Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
File: MW9DO7TO3XLYbETthZmQNSK15PE.mft (raw, json)
Hash identifier: R+HZhlbGZx5fto6wsGlcVlyN9Cjx7sEMkztQ/cc4pmI=
Subject key identifier: 53:47:3E:B2:AC:5E:13:52:12:EC:7A:B3:4D:0A:6B:E6:DC:36:36:93
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial: 01936A7D97662FFFC6E4012253CECFEEFB15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
Manifest number: 0E5A
Signing time: Tue 26 Nov 2024 22:00:35 +0000
Manifest this update: Tue 26 Nov 2024 22:00:35 +0000
Manifest next update: Wed 27 Nov 2024 22:00:35 +0000
Files and hashes: 1: MW9DO7TO3XLYbETthZmQNSK15PE.crl (hash: DCTG+WBkeuS3H/SSQPziJwnVMD/wSqQt8icar2p348Y=)
2: eoSY9JA2Uq3DvzvcWrGosID3jQY.roa (hash: +r7Esz3tjwahIibWuhtx8IYkpGbve2JxuJANeJYNdb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:97:66:2f:ff:c6:e4:01:22:53:ce:cf:ee:fb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Validity
Not Before: Nov 26 22:00:35 2024 GMT
Not After : Nov 27 22:00:35 2024 GMT
Subject: CN=53473eb2ac5e135212ec7ab34d0a6be6dc363693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:66:36:9f:fd:89:c6:ee:44:19:4d:ca:c6:
1e:b2:1e:2a:4e:1f:d5:d4:cd:71:8c:93:d1:15:2b:
29:af:30:52:0c:82:0d:8e:01:c4:85:95:c1:42:bc:
cc:b0:1d:31:dc:aa:ab:61:cc:b0:03:5d:61:1f:63:
cd:25:f5:29:3c:82:ed:35:10:33:df:0c:19:02:1f:
90:57:1f:53:4b:82:04:c5:80:02:cf:21:3a:59:75:
3e:f3:51:1c:7a:a2:0f:43:e2:23:ed:3b:e5:c8:17:
b7:ec:8e:cb:96:23:e2:48:3d:f5:e0:a9:34:61:4a:
92:14:fd:e5:c9:3f:6c:b8:06:ce:0f:99:a5:e5:5e:
41:c5:3b:24:d5:85:1a:92:f2:03:e3:f1:d1:30:c3:
2a:67:ca:9a:b6:8e:db:9a:cf:36:28:13:89:2b:71:
04:41:22:2b:84:d4:54:cd:88:a9:32:f8:ff:e7:96:
a2:a6:55:49:35:e8:33:19:52:82:f9:97:f5:14:5e:
e6:6e:52:7d:9d:b9:38:0e:78:cf:12:30:11:21:94:
0c:43:32:f1:e9:fd:7b:54:35:3a:44:82:ad:d4:45:
48:55:b8:04:4f:b8:c2:37:7c:c6:24:72:08:94:01:
15:9c:bf:96:df:67:46:42:8f:68:53:cf:25:02:de:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:47:3E:B2:AC:5E:13:52:12:EC:7A:B3:4D:0A:6B:E6:DC:36:36:93
X509v3 Authority Key Identifier:
keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2b:9f:dd:2c:bc:c2:c3:2d:eb:2a:f3:fa:5d:32:2b:a7:ba:
f9:bc:e0:3f:4b:04:11:ba:86:46:d9:d4:b4:74:6a:f4:0d:20:
76:6d:b6:27:9e:ee:4f:f3:9f:da:d6:39:f9:e7:7e:75:aa:a3:
75:6e:3f:21:64:5e:d9:ef:57:78:d7:e1:7c:6e:fe:98:a5:b7:
62:16:f3:e3:b1:a1:64:10:43:5c:9b:a0:9e:84:20:a9:01:1f:
7d:b9:b3:02:b2:e3:03:fa:43:b0:6f:16:2d:8a:a0:ab:76:c9:
d5:f6:60:70:d0:aa:0f:25:bd:cb:91:17:cf:5e:61:e0:6f:cb:
1f:e1:03:a6:b3:16:22:77:e1:a2:24:45:f7:2b:d8:17:b5:27:
c9:70:f3:53:26:80:00:0a:ec:ba:76:eb:5c:48:e7:5d:b6:32:
3d:e9:15:20:37:f7:fd:aa:7c:f8:b7:b4:c2:34:da:23:27:b1:
b6:b2:8d:d0:93:f0:e5:c0:f1:bd:c2:64:89:f1:12:68:e4:e1:
1b:7e:8a:3c:bb:7b:cf:aa:f3:4e:58:a6:f9:ec:e5:4d:21:89:
2a:86:19:f0:df:f5:1a:51:52:b8:31:f5:1b:c8:67:db:de:59:
be:9c:1c:71:ed:78:b7:de:3b:eb:6b:70:15:c7:ae:65:d5:32:
c9:06:29:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:22:36 2024 by rpki-client on console-ams.rpki-client.org