Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: IwKGBG5KKteQQrLXnqvXwfWi+JsSIvGpLDZl9oLkte4=
Subject key identifier: B6:AB:85:6E:BC:8A:3C:54:27:38:97:48:63:D8:A8:89:D7:64:C7:45
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 019351D083EBFF7B70CA01316715DD7E97A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 0421
Signing time: Fri 22 Nov 2024 03:00:39 +0000
Manifest this update: Fri 22 Nov 2024 03:00:39 +0000
Manifest next update: Sat 23 Nov 2024 03:00:39 +0000
Files and hashes: 1: 9IMJ2fe9C69Vxmu6QCrqyUvQZ9Q.roa (hash: 7phUsk2BIW0ZHHBnUPMHFFxHXb878juhNAA3cgN6CqY=)
2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: m0KmaYbEleIMSiZs+BiGrwv4D6921m7bK45v/AmmLMI=)
3: V4pYpCQHCCvTWlN38fj1bcu6M-4.roa (hash: VRQKBm8WQBGigDkWRKbwtcIKQ6UVG2ZoBdf+7fFlfI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:83:eb:ff:7b:70:ca:01:31:67:15:dd:7e:97:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Nov 22 03:00:39 2024 GMT
Not After : Nov 23 03:00:39 2024 GMT
Subject: CN=b6ab856ebc8a3c542738974863d8a889d764c745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b6:70:4d:f4:2b:d8:87:84:98:ad:ea:53:b6:
23:70:25:f2:7b:87:3f:59:4e:2e:09:17:af:8a:07:
d5:7b:f9:d9:ae:5c:ec:b6:8f:97:26:8f:39:74:34:
21:0a:50:e4:ed:f1:40:b4:fc:20:f2:6c:9e:1e:4d:
0f:c1:3c:b1:58:47:89:bd:a4:4b:b0:05:90:ce:92:
65:88:bf:09:55:ff:e6:4d:1b:2e:30:6f:08:3e:39:
df:16:6c:94:39:7f:75:34:f4:c3:47:54:c2:76:f8:
ce:0f:3b:73:43:a1:6d:9c:d1:fa:07:43:fe:f5:1c:
88:33:cc:0e:bf:a9:a4:85:f8:63:d8:ed:02:b6:a5:
14:35:04:f3:d9:11:5f:5d:78:8c:8a:28:2c:33:8e:
d1:68:53:18:1f:b0:4a:30:d7:64:8f:5f:25:f1:9d:
99:8d:83:27:60:8a:84:55:1b:10:72:b8:04:69:63:
46:a2:d1:5c:f0:7e:85:7a:72:96:45:18:c6:ba:36:
06:e2:99:3a:70:e7:f0:85:7a:a2:e0:dd:3e:b7:88:
96:61:d4:96:c3:83:09:15:d2:04:9f:65:0a:34:d9:
32:27:65:1d:0b:55:b1:d1:b3:35:01:d0:23:af:67:
2f:c7:0b:56:7a:df:14:09:7c:d9:b2:b3:28:07:69:
6a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:85:6E:BC:8A:3C:54:27:38:97:48:63:D8:A8:89:D7:64:C7:45
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:51:63:67:72:b3:03:64:73:53:4d:c6:77:c0:0c:29:07:ef:
e1:fd:5c:c8:c4:29:42:01:70:4b:35:f8:e9:df:88:ff:79:bb:
7a:67:08:2c:03:42:6f:c4:cf:34:7a:a3:8f:88:57:9c:52:01:
86:58:1f:b3:53:42:11:df:4e:0f:58:62:fb:50:61:7f:67:be:
10:15:0d:61:13:5f:10:75:62:70:8a:21:4a:7c:5c:8d:bf:60:
94:d7:1b:9a:74:2e:fb:9b:83:c4:53:25:aa:89:17:e3:4d:1c:
81:be:84:ef:15:0b:be:b6:f4:81:a9:cc:b1:58:a9:c1:96:09:
b5:37:16:be:fc:77:b0:8b:48:81:59:27:9b:3a:22:82:e8:ee:
6c:bd:a1:d1:d7:f7:14:09:40:98:42:e2:2e:cb:e2:61:18:dc:
88:2c:06:1c:74:36:ec:2b:a0:1b:45:df:ab:4e:30:9e:b8:ae:
fe:4e:f5:fb:bb:08:cb:bc:90:9d:02:76:fa:b3:39:80:ab:36:
0e:b2:56:3b:34:71:a5:6b:7e:dd:24:0c:3a:99:53:37:e5:3a:
73:b5:7e:51:d2:f8:8d:58:29:35:86:2a:f7:0b:18:69:37:51:
ad:9e:3c:33:a9:51:91:6b:d8:6f:f9:22:02:bb:b8:ed:37:91:
22:c0:d6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:46 2024 by rpki-client on console-fra.rpki-client.org