Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: hOhWBs8Lt7hY1qvJT7iEKA6jhrtunwBCepbGGvLuSyE=
Subject key identifier: 7F:B2:0E:C1:25:94:0C:6C:37:B1:F3:EB:07:60:28:40:DD:D4:B9:89
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 01935689003B84C637A9CC1DCE740D8320BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 01:00:39 +0000
Manifest this update: Sat 23 Nov 2024 01:00:39 +0000
Manifest next update: Sun 24 Nov 2024 01:00:39 +0000
Files and hashes: 1: 2vUxuIMJhQXwtYF3KvatYLHYHR4.roa (hash: 7m7ZGMO89OoievqFMTNKCI450e/DXHfX4fydxjFN6Aw=)
2: AibbCwcaidmAQqAZZdAvrmwGPWI.roa (hash: YVhndJvvCgxhlSslXdbSRXroP14gwCrxojjKUFmyBlc=)
3: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: /sDie7cfiqxPjWEK32SxKlo6vCIuA7QZhq6nrdmDmm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:00:3b:84:c6:37:a9:cc:1d:ce:74:0d:83:20:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Nov 23 01:00:39 2024 GMT
Not After : Nov 24 01:00:39 2024 GMT
Subject: CN=7fb20ec125940c6c37b1f3eb07602840ddd4b989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:b5:fd:22:96:5b:7f:30:21:20:57:8d:4c:
75:72:a6:2f:cd:fd:18:b2:79:6d:11:91:df:de:04:
40:13:86:91:92:6f:41:bc:3e:99:50:f6:9d:cd:5d:
76:fa:53:9c:95:02:70:54:0d:ce:79:15:59:0a:e0:
6f:35:98:04:25:89:b0:9a:fb:77:fa:ad:5c:45:27:
38:c2:01:d6:70:e0:d9:53:f3:17:42:56:43:4f:84:
9a:c8:67:89:af:0a:dc:d3:af:7f:96:66:4b:fc:6f:
bd:3c:bd:bf:39:de:29:de:46:54:ff:6e:61:f2:f7:
69:f0:c0:9a:fc:42:e4:5c:92:99:d3:54:59:97:cb:
37:f6:f5:99:36:4a:02:2d:6a:04:6a:a3:2d:e7:aa:
7a:4f:c6:d6:10:d4:c6:5f:0c:99:c7:11:53:0c:68:
04:41:dc:3c:8e:66:98:89:de:aa:f2:36:e3:2b:f0:
b4:53:c8:0e:ce:3a:ec:cb:45:38:f1:d0:0b:d2:fc:
b9:bb:14:41:95:a0:75:57:ef:79:d0:ec:09:02:42:
61:ca:e0:96:89:80:dd:82:01:b8:84:18:97:0e:a7:
f2:4d:b6:95:6f:0b:64:80:d8:7d:f1:c5:8d:5c:c0:
52:41:9b:f8:af:d3:8c:38:40:8c:59:22:7b:14:19:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B2:0E:C1:25:94:0C:6C:37:B1:F3:EB:07:60:28:40:DD:D4:B9:89
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:96:ba:b9:68:2b:bc:79:cf:09:2f:24:4d:79:25:80:e4:dc:
3d:92:bd:a7:a0:5d:70:11:4f:97:1c:70:7f:87:69:4e:07:de:
a6:ff:4e:32:1c:1a:88:94:1c:82:0a:7c:f8:c5:5f:2c:5b:13:
f5:9d:7a:73:bb:00:c3:cb:74:0d:3b:c3:98:cc:a4:ff:82:09:
08:bc:77:85:2b:28:3c:36:ed:12:4e:7a:f2:24:a5:39:3e:4d:
cc:8c:ab:c8:ab:42:36:5d:ce:ef:b3:46:82:79:12:34:97:2b:
2f:35:ba:dd:68:4e:3d:81:2e:53:61:95:dc:f5:47:07:ec:e3:
5d:ec:4c:d1:52:d2:0f:12:0b:b7:04:a7:6c:9e:4a:a8:a4:46:
98:da:6b:c6:9e:2e:fd:1c:ac:bd:fc:05:c5:bc:2f:c0:e9:d6:
44:71:f9:4b:03:a6:b1:9a:49:e4:8a:ec:70:1b:25:79:e8:c4:
51:81:45:47:36:92:b6:0d:04:a2:06:53:a1:45:08:bd:c3:a8:
cd:c5:39:9f:04:b6:14:f4:c9:80:8f:c0:84:05:58:a2:e0:5b:
53:ba:20:b0:ce:4b:07:dc:e3:5e:a0:5b:c0:5e:be:99:1a:11:
47:18:20:a4:14:a8:48:a1:6a:5d:61:12:6c:3b:9d:d6:38:03:
84:1f:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:46 2024 by rpki-client on console-fra.rpki-client.org