Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
File: S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft (raw, json)
Hash identifier: 1BymsqpVN2WLf3zQok5yEgFksZutvbi1mv7MEU2tWtk=
Subject key identifier: 90:AF:21:99:56:D4:F3:85:68:BF:F6:B5:0F:0E:A4:91:B1:C4:95:BE
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 019365FE1650356DE176CE2019ACEA50C0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
Manifest number: 011F
Signing time: Tue 26 Nov 2024 01:02:50 +0000
Manifest this update: Tue 26 Nov 2024 01:02:50 +0000
Manifest next update: Wed 27 Nov 2024 01:02:50 +0000
Files and hashes: 1: G2ZuznFw4_fznTAklVihXP9JTX4.roa (hash: GILdWGseH8hM1YOtjRtagdk/iDGi/4fYfYjD8OrAtzo=)
2: S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl (hash: jJogdxMEoyFS716TWiJFgBSBYn1UlSyHwXtZjXG/T/s=)
3: ZHpO0gt_L08K7b4DcyVWh172Jo4.roa (hash: mWbDJMmrGWX4vW2xqMl4Q7NCGK0Qxfr9h7in1w+q/Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fe:16:50:35:6d:e1:76:ce:20:19:ac:ea:50:c0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Nov 26 01:02:50 2024 GMT
Not After : Nov 27 01:02:50 2024 GMT
Subject: CN=90af219956d4f38568bff6b50f0ea491b1c495be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:d1:7d:8e:07:0e:48:09:4b:f1:81:4d:0d:
d0:32:c9:40:ca:b2:f7:3e:b1:5a:a3:39:8d:e9:8e:
bc:af:b8:1f:2f:86:af:eb:b5:87:7d:22:f3:a3:d7:
d9:81:52:79:25:fe:8d:34:e7:b2:3c:4e:99:74:69:
b6:bd:50:85:ce:3d:ba:a2:95:d6:bd:54:f3:ad:95:
55:95:4c:db:60:d1:b3:f3:56:0b:98:81:f5:a1:02:
aa:ca:fd:35:95:2d:fc:6f:73:a1:ac:d7:08:a9:2f:
43:74:ce:b7:36:03:ee:5c:9e:59:87:1e:72:92:8f:
21:8b:8f:bf:b7:19:6b:a8:d1:e2:65:ea:ca:f4:27:
4c:bc:78:7a:f9:01:dd:03:67:26:0c:ea:c1:42:7c:
58:10:48:eb:bd:72:e1:58:d9:90:22:37:60:5d:cd:
ae:fb:d6:d6:d9:bc:57:ec:fc:a4:27:03:2f:62:e9:
65:d0:c8:7f:e2:6a:7e:fe:8f:1c:44:50:fa:ad:35:
09:46:b0:41:93:af:bc:54:47:fc:ac:18:71:e7:71:
c2:d5:01:7d:45:27:de:1a:77:4c:e5:fb:73:03:e1:
8a:68:4f:33:a4:76:91:97:64:ee:b8:5d:e5:ce:45:
70:57:c3:02:4e:82:df:25:db:62:94:95:a8:27:b6:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AF:21:99:56:D4:F3:85:68:BF:F6:B5:0F:0E:A4:91:B1:C4:95:BE
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:73:ff:d0:17:88:42:43:37:5f:16:fa:19:7d:91:09:df:f4:
9e:82:90:ca:94:25:44:a0:df:33:ef:30:39:40:8d:84:61:be:
6b:ee:a4:0c:0c:14:f1:e4:80:e0:6b:a8:88:cb:71:20:f9:65:
d5:2a:51:91:ab:96:a7:ee:48:2f:dd:47:62:dc:15:d5:fa:f8:
eb:47:5f:42:3b:cf:e7:61:83:26:1d:ad:3f:d1:ea:b5:80:62:
4f:2f:ca:16:3e:65:b7:f1:b7:e6:5a:57:a9:bb:93:32:72:ed:
56:ab:89:2b:08:e2:70:a2:e5:6e:fa:7c:10:67:da:f3:54:34:
e0:2d:73:2c:af:a3:8f:f2:5e:24:d3:52:b6:bb:ec:52:97:96:
94:83:c8:dd:83:6b:ef:8c:8d:b2:a4:76:a4:58:bc:89:67:3c:
a3:fc:a5:60:83:1b:cc:43:e0:02:eb:d6:fc:e6:33:8b:c3:f1:
75:98:e8:2e:cb:7f:32:ce:9c:b2:39:40:d6:cd:cf:05:54:34:
06:8f:cd:37:33:61:75:e9:c6:36:e8:64:d7:a9:49:3f:cf:ba:
ca:fc:56:35:50:45:9b:87:3d:d5:1c:63:f0:84:17:4f:61:06:
9c:cd:ce:9c:db:7d:23:a1:06:60:7d:20:02:47:50:20:b7:cb:
ea:aa:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:01:52 2024 by rpki-client on console-fra.rpki-client.org