Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: vKA28etQScqhuTj58cq5ihQn42p3MuAzUtYHAEp6MCo=
Subject key identifier: E2:52:CD:74:5C:8A:59:4C:02:A1:40:B8:42:95:00:30:73:71:5E:7E
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 019355E3FE9E4AAE9B750B84E25B439B492A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 22:00:25 +0000
Manifest this update: Fri 22 Nov 2024 22:00:25 +0000
Manifest next update: Sat 23 Nov 2024 22:00:25 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: 2DAKGILB6XsgGS/HW6FI+SvWlcSvNHW6cjKKW7Dd1t4=)
2: YIkX5nDUyyTC1C-nlS-KcF49pKA.roa (hash: AVqk7/lDwFwt1zamRirX7/7r7GuHH38660ETNk5p9CI=)
3: qY_XoIH9jF_8uuXilZGcgJXTMq4.roa (hash: EPiJG/vl8FiFLgPIgQq1ernzVWexgBCIHpdYTEjJlEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e3:fe:9e:4a:ae:9b:75:0b:84:e2:5b:43:9b:49:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Nov 22 22:00:25 2024 GMT
Not After : Nov 23 22:00:25 2024 GMT
Subject: CN=e252cd745c8a594c02a140b84295003073715e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:c5:8f:73:57:59:b4:c2:d4:f3:8a:c3:f7:
e4:80:d0:9b:08:7b:df:cb:03:5c:c0:37:21:ec:40:
aa:dc:f6:0f:30:19:1a:a6:16:4f:eb:07:fd:e9:7d:
63:01:43:2d:37:d3:8f:40:ad:a6:df:f7:34:85:14:
b2:3a:8f:67:55:d0:7e:61:43:0e:b3:4a:32:92:95:
c7:f4:e0:b1:c6:49:30:c4:4a:06:76:cd:bf:33:ff:
5f:d8:7b:a9:ba:43:8d:61:31:7c:83:a7:75:ed:6a:
75:23:23:43:d8:de:20:70:45:32:34:d2:18:17:bb:
16:34:8b:2c:a2:0b:09:3c:3c:a3:39:b1:dc:85:c5:
a5:38:e9:2e:14:3f:69:db:8f:64:e5:27:b5:80:1f:
c0:1d:14:8e:87:42:a4:d2:73:a8:db:6e:2c:8f:b0:
6e:40:f1:07:1e:3d:93:20:7c:90:83:3f:a4:eb:6c:
42:3e:13:21:3a:ba:48:2c:eb:e5:8b:d0:d2:9c:5b:
98:67:54:b8:0f:bf:43:a5:1d:34:0b:47:3c:4d:27:
a6:47:26:33:a0:72:8e:bb:9a:3c:15:d9:28:3e:a1:
bb:a9:31:ad:d4:73:c2:ab:2a:46:20:63:46:6f:1c:
90:b6:f5:68:fa:c2:46:38:65:b8:d4:20:d5:9d:75:
12:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:52:CD:74:5C:8A:59:4C:02:A1:40:B8:42:95:00:30:73:71:5E:7E
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:44:3c:86:04:a9:94:88:65:de:19:f8:04:a6:37:66:04:dc:
94:48:11:b4:3d:6b:3a:23:6f:37:8f:f5:c0:4e:75:dc:73:46:
db:89:fa:32:6c:60:89:35:d3:32:53:2e:63:19:71:a0:80:70:
b1:27:41:bf:cc:28:20:8d:e0:1b:02:50:6c:9a:2a:a3:30:57:
66:f5:f3:b1:1e:32:f3:e2:76:dc:63:ad:9e:2c:99:00:30:df:
bb:6f:c7:f6:f9:69:9e:65:58:d8:fe:37:76:cb:06:39:2c:db:
c9:39:fe:e0:a1:25:4f:36:61:9a:38:89:de:0e:da:05:30:06:
fb:5c:64:cf:b5:06:bc:9c:76:46:3a:2b:8d:5d:cd:ad:11:6a:
10:00:2e:3d:b1:b8:0b:f0:0c:54:fd:d2:12:ee:0a:37:d8:27:
d5:34:f9:32:f3:2f:b8:5c:28:78:44:2a:28:4b:9c:3d:d0:a7:
48:49:c4:63:69:56:1a:93:5f:fc:78:ab:af:02:6d:c3:ee:64:
30:51:60:bc:03:5f:ff:b6:b8:69:cf:2b:dc:f9:c1:e0:4d:64:
ff:63:82:02:3a:37:24:dc:c5:20:61:86:bc:68:41:6b:39:1a:
34:c7:e1:77:43:e6:c8:32:cd:93:16:80:56:8d:43:be:95:0e:
77:bb:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:10 2024 by rpki-client on console-ams.rpki-client.org