e8:4c:0a:7f:e3:71:ae:ce:d1:9e:87:dc:4f:43:
cd:3c:23:1b:1f:a5:92:75:f5:49:0b:30:41:60:e7:af:0d:90:
19:89:35:6e:b3:6c:60:fe:75:fb:c6:6e:37:34:cf:bd:20:4b:
68:a6:b3:dc:7e:72:07:90:94:62:c8:62:54:f2:ff:ee:a4:86:
cd:0e:d6:a9:5e:28:95:ee:4b:f4:fa:06:89:10:c8:46:d9:f2:
4d:e4:50:de:c1:1d:a3:46:8e:86:c5:ca:41:c2:18:48:3d:9f:
d7:e8:54:e2:89:d8:4c:4c:4d:50:81:f1:e0:a8:6d:41:24:c0:
a4:6c:86:0e:07:3a:1c:b6:0c:2a:22:fe:2a:8d:42:c5:35:a1:
b5:01:ef:10:52:33:78:4b:00:38:e0:5e:b1:1f:29:61:e3:79:
10:bb:99:f2:43:d0:74:f4:aa:da:e2:a8:fb:e2:24:e1:8b:f6:
5b:a3:08:1f:f0:25:41:9f:93:4b:ac:0f:91:74:5d:d4:d4:4b:
82:a2:ba:bc:27:4f:2e:2a:9f:3f:17:c8:f4:18:27:c9:c6:2b:
85:06:20:0d:54:32:1f:5c:e5:73:64:13:5a:3a:5c:76:c4:12:
a1:6a:1b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:52:09 2024 by rpki-client on console-ams.rpki-client.org