Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
File: llE13UJRn92j3T_aqdszV4FfrXU.mft (raw, json)
Hash identifier: MRsYxWwQa7bhv8rqMd05duX6DrOuIKmum5WCCdiHTKg=
Subject key identifier: 2E:79:AA:C3:37:3A:29:9A:5F:6E:85:FC:38:7E:2E:3E:E0:A2:E2:EC
Authority key identifier: 96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
Certificate issuer: /CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Certificate serial: 019369D95E3FB195C997E48739513190411B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
Manifest number: 10E1
Signing time: Tue 26 Nov 2024 19:01:13 +0000
Manifest this update: Tue 26 Nov 2024 19:01:13 +0000
Manifest next update: Wed 27 Nov 2024 19:01:13 +0000
Files and hashes: 1: 5Y-SzdhrnuzcRAfrWiwpTWFeOvc.roa (hash: CiArcwn4aTIrCx/UGNqgtLuPzareDEfaIzEMv4XKSpk=)
2: llE13UJRn92j3T_aqdszV4FfrXU.crl (hash: w82MMwtleqvQhjamahs11Q+/WyOwy+aDy1x89+k76vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:5e:3f:b1:95:c9:97:e4:87:39:51:31:90:41:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=965135dd42519fdda3dd3fdaa9db3357815fad75
Validity
Not Before: Nov 26 19:01:13 2024 GMT
Not After : Nov 27 19:01:13 2024 GMT
Subject: CN=2e79aac3373a299a5f6e85fc387e2e3ee0a2e2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5d:a2:58:ec:de:c8:3e:fc:f1:50:77:9c:8a:
cc:34:85:bc:43:24:32:46:6c:3d:a9:c3:31:be:b4:
66:5f:82:cf:a2:b8:68:8f:e5:6d:d5:39:15:f8:7b:
8e:03:a0:89:2f:cc:95:80:16:b1:b9:29:af:6d:84:
83:9d:0f:e7:62:b2:66:b3:4d:7f:34:fa:dc:e8:51:
eb:a4:d6:e2:30:33:44:49:57:a9:48:09:ba:02:30:
a1:af:8d:ae:aa:b1:6e:84:21:20:a7:00:6d:df:fb:
95:f6:e9:8f:2b:1e:32:44:f8:f0:50:d7:a8:49:29:
61:1f:2e:33:23:0e:f4:46:f1:d7:77:d8:f8:d9:a3:
43:f0:95:0f:ee:a4:47:3c:0a:d8:3c:62:28:38:3f:
9d:e0:96:2b:ad:26:e1:1a:87:3c:33:f1:9f:ef:c8:
1f:1a:6d:02:92:7e:2d:0d:19:48:62:e8:73:ef:a1:
b1:2d:39:35:d4:f3:a0:e8:2e:5a:8d:45:0b:57:fb:
a7:60:5c:c7:5e:fc:bd:7b:ff:f3:e8:d3:2d:4c:84:
5a:c9:42:21:fa:50:c3:3d:74:01:1e:17:f1:f7:dc:
60:74:84:25:0c:d9:8d:eb:57:fa:80:69:af:ee:e8:
05:4d:8e:2d:1c:1d:3d:ea:aa:90:93:93:8d:83:16:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:79:AA:C3:37:3A:29:9A:5F:6E:85:FC:38:7E:2E:3E:E0:A2:E2:EC
X509v3 Authority Key Identifier:
keyid:96:51:35:DD:42:51:9F:DD:A3:DD:3F:DA:A9:DB:33:57:81:5F:AD:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llE13UJRn92j3T_aqdszV4FfrXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/46d903-afda-421b-8a61-07ee242e136d/1/llE13UJRn92j3T_aqdszV4FfrXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:2f:f5:53:6c:44:03:d9:df:cc:69:d4:3e:06:6d:4c:16:b1:
44:0a:24:9e:77:6d:c5:c2:22:15:63:ac:57:1f:53:9c:7c:44:
e6:e6:05:f6:8b:f1:d5:61:da:2a:e1:71:81:90:83:e4:be:70:
bd:4f:78:0b:23:b2:69:c0:65:e0:8f:6c:d7:8d:22:3a:fa:f4:
87:8e:c7:e0:fe:1e:6a:42:37:9e:6d:fd:26:a2:0b:b0:90:96:
28:ab:03:4d:b5:1a:18:d6:4c:a4:32:b0:ea:ad:9d:42:03:ff:
99:24:45:fd:c5:c6:8b:9c:8d:2a:48:ed:08:30:d1:c4:a3:ac:
5d:69:b5:7c:23:97:0a:14:3c:34:84:3f:33:95:6e:5e:39:10:
48:d0:0f:b5:ba:e4:8b:6b:ed:f1:8e:c7:e5:d6:64:ad:07:9a:
d3:ed:41:96:6b:01:dc:59:ec:a8:08:e7:45:55:43:48:f3:6c:
b5:a0:64:d0:d9:25:91:0d:21:a5:b7:4b:7a:d6:97:f3:3a:53:
1d:73:70:41:20:40:c7:30:c3:42:25:13:b4:08:93:50:5c:15:
f8:3a:34:c2:f1:43:ad:d3:aa:22:ef:5a:38:60:e2:21:10:bd:
de:94:e2:b2:cd:a1:a9:c4:4b:c8:96:c0:5f:43:89:1e:92:41:
6d:71:77:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:04 2024 by rpki-client on console-ams.rpki-client.org