Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
File: BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json)
Hash identifier: ZdWodPFwDYpxau1+YLDgeJWPc5hweJEvMiM14Td8ykw=
Subject key identifier: 9F:FF:0C:2B:7C:7B:06:58:E9:09:4A:28:8D:47:34:54:7C:BF:28:A8
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial: 01935651E3A6FEA7AAABE8E6AB4A2F55982C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 00:00:27 +0000
Manifest this update: Sat 23 Nov 2024 00:00:27 +0000
Manifest next update: Sun 24 Nov 2024 00:00:27 +0000
Files and hashes: 1: 35yM5Wgna9OgZARuial53JkN0bw.roa (hash: 3jVazTN2YTpFqgoA+D5I1QZ64wOnOwwgxR+CGFmxLhk=)
2: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: zjqR9yvcsS5m9KUxwgcUtCFDzyv+I89QT0RycfS1pkw=)
3: svdWIAv3UPfHCbMie6sKd4CyClM.roa (hash: YiWdF+1VyKx7XWJZeV1dzzEZk9dFooFBTnfJG+2FMkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:51:e3:a6:fe:a7:aa:ab:e8:e6:ab:4a:2f:55:98:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Validity
Not Before: Nov 23 00:00:27 2024 GMT
Not After : Nov 24 00:00:27 2024 GMT
Subject: CN=9fff0c2b7c7b0658e9094a288d4734547cbf28a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e1:02:3b:f8:bb:15:40:10:43:b2:9b:28:c8:
f1:fb:d5:83:46:1b:82:3a:11:95:81:42:a7:25:b3:
d4:d5:b0:86:2e:88:c8:93:08:7c:80:8d:d4:b7:4f:
ab:70:02:5a:85:e6:a5:ec:4b:07:cd:1a:cb:f9:6c:
ef:90:44:c4:6c:57:9d:b7:0c:7f:5a:1a:6e:14:94:
0c:3b:d6:df:c7:5c:2b:36:f9:90:f9:4b:64:cf:99:
01:58:fa:17:f1:dc:0b:90:e0:df:31:9d:82:68:6f:
81:11:cb:f2:f1:34:63:ed:7a:83:b2:f6:95:88:aa:
81:c5:5e:8c:65:a5:c6:3c:9a:ee:75:7c:80:36:c8:
17:18:7c:ed:a3:d2:29:49:e8:27:4b:c5:59:c6:89:
43:0c:35:16:df:53:5a:4c:8d:dd:8f:54:d8:df:1e:
94:b2:64:1f:be:76:0f:69:bc:57:09:d3:60:d2:27:
5e:cb:77:29:2e:80:c5:5b:3f:25:c7:be:7e:60:2f:
dd:b0:60:18:23:46:16:3b:51:02:97:94:f5:de:3d:
36:31:e4:58:20:7e:24:73:17:d4:f2:ec:a3:b4:cc:
bf:b3:20:cf:4b:e4:25:0a:16:2f:31:3c:d1:01:db:
db:c5:1f:a8:4c:ca:b5:89:f5:75:e2:3d:37:a6:fd:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FF:0C:2B:7C:7B:06:58:E9:09:4A:28:8D:47:34:54:7C:BF:28:A8
X509v3 Authority Key Identifier:
keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b4:54:44:0b:98:a9:3e:e5:45:73:c6:87:7b:d9:a3:46:b2:
ea:a4:f4:fa:40:53:33:c4:9c:98:4e:81:ee:52:96:02:00:8f:
3c:11:03:c7:11:71:1c:4e:a4:17:7c:da:df:39:76:9b:58:0e:
dd:a0:cb:39:49:36:63:24:ed:79:da:6b:f5:45:44:90:ff:4c:
1f:e2:d6:50:2b:9d:2b:90:47:09:88:08:b2:bd:7d:66:54:65:
80:d4:e4:a8:5a:f6:ef:5c:e0:02:c0:ea:4c:de:93:49:16:3d:
89:63:35:cb:f8:d0:7d:b4:1f:e5:78:83:0c:fe:e1:34:ad:2a:
e5:cb:5f:6e:2f:92:9b:22:80:8b:e1:7a:9e:85:41:45:df:89:
19:ca:df:c2:6d:2e:3e:8f:a0:93:32:31:aa:67:d2:90:1c:c3:
5e:66:06:cc:07:47:2d:d8:12:c6:ed:89:91:f7:36:40:78:e4:
e4:6d:50:f5:b8:f6:7c:6a:fa:db:9b:2d:17:6e:f3:36:f2:bb:
f5:ef:f4:9f:5a:9f:8c:6e:2f:a8:db:89:2f:f4:b9:96:ac:94:
26:99:50:b4:ed:dd:ec:33:c6:5b:a3:d3:4a:7c:83:7b:22:a5:
e3:65:c2:93:b7:6a:57:e2:f2:07:a2:28:b4:69:66:54:c4:0a:
19:dd:a8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:23:56 2024 by rpki-client on console-fra.rpki-client.org