Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier: 0DSOGToXXBelkPLae3XkiTMQDQYu235o1645ubKWI0w=
Subject key identifier: 49:CF:41:77:D3:76:A7:B5:8D:D0:8B:19:DF:A1:C7:B1:82:65:0D:96
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 019357D277558309C9CA08B5DC74CA0B9D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number: 1378
Signing time: Sat 23 Nov 2024 07:00:30 +0000
Manifest this update: Sat 23 Nov 2024 07:00:30 +0000
Manifest next update: Sun 24 Nov 2024 07:00:30 +0000
Files and hashes: 1: 6gHr81-vG49_XNY4jNxPMANevHU.roa (hash: BAArSRYGW4YFJ87LFcmWFYprQ1wZSo+Iw9BbFhVUFzM=)
2: IV4FU-kJ5O9LSn_h8dWGS1x4t3M.roa (hash: 6OH5uGxWzXCpN5S3OtJ9jq6Ih10LiMPnXtRn/7a5F60=)
3: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: uwNSNcTkjMY7pifnk//ZW+UdgcGn1gqCwhRPY78B8v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:77:55:83:09:c9:ca:08:b5:dc:74:ca:0b:9d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Nov 23 07:00:30 2024 GMT
Not After : Nov 24 07:00:30 2024 GMT
Subject: CN=49cf4177d376a7b58dd08b19dfa1c7b182650d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:5b:b6:52:50:23:b3:a0:eb:5a:53:cb:05:
13:99:d8:b9:21:e2:6a:52:0e:e7:46:10:0e:1e:ee:
03:71:8d:ab:ef:f6:7f:9a:79:5e:dc:d0:3c:e8:26:
2a:6e:51:25:da:89:48:5a:d2:1e:b7:4a:a6:69:75:
eb:8e:ba:6e:1c:b5:c2:f7:86:c3:6d:e7:51:da:89:
85:e5:c1:1c:bc:cb:c4:60:2f:68:ca:64:00:9d:19:
7f:e0:97:76:26:37:01:71:b3:34:6c:28:a2:1f:14:
0f:66:33:3e:60:0e:6d:0b:94:4f:a3:34:93:ca:d7:
dc:a0:27:36:17:c6:46:63:11:f4:e6:a3:d6:fa:70:
12:3f:be:d1:a0:6b:e9:72:9d:6e:a5:c0:67:6e:c2:
93:e0:da:51:41:14:93:24:41:df:b3:d6:7d:a2:af:
19:19:75:cb:9f:02:46:ab:ca:52:97:c5:16:21:dd:
ef:ae:b7:02:18:b9:75:9b:52:02:ae:b9:16:ff:e9:
75:81:c0:fc:dd:d8:f6:6a:76:0d:65:fa:b6:fc:db:
f2:6a:09:03:c2:d1:62:41:f1:5f:8c:cb:a8:3f:2d:
cc:63:6a:4c:e6:90:6c:76:b5:8d:dd:4d:76:47:b1:
8e:c4:e0:42:a5:b2:11:77:4c:fc:32:c9:0e:71:71:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CF:41:77:D3:76:A7:B5:8D:D0:8B:19:DF:A1:C7:B1:82:65:0D:96
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8b:d0:bd:0f:7c:95:c1:d7:6c:e3:99:c3:90:19:18:7c:77:
b6:3e:d5:88:4e:eb:17:30:79:02:49:d9:3f:80:41:2f:2d:c7:
e5:3f:03:57:1c:7e:b6:1c:e0:fa:97:09:b6:f0:bf:ac:47:63:
9d:43:d7:6b:0d:09:b7:c4:17:ec:22:7a:f6:8b:2c:3f:90:c7:
2e:be:eb:93:b6:64:ca:79:0f:a9:2b:44:32:be:d4:42:40:1b:
c3:36:f7:87:20:1b:96:3b:c1:dd:ba:83:07:0b:2d:cb:49:46:
c3:1c:11:52:b3:f9:cf:fc:9c:be:5e:01:9a:0c:60:32:57:0a:
a4:82:2a:0c:42:50:b8:7b:85:77:66:59:af:89:e0:18:c7:2a:
77:20:7f:d3:72:87:c5:2c:32:db:80:fb:9e:bb:65:58:a8:1c:
64:60:34:9e:8b:7e:2e:28:f2:f9:d3:01:9b:c4:21:69:75:49:
f2:1a:81:2b:9e:0c:4f:8c:06:0c:84:4c:7f:a9:10:71:05:25:
2a:51:2d:4d:b5:c3:90:da:ba:3a:49:c2:66:20:77:0e:3c:ff:
28:00:01:31:45:49:75:84:13:f7:72:bf:10:3e:3d:08:03:ba:
85:4b:76:d7:0e:81:01:64:47:9e:97:c7:a0:0e:c6:f0:be:d1:
c4:6e:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:47 2024 by rpki-client on console-ams.rpki-client.org