Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: gs00kmEhzni3FTQPoAv/Cney1O/s2rRz1GMkIs8i/mE=
Subject key identifier: 35:87:F9:A6:A2:24:5D:10:D4:D1:DF:52:AB:A1:49:B8:C1:53:E8:D4
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 0193553F2F9EB5387ABA76F6FED1CF697C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 0C70
Signing time: Fri 22 Nov 2024 19:00:24 +0000
Manifest this update: Fri 22 Nov 2024 19:00:24 +0000
Manifest next update: Sat 23 Nov 2024 19:00:24 +0000
Files and hashes: 1: CzaGiilaZyLyTQ5tMRAS3a9Cbwk.roa (hash: XQWtoXgkUEha6xe9XURfqAfLJfXEW2YTqQ0uWWTHVJw=)
2: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: Tb6hFaBlIVa9THF5c0PAbnhahUq2IwQsjYGtfYkWEDc=)
3: yxvy1WWyrDcEm68sYiJCsaCFMaI.roa (hash: QwstWVmD2yZapZMke/ftXGCQmr/4vQX7ER7VinOSnF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:2f:9e:b5:38:7a:ba:76:f6:fe:d1:cf:69:7c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Nov 22 19:00:24 2024 GMT
Not After : Nov 23 19:00:24 2024 GMT
Subject: CN=3587f9a6a2245d10d4d1df52aba149b8c153e8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:b9:96:36:de:3c:88:01:2b:7b:32:c9:48:
db:61:56:69:ba:49:2f:84:62:3e:5a:fe:5b:b4:6c:
77:01:9c:d1:b3:a5:ee:7f:5b:24:64:d6:b2:a5:ac:
38:16:8f:04:ae:be:b2:c0:e4:3c:86:19:b1:06:ae:
fb:65:c9:4e:86:00:92:f1:da:7e:f6:f9:46:c7:48:
91:27:17:ed:62:51:a8:0a:6c:b8:6a:86:29:6b:7c:
84:8e:86:55:ee:b2:46:75:c5:47:7f:69:dd:73:6f:
09:60:0e:41:eb:c8:35:7f:b9:0e:56:d4:3c:5b:f1:
70:b9:be:2e:5b:37:fc:59:4d:1b:e9:33:51:3f:4e:
fd:09:d5:1e:35:10:6d:73:d8:41:cd:dc:fe:e2:3a:
85:a6:03:d0:af:f7:df:68:1c:c9:49:c8:cf:1b:48:
68:b6:83:ea:ea:97:1a:1d:ca:7a:70:d9:0c:3c:51:
fd:17:2b:f1:71:75:9b:bf:d0:c5:3b:22:30:0f:22:
54:a8:ef:86:92:fc:b3:61:c5:ca:66:cd:72:15:d9:
53:b6:62:2e:0d:85:c9:4f:96:ea:8e:74:4e:41:69:
78:45:13:3b:43:77:e2:70:39:85:46:78:00:03:5e:
06:ba:49:ca:fd:f3:1c:91:77:c2:7f:8e:5b:01:94:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:87:F9:A6:A2:24:5D:10:D4:D1:DF:52:AB:A1:49:B8:C1:53:E8:D4
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:52:9a:01:3c:b5:5e:0e:04:59:b8:f6:94:3b:31:0e:e5:e2:
a8:60:c2:3a:d3:62:67:99:74:e2:05:5e:3b:ef:f1:29:5a:54:
68:7f:f6:f5:41:6e:fd:bf:9c:9d:48:41:1b:ae:10:20:6b:58:
54:7f:69:4b:5d:80:2b:0d:8b:f4:53:61:51:31:df:7b:be:3c:
4e:80:e9:2a:1a:5e:a8:d9:b0:fd:2d:68:26:17:7e:bc:bd:68:
c9:c7:9a:6b:6e:2e:5d:3a:4e:29:16:8a:34:7e:2c:42:f7:2d:
3c:f2:f8:e8:1a:02:c6:78:4a:a2:82:ce:8c:7f:6a:88:f0:a5:
6f:b3:e1:18:eb:17:11:40:af:a5:1f:14:c1:e4:0e:61:27:32:
d4:c3:60:d5:f7:c7:13:83:15:ea:28:3a:3a:99:bb:b2:f3:8a:
d8:99:38:c4:d7:59:61:8e:01:d8:4b:4f:f7:e5:a7:5f:27:2c:
69:49:41:07:29:47:26:8a:ff:c0:09:cf:6c:25:77:a9:f8:ef:
87:a0:07:22:d8:fb:82:11:53:4a:f4:f6:29:ee:e1:39:c3:a8:
03:88:ba:97:de:6a:b5:34:f1:36:1e:b7:38:49:ac:f2:e0:07:
bc:fc:a3:ce:1c:6f:e7:43:24:55:02:0b:6a:ab:f5:2e:ae:ab:
19:47:5f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:52:24 2024 by rpki-client on console-fra.rpki-client.org