Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
File: 2fIA4tOGg6fLHOXKu-40wGiDSgs.mft (raw, json)
Hash identifier: fhlLqVlTHY9kbHGMGeO/3l8/YPjd6NtjGu4X82DArHg=
Subject key identifier: 3E:87:44:AA:46:EE:3F:2C:25:CF:3F:9B:D7:31:08:85:47:03:D3:05
Authority key identifier: D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
Certificate issuer: /CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Certificate serial: 019352AE376B0E1916874B6D2C35D70237DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
Manifest number: 05BC
Signing time: Fri 22 Nov 2024 07:02:49 +0000
Manifest this update: Fri 22 Nov 2024 07:02:49 +0000
Manifest next update: Sat 23 Nov 2024 07:02:49 +0000
Files and hashes: 1: 2fIA4tOGg6fLHOXKu-40wGiDSgs.crl (hash: DX+ccTMFOl+d9apdtiDO6oWa/HV7AYkaX06Wbho0cVk=)
2: QML8pzL9Iu-fY699i8MX4_vOfog.roa (hash: Y4Ew0D9xxn+fFK0UC4D/O/SPpLzTfVMCs8gHL8EqCn0=)
3: xeQr3bO04zX9AYVQDOjyoZYZ_8E.roa (hash: nkYwdzzKsL/3jEDFZaz7Ig+Hwwx+i9W9EjvRBy13Yr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ae:37:6b:0e:19:16:87:4b:6d:2c:35:d7:02:37:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9f200e2d38683a7cb1ce5cabbee34c068834a0b
Validity
Not Before: Nov 22 07:02:49 2024 GMT
Not After : Nov 23 07:02:49 2024 GMT
Subject: CN=3e8744aa46ee3f2c25cf3f9bd73108854703d305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:22:a2:d2:aa:8e:a1:3c:8b:c0:d5:e4:8e:75:
ea:c4:66:22:35:19:a6:cb:cd:01:a3:11:0c:8d:aa:
f4:bb:f4:8b:c9:42:f7:c4:03:4f:d1:a9:2c:e8:b6:
d3:23:21:51:61:24:81:e3:36:4e:11:18:12:46:1d:
c1:7a:d7:b9:84:81:c0:7d:e0:c7:2d:cc:13:b4:76:
db:bb:e8:3c:28:38:3c:3a:12:56:d3:62:1b:5c:5f:
82:51:97:69:34:04:f8:d0:9b:28:1d:66:8e:2c:86:
2f:e4:65:82:4d:69:e8:d5:b6:80:60:a2:a7:e6:f6:
97:3b:3d:12:b9:07:e5:19:5a:b3:a1:70:8a:10:47:
4c:b3:8f:5c:e3:ad:20:94:85:3f:5b:30:bb:d2:d9:
21:21:8a:e2:48:d6:53:ce:e4:c4:9b:32:5c:ed:bb:
00:d6:0a:43:92:30:2d:80:24:76:9e:ab:69:67:e0:
fb:12:cf:28:47:78:5d:d5:d2:63:a1:39:8f:b5:e6:
30:a8:24:67:70:4e:8a:51:f6:35:a4:e6:28:ce:77:
e4:b1:d3:b6:39:d1:51:df:ca:f6:7c:98:e0:6f:65:
c4:fa:a5:ff:6e:cd:6f:1f:95:ce:5e:07:44:c1:36:
b4:f3:5c:99:85:2d:84:4f:a8:a0:57:a8:c2:be:33:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:44:AA:46:EE:3F:2C:25:CF:3F:9B:D7:31:08:85:47:03:D3:05
X509v3 Authority Key Identifier:
keyid:D9:F2:00:E2:D3:86:83:A7:CB:1C:E5:CA:BB:EE:34:C0:68:83:4A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fIA4tOGg6fLHOXKu-40wGiDSgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/307b98-c222-4835-8381-09c8fe724cd7/1/2fIA4tOGg6fLHOXKu-40wGiDSgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0c:ba:ca:5f:0f:ee:94:de:a6:e9:04:f3:6c:c6:81:95:63:
65:6d:12:b9:05:49:1b:94:7c:ca:fa:1c:e9:a3:1a:66:29:99:
dc:65:89:04:0c:db:a5:b7:9d:84:19:61:05:c5:d1:74:3a:a1:
cf:00:61:cf:b9:0e:d3:fb:e3:37:70:b8:59:03:a4:39:a7:24:
53:9d:2c:0e:09:d7:8e:73:61:80:9a:0d:05:1f:0c:91:c8:42:
72:83:c1:90:f7:79:49:d0:2e:2d:60:0b:26:36:6d:b1:80:48:
38:ec:54:e2:b6:23:f3:08:87:82:96:c9:1e:6b:a6:5d:59:9d:
aa:53:4b:31:4b:95:51:82:4b:21:6e:fc:31:db:51:33:af:a8:
d0:11:8d:91:18:3d:e5:a6:58:6d:0f:2e:96:cb:22:93:6e:20:
f0:45:e4:85:63:bb:d6:8c:1b:84:bb:ea:99:2b:f6:0d:b2:87:
58:f8:3c:c0:85:9a:67:23:bf:8e:86:c7:19:f1:d9:88:ac:e2:
c3:3f:51:04:e5:69:b9:9d:b2:39:2f:78:4f:1a:78:a0:4f:7b:
e2:e1:83:e5:95:ef:70:94:47:4a:67:d2:89:4b:ef:08:cc:c2:
5e:a9:52:d0:0e:33:5b:0f:5e:05:95:5b:f3:05:39:bc:a1:4b:
11:01:95:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:44:11 2024 by rpki-client on console-fra.rpki-client.org