Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
File: he1PzEWWTU6nL8RJLE15VxMyEMM.mft (raw, json)
Hash identifier: Oxn1/JlVdNBJf/a/9tf2qh2HIg0G223rI41P0gvu85s=
Subject key identifier: B2:AB:E8:F7:FB:0F:C6:37:AA:28:79:2F:04:00:14:0C:E4:8A:40:91
Authority key identifier: 85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
Certificate issuer: /CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Certificate serial: 01936AB4DA35AF04F989F91964B36FFC82DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
Manifest number: 137A
Signing time: Tue 26 Nov 2024 23:00:57 +0000
Manifest this update: Tue 26 Nov 2024 23:00:57 +0000
Manifest next update: Wed 27 Nov 2024 23:00:57 +0000
Files and hashes: 1: he1PzEWWTU6nL8RJLE15VxMyEMM.crl (hash: 4uTB5F705kh2TuKn6tsbyRuIQhHI90sAF68wN5BBKKs=)
2: mZGPbFaLBsHgguDfmAi8_TEEi2s.roa (hash: UljmrIj007cf+lf1x882L5xCfcCqUtJduwq/P7Qzm8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:da:35:af:04:f9:89:f9:19:64:b3:6f:fc:82:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85ed4fcc45964d4ea72fc4492c4d7957133210c3
Validity
Not Before: Nov 26 23:00:57 2024 GMT
Not After : Nov 27 23:00:57 2024 GMT
Subject: CN=b2abe8f7fb0fc637aa28792f0400140ce48a4091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:7b:9c:42:22:26:2b:6e:ca:fc:77:4f:af:
d7:aa:56:71:e5:a4:52:ee:b8:7f:88:fa:7f:e4:0f:
bd:ba:e8:a3:c6:ee:1b:eb:40:84:5f:c1:cc:75:9e:
50:ec:3e:69:d5:0c:fc:09:8a:9b:ff:e3:82:6d:75:
5b:b2:37:05:cf:22:ec:77:2e:f2:cb:af:5c:67:79:
64:87:0d:48:ef:62:2c:74:6a:b6:c0:79:b9:11:1d:
cb:17:f9:e1:10:2b:b4:a0:f8:9a:17:b2:d8:61:9e:
4f:8b:16:be:b9:f1:29:b6:eb:48:8b:41:f7:74:8d:
44:94:b2:54:55:0d:c8:6f:85:2b:52:c7:52:13:42:
15:0b:f6:82:56:8c:fd:8b:38:05:1e:0d:50:2a:8d:
fc:a3:52:0f:0b:eb:ee:f4:0f:c3:20:47:79:21:be:
a9:e3:0c:52:21:be:36:bf:21:ad:be:94:f3:1e:fa:
f0:3a:79:c7:b6:90:fd:1c:b3:2c:e3:6c:54:fd:0e:
fb:e0:9c:b1:08:08:cb:98:fa:0f:16:07:2c:0f:43:
90:23:94:ed:6a:c4:09:b1:dd:01:ed:54:31:89:50:
e7:bc:2b:44:d6:f9:34:6e:7e:31:23:ff:2d:3b:39:
55:8a:70:e6:62:e8:28:0e:e6:04:87:2b:73:e5:18:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AB:E8:F7:FB:0F:C6:37:AA:28:79:2F:04:00:14:0C:E4:8A:40:91
X509v3 Authority Key Identifier:
keyid:85:ED:4F:CC:45:96:4D:4E:A7:2F:C4:49:2C:4D:79:57:13:32:10:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/he1PzEWWTU6nL8RJLE15VxMyEMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ca460e-6635-481b-b6e9-f85a7cb1d192/1/he1PzEWWTU6nL8RJLE15VxMyEMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c3:ea:f2:d1:d0:52:7c:1b:d0:d4:d2:40:74:75:e0:80:c1:
d3:9c:3e:83:14:43:47:69:d6:3a:fb:d8:31:7a:a8:da:0b:6c:
32:5a:b6:df:dc:bc:35:06:71:64:09:28:ae:38:12:58:01:4a:
57:6c:d6:9c:dc:8e:03:0a:30:b5:38:55:6d:73:9c:95:0d:51:
76:b7:a2:ab:fe:e9:eb:5d:c0:43:55:7c:e3:6c:28:d0:4e:be:
f7:4e:01:60:61:d9:55:70:6c:d6:3c:83:54:65:43:c6:9a:c1:
b9:cf:1b:29:e0:e3:ab:97:09:73:63:4a:f2:8c:8a:ab:f6:a1:
cf:77:7d:18:d4:a1:79:c3:89:cb:84:40:6a:16:c1:96:46:0b:
c8:02:55:9d:65:cc:ce:f6:fe:4b:07:8e:76:6c:50:f0:c2:ac:
10:b0:38:a5:78:05:58:e2:57:83:27:46:9b:68:43:92:da:ca:
49:2a:5a:f6:8f:d5:0d:23:2e:3a:9d:a3:57:eb:3e:71:31:1e:
34:f9:6e:c1:64:c0:f8:cb:04:94:ea:11:07:b7:08:da:13:7f:
e6:ae:c2:00:38:1a:0e:85:cb:38:c0:40:1b:10:97:2a:38:11:
70:e2:1b:ec:bf:ed:a2:7f:2c:8e:7a:58:d6:47:ae:eb:f3:7d:
e9:b4:3e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:46:28 2024 by rpki-client on console-fra.rpki-client.org