Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
File: 8IoI64-nvuajGD4y3lGi88zUrkc.mft (raw, json)
Hash identifier: zVur0VpaKDsh5e5Kaag8CqEGi+lBtXeTKNlSJreFHFY=
Subject key identifier: 21:E5:49:EA:24:DE:74:96:58:04:3E:81:F7:86:FB:C7:D3:E0:CD:C8
Authority key identifier: F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
Certificate issuer: /CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Certificate serial: 01935350F070AAEF4F46FB7A053709C56A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
Manifest number: 057A
Signing time: Fri 22 Nov 2024 10:00:33 +0000
Manifest this update: Fri 22 Nov 2024 10:00:33 +0000
Manifest next update: Sat 23 Nov 2024 10:00:33 +0000
Files and hashes: 1: 8IoI64-nvuajGD4y3lGi88zUrkc.crl (hash: oYsh/lyb5VHBWOcUR6JDitqEvBZT5ttHKDYtYboJRQY=)
2: tkX1zrkNxnMmgsvR8blnA6TgwdU.roa (hash: aYx7H0em1kxYo1W7uT68KJ8eFGcB+2VbkKF7TfvMSyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:50:f0:70:aa:ef:4f:46:fb:7a:05:37:09:c5:6a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08a08eb8fa7bee6a3183e32de51a2f3ccd4ae47
Validity
Not Before: Nov 22 10:00:33 2024 GMT
Not After : Nov 23 10:00:33 2024 GMT
Subject: CN=21e549ea24de749658043e81f786fbc7d3e0cdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:2c:97:f4:55:ad:b4:ad:0d:f7:e0:b9:01:
c7:c0:6b:e7:d7:36:0d:a1:ca:18:21:a3:5e:0b:06:
15:b5:b7:91:73:0a:c3:e7:4d:6f:16:b0:86:fe:fa:
11:38:0e:0a:68:83:c7:d9:76:c2:e9:81:1e:0f:7d:
48:c9:ea:06:50:7a:b4:b5:b3:53:5c:85:d8:47:d2:
16:42:64:a9:2e:f9:19:44:d8:01:94:7a:cc:96:ff:
be:ba:de:04:2a:c0:94:35:28:1d:30:83:85:01:bc:
29:00:1d:f4:7a:06:c6:92:c8:97:84:57:28:5c:10:
06:6b:7f:da:3b:2b:bb:d7:04:2c:2a:09:5f:7c:46:
43:11:f6:a4:f1:b6:5d:a3:bc:51:f4:54:5f:db:26:
6c:df:00:b3:a6:8c:64:94:55:dd:96:5e:06:e7:ab:
e3:0f:7e:3d:06:52:51:f9:b1:5d:b5:9e:d4:5f:94:
e9:f5:ab:a2:6a:2c:5c:cd:27:ee:37:12:9f:4d:23:
46:60:c0:48:fc:5b:2a:1f:81:93:35:0c:ed:d3:2a:
35:8e:ef:38:63:d1:a1:79:14:60:d8:cd:c6:2a:a8:
c7:51:94:68:e7:61:2c:b8:5d:3f:f3:c4:8c:69:61:
45:3b:36:0f:74:1c:a2:88:45:d2:14:0a:6c:04:6a:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E5:49:EA:24:DE:74:96:58:04:3E:81:F7:86:FB:C7:D3:E0:CD:C8
X509v3 Authority Key Identifier:
keyid:F0:8A:08:EB:8F:A7:BE:E6:A3:18:3E:32:DE:51:A2:F3:CC:D4:AE:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IoI64-nvuajGD4y3lGi88zUrkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ab11c9-25d5-43fa-9bd3-b1ec28c67c74/1/8IoI64-nvuajGD4y3lGi88zUrkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:23:d2:5c:bc:5b:e2:a5:80:ef:9b:61:79:f4:54:6a:42:a8:
52:3e:22:53:cf:45:7f:37:ee:41:f6:cc:a5:a3:ca:a5:87:f3:
31:f5:1b:5d:91:1c:9d:f7:96:22:1f:b8:f5:62:f7:74:0d:26:
a7:69:89:c4:45:c2:c9:a2:10:f3:7e:db:40:a5:bb:2e:fe:71:
b7:26:cf:01:38:69:58:ad:ec:2c:a9:b9:3a:4c:82:f4:11:00:
7b:9c:42:84:8c:e2:f2:3a:93:bd:4e:fe:d6:da:88:fe:50:46:
60:fe:c7:1a:e8:8a:b3:9c:c9:c1:93:90:c0:8b:27:2c:18:ee:
a9:16:4f:b1:c7:93:46:5d:c0:bc:77:c2:74:00:43:eb:57:b7:
33:62:b7:d7:fd:9a:99:dc:d8:07:dc:e7:e6:ff:ce:42:72:05:
dd:cc:5d:fb:29:87:5e:ca:70:f9:83:b4:02:61:8b:e7:81:dd:
f2:eb:55:ba:e1:21:39:ef:60:e2:8b:9c:c7:5d:d8:1c:55:19:
16:ce:50:99:67:e2:3f:c4:eb:d6:7d:39:c0:ee:0b:15:ae:00:
f9:e6:f6:0a:e7:27:fa:3e:27:7f:f3:9d:f2:21:61:60:21:fe:
c6:e3:0f:e5:72:0e:9d:bc:5c:43:c0:a2:8f:66:df:da:eb:dd:
14:78:2b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:25 2024 by rpki-client on console-ams.rpki-client.org