Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier: ed0GmnIzENUsDcVWCnn3Th3p74UbPpHwYB3p/AK+UU0=
Subject key identifier: D4:BF:BC:A9:88:12:FB:84:67:BB:54:ED:EA:11:22:15:2C:B4:39:24
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer: /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial: 0193553F7253935A33ABF8526C3BF9CEA5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number: 0158
Signing time: Fri 22 Nov 2024 19:00:41 +0000
Manifest this update: Fri 22 Nov 2024 19:00:41 +0000
Manifest next update: Sat 23 Nov 2024 19:00:41 +0000
Files and hashes: 1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: y1oQ5SitahUjQIt2F37bpymgUKK9xRltpPMLbFsJbqg=)
2: BQnbCWl-cPlM4zrT8VIY2RHKhXk.roa (hash: W9ZhNmf0hRR7munYawsHSh9RHgGz6uZbLE/wbKMgH7U=)
3: kulmMUKXDkb1sHf07hU3PGDx5GU.roa (hash: SLpOP1yaeujk+Mmef6e4rVPSYH0F+KNHwUTshCM/NJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:72:53:93:5a:33:ab:f8:52:6c:3b:f9:ce:a5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
Validity
Not Before: Nov 22 19:00:41 2024 GMT
Not After : Nov 23 19:00:41 2024 GMT
Subject: CN=d4bfbca98812fb8467bb54edea1122152cb43924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:31:58:83:9d:24:e3:72:29:73:b7:fb:51:
f5:ae:05:a0:ee:27:5d:e1:b6:24:95:ce:6a:d1:1e:
52:1c:54:a1:ae:ff:47:4c:7e:5a:b2:17:e2:3f:d9:
e2:9f:21:17:5d:ef:8e:2a:4d:d9:60:5d:db:e3:f8:
34:81:84:33:28:ca:72:02:d8:59:3a:a5:33:82:c2:
e5:28:e6:02:6f:6e:23:97:36:9a:5d:bd:10:b0:1b:
66:fc:ec:cf:3f:92:a6:46:7f:c2:05:6c:64:cb:71:
0f:5c:cf:2d:20:c6:4b:61:99:e1:e1:fa:e8:8d:7f:
ed:17:19:e6:59:fa:17:11:95:79:cf:12:4f:80:ba:
c5:4b:53:19:5e:fb:ca:60:55:2c:fd:5b:16:90:43:
38:b8:10:39:08:11:b6:7d:02:70:07:f7:c5:67:e2:
e2:a2:7a:b1:8d:48:88:c7:e4:26:8b:c5:66:e8:6d:
ab:69:9f:3d:60:6a:3c:39:9d:98:20:09:f4:8d:48:
4a:e2:ef:78:46:0d:4b:82:9f:f7:73:b0:01:2f:71:
55:da:f0:42:0b:83:b9:7c:60:da:f5:7f:c4:27:89:
62:d6:a7:56:20:cb:93:1f:00:5b:e0:92:79:69:f5:
be:b1:32:3e:06:4a:06:9b:da:59:6e:41:a8:cd:4c:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BF:BC:A9:88:12:FB:84:67:BB:54:ED:EA:11:22:15:2C:B4:39:24
X509v3 Authority Key Identifier:
keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ef:75:b9:e4:59:c3:42:08:90:20:94:a5:60:be:d4:42:ff:
31:c1:4c:bb:c8:74:ee:bd:9d:2d:36:dc:27:c0:78:60:98:68:
ec:9a:ed:85:78:0c:bd:4e:6b:29:3a:a5:ec:d6:dd:dc:45:0d:
78:c6:51:dd:3c:7c:94:4e:02:54:94:8f:54:2b:5b:18:72:8c:
d1:c3:e6:01:5f:b9:43:52:15:b1:fe:97:c4:a7:9e:21:2f:59:
74:78:85:48:93:1f:15:a4:51:8f:b8:de:96:e1:d8:37:24:5c:
91:e5:e0:00:a4:95:7c:87:17:3f:12:f9:55:ef:ed:52:f2:47:
82:4f:19:0a:85:94:53:04:66:dc:41:40:3d:d5:e0:6b:34:7a:
31:3c:6e:d9:77:52:9e:82:c4:04:9d:d5:90:74:cf:e3:e6:7d:
24:0e:27:c0:4c:e0:38:54:b9:04:d4:05:c5:92:20:34:a5:fa:
48:ff:e0:c4:38:cb:1a:74:39:1a:cc:99:4a:57:d0:7e:6d:cc:
06:27:bf:4b:bc:ef:3b:1d:10:b9:67:28:e5:04:0e:d1:03:a8:
d7:72:98:bc:fe:3c:0b:57:66:20:9f:1f:d0:f2:13:9e:d9:7f:
2b:a4:a8:c2:cf:84:19:d6:a2:83:38:76:a5:6f:e6:61:ec:eb:
ae:a2:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:46 2024 by rpki-client on console-fra.rpki-client.org