Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
File: mGzlJJY15OKWTTdEk9zDeoddBTk.mft (raw, json)
Hash identifier: Wdr5sb8km6a5A75I6Ny4u0ggFC8BdL622Mnt6gzKshs=
Subject key identifier: 14:76:1A:78:2C:65:10:D2:4F:B1:E6:8D:14:E1:F4:4D:2B:DE:43:40
Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539
Certificate serial: 019369A1B5BA7C11CAC5B739918AE4650800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
Manifest number: 1379
Signing time: Tue 26 Nov 2024 18:00:25 +0000
Manifest this update: Tue 26 Nov 2024 18:00:25 +0000
Manifest next update: Wed 27 Nov 2024 18:00:25 +0000
Files and hashes: 1: 7mGzgrWX4ux-GMsWm4kAyhJMgPs.roa (hash: Uwr4f4nkXCGPQ66N3AlPGcz/S/xKkez7mj+3TMHilXA=)
2: mGzlJJY15OKWTTdEk9zDeoddBTk.crl (hash: YqEj26s4bid1NTdFL5tZZTbkfVuFrlvZA7aDbeZ8yDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:a1:b5:ba:7c:11:ca:c5:b7:39:91:8a:e4:65:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539
Validity
Not Before: Nov 26 18:00:25 2024 GMT
Not After : Nov 27 18:00:25 2024 GMT
Subject: CN=14761a782c6510d24fb1e68d14e1f44d2bde4340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9d:b0:82:17:4a:13:09:b1:ac:cf:29:70:03:
c8:c3:5a:17:46:41:6b:58:f5:05:3a:d5:e1:c2:d8:
66:46:b6:a5:90:d8:13:7a:b9:da:6a:1c:00:6d:61:
54:e9:95:2c:64:05:ed:4b:e7:0d:a6:72:c6:e0:1a:
5c:47:33:78:af:e4:8d:28:9f:23:2a:a1:c3:cc:7c:
aa:1c:1a:c4:5f:2f:7e:ed:30:e0:71:fe:1b:94:b1:
3b:8a:70:09:4e:24:2e:36:0e:4d:5b:69:d9:50:bc:
06:63:41:97:b7:76:15:80:a4:27:a5:a6:e5:b6:af:
27:68:ff:34:80:d8:65:7a:90:7f:37:30:8e:cd:66:
8c:5c:10:2c:f7:81:f8:9e:e4:d7:75:23:e5:31:88:
1f:17:8c:71:56:57:48:51:db:53:c0:65:1a:d6:c5:
04:19:ba:2d:fe:0c:06:44:cb:97:03:5a:2c:f0:2b:
85:71:63:fb:cc:7b:3c:6e:d8:04:31:f1:2f:be:7d:
d4:80:ee:3d:5c:fd:6e:10:11:e2:d0:9b:17:77:65:
6c:1c:14:26:99:87:97:ce:8f:11:5b:3b:5a:87:b4:
f0:d2:07:a8:1f:9f:cc:12:1d:dd:bf:ed:b8:89:06:
7b:96:a7:e0:51:21:d4:d8:43:fd:f7:6b:3f:58:43:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:76:1A:78:2C:65:10:D2:4F:B1:E6:8D:14:E1:F4:4D:2B:DE:43:40
X509v3 Authority Key Identifier:
keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:27:95:ac:8a:33:83:e8:d9:5a:19:cb:e3:41:cd:96:74:ad:
bd:4f:12:5c:aa:09:e5:cc:f2:77:c4:6a:e5:5d:d9:5b:d5:db:
f6:72:4c:8a:8b:e8:d4:e2:aa:41:21:c5:18:46:da:8e:bf:85:
67:f5:66:ad:ff:ce:cd:b4:13:e9:08:ab:1b:02:93:88:85:aa:
e3:75:ff:b5:8d:30:73:78:29:0c:14:77:b3:0f:43:96:26:e9:
56:4e:9d:bb:ef:c0:38:49:13:aa:c1:f6:5e:4b:ea:5b:8c:9e:
ca:37:b6:a7:51:4a:a3:b4:0e:22:7b:82:3e:f5:1f:48:f1:66:
ea:53:7c:c4:08:ee:be:7a:a3:22:bf:22:62:05:6f:f9:f5:76:
e4:85:86:86:37:d9:ff:ca:e6:28:c8:0d:d9:ca:4a:82:61:e2:
fb:05:e6:bb:ed:f2:fc:9d:27:5a:b1:53:a0:cf:de:05:08:1d:
13:1d:37:40:77:6d:32:14:00:02:8c:1f:5a:92:71:e9:c2:42:
0e:9e:c3:d9:64:ae:16:9c:ab:c3:42:ec:ce:bd:af:4f:c7:09:
fb:7a:c6:af:5a:8e:42:cb:2c:19:61:b5:80:74:ec:f8:b5:ca:
b3:1b:65:e7:33:1b:87:2b:49:c5:db:75:88:29:98:25:53:57:
d6:e5:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:55 2024 by rpki-client on console-fra.rpki-client.org