Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft
File: ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft (raw, json)
Hash identifier: LUWLAurWJoB33srAgbGNVTr7Roa3rxW9VNLW/mkGwcQ=
Subject key identifier: 27:B9:FA:B7:25:FD:69:BA:52:44:8B:C5:E3:60:28:E1:49:A0:7B:4E
Authority key identifier: 6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
Certificate issuer: /CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Certificate serial: 01935689D4355EFF3798FB86B928C28DB4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft
Manifest number: 1376
Signing time: Sat 23 Nov 2024 01:01:33 +0000
Manifest this update: Sat 23 Nov 2024 01:01:33 +0000
Manifest next update: Sun 24 Nov 2024 01:01:33 +0000
Files and hashes: 1: Dj39yhHYtXufE4isSBaJdC95sBY.roa (hash: RD2dl7hyF8GijehR1oYF7iZC4Jda0s8SEqiZN5O3Zl8=)
2: S4i0Zv6wUVfKsgAPgUc_HRPbtY0.roa (hash: 3EsG6yy5GwrWauhheC0Ybdhew3YEDLAnHqzKvUfxtb8=)
3: ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl (hash: OTL4bs3ynsbR8lY4lnXbjTJZNXR3ZkTXkclAHpx/FrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:d4:35:5e:ff:37:98:fb:86:b9:28:c2:8d:b4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1a7b80c68462859232b86f2b452658d8f7f849
Validity
Not Before: Nov 23 01:01:33 2024 GMT
Not After : Nov 24 01:01:33 2024 GMT
Subject: CN=27b9fab725fd69ba52448bc5e36028e149a07b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:d4:c3:01:06:19:f2:17:6f:59:17:2c:23:
46:8f:de:e4:00:8f:73:98:cc:71:20:ac:e9:c4:50:
b2:de:98:47:8b:6f:17:b4:75:35:3e:04:64:60:67:
b1:5a:79:e0:27:55:b9:85:9d:96:9d:cf:8b:3d:49:
68:87:0e:b1:04:0b:7d:72:71:a5:76:3a:c6:8c:ec:
47:a1:4d:39:90:93:c3:47:94:5d:ec:dc:ae:94:db:
90:e4:be:1b:ab:f7:26:2a:45:e1:d4:08:29:93:56:
64:60:74:6b:c3:9b:63:82:25:5f:4e:8a:9f:a7:21:
11:6f:e6:de:14:22:f2:04:a8:ad:e6:5d:1c:82:41:
c0:3b:71:72:89:0b:93:7d:a1:6c:ed:84:47:9e:e1:
ac:18:47:ed:5c:e5:66:cc:51:e7:d7:3f:af:61:b1:
6e:ec:19:4b:dd:42:69:67:df:d2:84:24:d8:2b:25:
82:55:89:45:02:5e:23:09:fd:56:31:11:8b:f6:bb:
11:e2:d6:54:f1:f8:93:04:5b:39:0e:ee:1b:2c:fa:
8f:01:e4:cb:27:ef:90:1e:62:ee:63:ad:28:53:58:
97:9e:58:49:ad:a9:d3:20:f7:45:26:d7:0d:7d:6c:
55:34:ad:3f:89:e2:36:db:f5:78:bd:98:ed:e1:9b:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B9:FA:B7:25:FD:69:BA:52:44:8B:C5:E3:60:28:E1:49:A0:7B:4E
X509v3 Authority Key Identifier:
keyid:6A:1A:7B:80:C6:84:62:85:92:32:B8:6F:2B:45:26:58:D8:F7:F8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/49e8d6-bbf6-4ca7-ba5d-f1d3cff5527a/1/ahp7gMaEYoWSMrhvK0UmWNj3-Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:47:ab:42:5d:84:0e:b0:d7:6f:b9:1a:9f:8b:0d:c8:df:4f:
7d:b1:ac:74:e3:31:46:79:ef:aa:94:dd:1a:bd:ba:89:b3:7a:
b2:14:c8:b9:53:e8:fa:09:d3:fc:2f:d8:82:ac:b2:94:68:0a:
50:2d:31:81:42:cb:7f:62:fa:2f:63:f8:98:68:20:e8:ac:36:
cf:90:40:c2:fd:7a:d8:79:ff:57:a5:3a:b4:d4:5a:65:e9:56:
a0:fc:ba:53:60:c9:57:2a:a2:ea:4b:0f:67:35:7b:ad:18:24:
05:70:a9:11:02:2d:5d:e1:e8:0b:4f:ca:b0:89:53:ce:69:28:
cb:b6:9e:72:05:d4:45:e1:c7:87:a1:b1:b7:fc:61:06:f5:22:
87:d3:11:80:4a:f4:48:c6:9e:1a:40:0e:bc:91:c8:ce:a7:a5:
cc:b2:36:ab:be:64:58:60:2a:eb:e5:96:45:af:01:85:5e:aa:
0a:a4:55:3a:bf:84:4a:a6:f4:f2:29:50:ec:68:f7:f6:c6:de:
34:80:e5:da:fc:15:31:76:ce:24:6c:c9:80:bc:3b:8f:06:d7:
a2:af:9f:4c:7f:ce:70:52:4a:c8:26:df:1e:aa:c0:3b:f5:bc:
92:2c:63:b1:ee:61:5a:8d:7c:ca:e9:e4:7c:27:68:93:c1:f0:
20:8f:55:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:08 2024 by rpki-client on console-fra.rpki-client.org