Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: yP9py8Y55zCvUivALI9wTWZCpWd278s6mb4hU9wrSvI=
Subject key identifier: ED:A8:B2:45:04:FB:05:F9:04:55:40:B5:50:86:AA:CB:E6:C0:5E:DB
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 0193579B8A636DCBD7D7C5A974D2013C1BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 0DA7
Signing time: Sat 23 Nov 2024 06:00:31 +0000
Manifest this update: Sat 23 Nov 2024 06:00:31 +0000
Manifest next update: Sun 24 Nov 2024 06:00:31 +0000
Files and hashes: 1: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: 9BEftMnTC49HfNZRk7aZx/MinUpggHGvloFR4t6vdfA=)
2: Yw0ll8I6I9zMZzGOXMeUOX2aiPE.roa (hash: Gn67wigJsAUcqmoeRnrRNwqGpwW6Jf5DwpIXx3z4nas=)
3: mbccdEtyHx7Yj2Se3NMaJdRLMRk.roa (hash: L5CCZ3Xoec5BaSXN+wVhv1SvHmWKht0+JNUQOYN64fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:8a:63:6d:cb:d7:d7:c5:a9:74:d2:01:3c:1b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Nov 23 06:00:31 2024 GMT
Not After : Nov 24 06:00:31 2024 GMT
Subject: CN=eda8b24504fb05f9045540b55086aacbe6c05edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:7f:4b:10:6f:25:3e:79:d2:09:84:26:79:
4b:8f:4e:17:7e:46:50:69:28:0d:a5:95:be:0c:cb:
8e:03:b3:e5:fe:2a:2d:35:28:dc:57:06:7f:07:ce:
0b:15:00:0d:de:40:c1:37:16:6a:3f:5b:de:68:b2:
e7:a4:f9:e3:d3:2c:c2:76:67:64:5f:79:27:f5:bb:
98:a4:ec:60:d1:71:18:9f:1c:8e:7b:20:24:21:0d:
e7:f3:22:b5:82:31:23:c6:fa:17:70:71:7f:ca:6f:
2e:42:a2:0a:d8:cd:3d:0e:a0:2c:97:f0:58:1c:c0:
2a:11:96:b0:8c:eb:d8:5c:10:fe:b8:b8:00:5f:fa:
ec:1f:8d:ee:1c:0a:ff:b1:0c:39:d4:ed:93:e3:90:
c6:83:25:9a:e3:40:79:32:9f:f4:a3:89:f2:83:12:
da:c2:55:6e:ec:8e:d5:c4:2c:93:81:67:a9:21:42:
7a:6a:cc:cc:8d:5b:d6:f3:63:91:95:60:30:22:e5:
67:67:a6:38:2f:be:cc:03:91:3c:98:82:f6:30:a5:
ba:36:14:5c:a6:ac:ea:eb:b0:6e:d2:d6:c6:28:27:
17:df:57:b0:da:e7:c1:f6:d2:a2:70:96:26:ef:a0:
9d:4c:20:89:f1:e7:ff:cd:bb:88:c5:77:d3:ee:17:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A8:B2:45:04:FB:05:F9:04:55:40:B5:50:86:AA:CB:E6:C0:5E:DB
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f0:76:37:49:62:28:9f:5c:15:6a:e7:ef:cb:a3:72:cd:d8:
9d:15:28:70:f4:ec:ad:16:a6:5b:26:cd:78:a3:e7:a3:f5:d8:
96:2e:c2:3b:7a:50:1f:d2:bb:73:bb:51:99:f1:35:9c:ed:83:
32:70:3c:90:3a:49:79:16:a0:8d:bf:d2:79:20:9b:91:a4:69:
70:4f:e8:fd:42:38:fd:06:9e:2a:74:94:46:92:c6:16:b6:f9:
75:2d:fe:40:82:23:50:77:e5:4d:a1:c1:43:2e:37:62:4d:ad:
67:e0:7f:23:ba:6e:bd:96:ee:4c:2e:49:d8:80:f1:e2:ed:58:
86:9b:88:2f:72:d1:12:f4:d9:81:c9:5e:2a:aa:43:52:c3:6b:
c1:88:33:a8:57:f5:db:74:75:23:d7:5b:3c:cf:73:8e:ee:3c:
a0:9d:45:c1:80:7b:0c:98:67:74:6c:61:5a:b6:34:36:fd:4e:
17:b6:bb:e3:02:9a:97:b0:1d:ed:95:f9:ce:a0:37:93:0a:6f:
28:f3:b6:57:d7:e5:bc:60:bc:06:39:28:f4:dc:9e:44:73:ab:
90:b7:bf:c6:39:b3:67:cc:3a:fd:c2:ec:ae:af:11:05:0f:84:
55:a4:f1:b9:c9:11:e3:5a:1f:bf:e4:5b:81:c0:c2:d2:90:c4:
68:9e:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:18 2024 by rpki-client on console-fra.rpki-client.org