Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: v6y57YVYOxPLiQqJpxKT7inRONwGkY98LKB2vyfYa4I=
Subject key identifier: B6:00:5A:79:F5:31:65:B7:6E:8D:08:46:4D:70:5C:B1:19:22:D4:EE
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 0193572DEB7D56DF14EDD352E8E36AE2D5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 1376
Signing time: Sat 23 Nov 2024 04:00:47 +0000
Manifest this update: Sat 23 Nov 2024 04:00:47 +0000
Manifest next update: Sun 24 Nov 2024 04:00:47 +0000
Files and hashes: 1: a2NRJAqUhT81OCk-riZAZS_6Kh4.roa (hash: HO4/JUgTwlfhDwiyTVbU1OHqceC4mWjaPpItG03XX6w=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: 7dTLQnMY3nKDhi/KlS8lMW6JrsXc8DYeaCvDfpLTkV4=)
3: xFIhMo4l79lXQ1yoc-taiB9wrfY.roa (hash: EOOhj/5G9X8D0oGxw1Pmn4dJ4juJH7HQbAy/4InNbx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:eb:7d:56:df:14:ed:d3:52:e8:e3:6a:e2:d5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Nov 23 04:00:47 2024 GMT
Not After : Nov 24 04:00:47 2024 GMT
Subject: CN=b6005a79f53165b76e8d08464d705cb11922d4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:51:1e:ca:96:8a:06:31:1c:e1:1c:97:31:
92:f4:d4:41:f9:b6:69:0a:13:c3:ed:e3:90:80:e6:
00:be:4b:89:bf:5a:7f:10:14:ae:4a:98:69:1e:78:
31:b3:48:3e:f1:b9:fa:b0:39:b8:05:85:74:65:07:
89:f0:17:dd:84:2c:c5:3b:33:bf:9d:50:bc:57:6c:
c1:a4:79:fe:62:0f:de:f4:4a:10:b0:33:5b:ae:0b:
49:cb:fc:f2:ff:87:c3:0d:5d:39:de:99:9e:0f:45:
83:3b:be:03:fd:ae:0e:f0:cf:27:53:b9:78:cb:6a:
31:73:6d:e4:02:85:aa:40:e0:d8:e6:67:ac:d3:1d:
51:85:80:c7:f7:b1:06:75:75:07:32:ce:37:55:d2:
93:68:11:dc:36:a0:3d:73:a1:6b:be:7a:b6:2c:1c:
e6:2a:cd:09:1c:ae:85:33:78:e1:68:2b:86:d0:24:
31:50:be:14:ae:e8:82:4e:26:9f:85:43:89:d1:c0:
40:3b:99:11:cb:14:d9:b6:29:27:65:cc:2b:1f:0d:
87:06:62:a8:0a:bb:c5:23:4c:3d:81:1d:6b:df:d8:
55:4f:89:45:2d:45:61:85:61:6d:7a:c1:14:74:5d:
34:82:1e:68:93:af:be:c3:61:7e:61:f1:13:f0:b3:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:00:5A:79:F5:31:65:B7:6E:8D:08:46:4D:70:5C:B1:19:22:D4:EE
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a8:f6:91:72:fd:a2:12:e5:63:9a:fc:6e:ae:85:d4:50:ee:
b7:6a:39:dc:b6:68:60:65:82:eb:90:85:49:f4:ba:4d:90:a8:
66:6a:86:07:d7:87:00:ec:45:4b:cb:54:19:e2:c4:81:e1:29:
52:e5:ce:7f:dc:e6:fc:9e:9d:f9:c6:bf:cc:42:1d:5f:c5:bb:
fc:4b:48:23:cf:cb:68:81:d1:c7:06:2c:2d:2f:e6:da:4b:47:
96:4e:fe:68:29:72:f9:9b:1b:cc:96:55:53:9f:83:37:e0:80:
70:56:d6:5a:cf:13:3c:a7:07:fa:c6:41:ca:4a:a5:1c:0b:ac:
96:9e:df:dc:f4:d5:dc:4f:98:ab:f3:c8:b3:f8:b4:18:55:33:
d9:0d:bf:b6:b7:9e:ac:a6:a8:45:e7:89:1d:4a:71:da:c6:02:
5d:4a:b7:fc:69:81:e6:87:45:1b:99:97:9d:96:e7:af:9b:e5:
33:2c:84:79:cf:08:d7:37:5e:ca:0b:b9:16:2c:1a:ff:c2:61:
83:84:0c:f4:d1:7d:a5:41:f0:50:ee:06:a8:2b:8a:2f:bf:6c:
2d:c7:46:1d:17:71:ce:35:ca:e4:f8:67:40:65:1d:56:28:80:
6c:db:a2:99:e4:79:12:88:fa:e4:02:a7:40:f5:2c:1a:40:26:
32:8e:d2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:53 2024 by rpki-client on console-ams.rpki-client.org