Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
File: rQt55LWcX82kk6IK0Y6UVYWdAxs.mft (raw, json)
Hash identifier: zbUdc0jZyGhBDk0BlEB2oF2iqaHlhv1NVctBpAl+aoQ=
Subject key identifier: FF:D3:B1:D9:EF:01:7B:CB:7C:9B:11:F2:D8:FE:CE:B4:98:D0:C8:C5
Authority key identifier: AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
Certificate issuer: /CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Certificate serial: 019356BFA34A32A65FF886CEB03AA962D13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 02:00:19 +0000
Manifest this update: Sat 23 Nov 2024 02:00:19 +0000
Manifest next update: Sun 24 Nov 2024 02:00:19 +0000
Files and hashes: 1: 854ra-UGzdN0kA3OZZZ20r2tfIM.roa (hash: e/UbLeq1+GJu4OQRTZpw2z+fl34jma/UYjl/PXVoNd8=)
2: rQt55LWcX82kk6IK0Y6UVYWdAxs.crl (hash: inojFoiTPZnjuSIANIDjSed5Szzk8Gsgp38T4K7uTCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:a3:4a:32:a6:5f:f8:86:ce:b0:3a:a9:62:d1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0b79e4b59c5fcda493a20ad18e9455859d031b
Validity
Not Before: Nov 23 02:00:19 2024 GMT
Not After : Nov 24 02:00:19 2024 GMT
Subject: CN=ffd3b1d9ef017bcb7c9b11f2d8feceb498d0c8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:75:6b:bc:33:a6:07:dc:41:aa:d4:92:b4:
0e:05:0c:f2:2e:a2:91:23:6d:61:19:fa:bb:1e:4b:
2a:23:8a:99:c3:f0:03:67:08:1c:27:ed:b5:b7:d3:
a8:cf:96:08:e3:e5:29:54:6a:9b:6a:6f:9b:56:8f:
0a:9e:e4:9d:c9:03:b8:64:5c:d9:ab:f7:9b:cc:d0:
ab:12:55:c4:82:0b:e5:a2:65:e5:cb:18:d8:d0:fd:
a6:cb:4c:85:5f:59:0e:27:f1:f2:c6:f7:a8:d6:17:
ed:63:7d:52:ea:4d:ba:dd:4e:fb:df:10:2b:33:71:
1e:c9:33:cb:7d:af:ee:a6:35:5a:da:9d:50:be:b8:
ea:32:d7:7d:56:a0:8f:1d:0b:75:97:34:40:2c:71:
4d:43:a0:13:b0:87:29:e6:ba:74:96:5d:ea:25:c7:
c0:a8:06:3a:78:13:0f:48:b9:f3:78:22:53:da:06:
36:6b:6a:cc:d7:bd:1f:a3:f6:e5:49:d8:43:ce:d1:
11:f1:78:67:1b:b0:3d:9f:0c:f5:8f:3d:98:d8:6e:
5f:c8:b7:60:33:a6:c2:42:1f:79:6c:f7:6d:7c:a2:
4e:a3:08:04:9f:54:f1:de:43:1a:7e:cc:06:ac:5f:
a5:51:d0:4f:7f:20:55:61:5a:ce:75:71:71:22:87:
5a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D3:B1:D9:EF:01:7B:CB:7C:9B:11:F2:D8:FE:CE:B4:98:D0:C8:C5
X509v3 Authority Key Identifier:
keyid:AD:0B:79:E4:B5:9C:5F:CD:A4:93:A2:0A:D1:8E:94:55:85:9D:03:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQt55LWcX82kk6IK0Y6UVYWdAxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd555b-f73e-48ad-b544-e3eb4e8a38db/1/rQt55LWcX82kk6IK0Y6UVYWdAxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:01:20:6a:20:05:10:16:2f:67:f6:41:bc:d7:38:82:30:16:
44:7a:8f:a1:1e:16:06:22:bf:1d:19:1a:49:17:b9:a0:15:fb:
bd:eb:15:24:cc:eb:dd:d8:fe:40:b0:12:35:a6:4c:44:9f:5d:
cf:0d:93:a0:29:1d:51:2d:e6:3f:df:e8:3d:c1:b0:e5:bc:f1:
ee:fc:a9:8d:7a:79:e8:20:fc:b1:f9:ec:27:f6:b2:1d:02:6f:
a9:a7:0b:74:ef:06:13:cb:58:de:f1:85:a3:02:1a:47:d5:fd:
6d:42:55:ae:46:01:f7:52:f5:b5:72:b3:22:44:15:ac:51:01:
81:be:42:8c:3e:f6:13:6a:14:0c:55:41:69:f4:68:5b:04:ac:
84:7f:fb:79:df:5e:79:d8:6f:34:7e:8e:b8:e4:49:8a:2b:1e:
a9:1e:d7:b9:0c:c2:26:cd:f3:76:42:1e:b0:b3:07:ec:31:d9:
3b:4d:f0:2c:01:a7:c5:80:4e:f8:aa:23:a9:15:04:32:75:9c:
4f:48:68:49:90:74:68:fa:e3:86:2d:dd:94:c0:55:04:a7:51:
06:89:6f:f8:e7:0d:2c:51:28:82:c0:2c:8f:9a:46:15:d0:5a:
18:e7:eb:12:23:c0:9e:c7:59:d8:a6:18:86:ae:84:66:88:1a:
25:49:8c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:48 2024 by rpki-client on console-ams.rpki-client.org