Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: YdPlFUAvFHd1nb9Y/ZFpzu9Mjagv37oda+cdbVKZ6OI=
Subject key identifier: BC:3C:22:F1:6B:C5:F0:B4:CC:2D:A7:12:D3:C8:B8:1B:EC:AC:43:42
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 0193549BC9CB0EBBBD5E2784E39456B5BDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 16:01:56 +0000
Manifest this update: Fri 22 Nov 2024 16:01:56 +0000
Manifest next update: Sat 23 Nov 2024 16:01:56 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: bYAtRmqsL5HnX6rMCIHGdKBWreZ8gH6GYBHXH4Rtl8c=)
2: xBMFs5_0XPXWQqSLWrztsPWqV30.roa (hash: BSqrmkr+ZbcZ7eP/q9ESAdXMOjepY/0I6e28SPsX1Ew=)
3: yBJ7aWOtkiAzrQ63oTE9xVpaEL0.roa (hash: 3kqHSwst7AD+245Ow4MtVEsb0VKgzIt5qwfEI5tqP6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:c9:cb:0e:bb:bd:5e:27:84:e3:94:56:b5:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Nov 22 16:01:56 2024 GMT
Not After : Nov 23 16:01:56 2024 GMT
Subject: CN=bc3c22f16bc5f0b4cc2da712d3c8b81becac4342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:51:16:fb:91:15:41:84:f1:9e:2b:31:1a:
77:65:b4:a2:91:90:db:bc:3b:5b:66:ef:e6:61:44:
82:a9:2a:d4:98:d4:0b:df:05:75:3f:73:b1:f6:c7:
7a:78:97:09:14:bb:e0:40:44:2d:54:dc:87:b8:c1:
7d:f9:8b:b1:81:8b:68:9c:5a:4c:4e:75:8d:a8:5f:
89:a5:43:79:0f:05:6b:12:31:48:ec:6f:51:25:83:
c3:80:24:54:a5:b9:13:10:f0:ca:5a:37:f8:24:64:
34:04:e5:ca:e6:95:85:53:1a:09:ea:4e:2e:e4:7a:
a5:0e:f4:27:6a:22:0d:2c:18:bb:de:da:be:21:e0:
dd:9e:68:30:46:ab:b7:41:af:26:d8:75:48:1d:4d:
88:4b:4c:ef:fc:18:71:82:11:7e:03:2f:29:62:14:
6e:35:a0:41:06:13:4b:e8:ce:44:fb:3b:6d:72:7f:
0f:2b:26:e9:44:44:64:c2:20:93:62:b1:55:58:cb:
fc:f3:2b:5c:39:43:7f:3a:0f:a5:0f:86:3b:f2:31:
b3:94:00:a1:a6:3d:f9:f0:ce:6b:48:9f:bf:f2:cf:
1b:45:3a:e2:13:d0:08:3b:76:60:4e:c7:aa:3d:64:
60:94:a6:7a:17:df:37:b4:6b:af:fa:cb:92:b0:9a:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3C:22:F1:6B:C5:F0:B4:CC:2D:A7:12:D3:C8:B8:1B:EC:AC:43:42
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a0:91:a8:e7:8a:2f:7e:83:4a:c9:95:21:cf:3c:f5:d9:36:
67:b2:a2:70:45:15:dd:a8:71:f9:1a:d9:ae:6e:4b:0c:4a:64:
08:e7:cd:f1:89:8e:b6:0c:88:f3:b5:d1:35:f5:bc:d9:04:e4:
2d:09:9e:54:14:99:a5:bc:c9:cd:0d:23:45:65:0f:b3:c8:22:
ab:1c:f2:41:69:a8:e8:34:c2:2e:2f:8e:58:40:60:21:92:df:
97:01:62:a0:e6:28:45:e7:21:cd:d3:ad:fb:e5:1c:5d:8c:a7:
eb:66:9a:de:20:44:f4:6c:b3:13:9c:ee:43:6c:35:b3:bb:66:
6b:d7:ff:fe:dd:4b:71:24:33:6a:b3:22:75:51:31:73:95:d7:
7d:a2:04:11:98:0a:93:2c:47:01:58:43:82:9f:c6:a5:22:22:
b8:e9:50:5e:cb:fd:60:07:40:c3:5d:97:7f:25:bf:a9:fb:97:
79:1d:be:34:53:ed:db:8c:26:b5:a7:a1:15:33:44:0e:99:16:
9b:f7:98:c3:e1:1e:67:88:b7:6f:42:f2:25:74:f2:81:d9:6c:
01:d3:d7:b7:7d:00:50:87:c8:05:6f:7c:ec:1d:30:3b:43:b0:
0b:a2:dc:a5:6d:9c:28:34:8b:69:fd:0d:63:40:73:4e:08:d3:
c9:11:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:12:17 2024 by rpki-client on console-fra.rpki-client.org