Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier: 7E8tvnM4RhN7y7zAnqDqY25RflxGpqe4F6XJ+jd3T2w=
Subject key identifier: EE:44:59:CE:FC:C4:E7:93:6B:17:AB:B6:D1:73:F0:B6:13:D7:45:D9
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 019356F72702D109C4186141B1940049EDAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number: 04DB
Signing time: Sat 23 Nov 2024 03:00:58 +0000
Manifest this update: Sat 23 Nov 2024 03:00:58 +0000
Manifest next update: Sun 24 Nov 2024 03:00:58 +0000
Files and hashes: 1: 6lxl1LvqdpopS91QMZGcfaRJUJU.roa (hash: BopeNxc7wzFlo25ct5vvVke0ItL5uDEHEWDZ8l+Nxkc=)
2: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: BZXjgD+1TR6Xu0POVk2+F5Bic4Ga0BGT8DBcGUy/GCM=)
3: s7l38BTxWc6dD2iA7St-h0YV9hM.roa (hash: sNL9HCjpxrh3K4+hQ3jDw0HMOyn7crikQm8Ee2Kd86c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:27:02:d1:09:c4:18:61:41:b1:94:00:49:ed:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Nov 23 03:00:58 2024 GMT
Not After : Nov 24 03:00:58 2024 GMT
Subject: CN=ee4459cefcc4e7936b17abb6d173f0b613d745d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:1d:cf:94:71:f7:e3:90:69:53:64:21:fc:
f0:28:41:2d:53:ed:e5:c4:ba:e6:01:47:62:c8:2f:
45:16:de:d7:89:69:8c:84:0a:9c:49:d5:fa:6a:d3:
1c:f3:11:ef:5b:8c:a5:c6:15:f9:c8:de:da:d5:76:
34:e1:0f:15:33:38:0a:5d:18:7c:02:15:8a:d4:18:
0a:47:9d:ac:f8:db:b6:36:71:8c:73:b8:a2:c3:f3:
0a:8f:f2:32:e5:7b:88:fa:be:a2:a2:b2:f0:04:d1:
07:c1:2d:9d:f9:40:e8:c5:39:e7:96:60:d7:de:b5:
e1:6c:c6:ee:ff:bd:0b:7b:35:52:fc:45:c1:02:78:
34:99:74:90:b5:f5:dc:d4:6c:57:fb:a0:08:1c:22:
0e:67:4e:86:4d:80:4d:b1:30:37:7b:c5:76:d4:1f:
79:23:05:d0:b8:3c:be:ae:3f:e8:d6:b0:92:52:c1:
96:26:bc:d2:21:5a:1f:44:a9:ea:6c:4c:5f:d7:a1:
c7:44:c3:5e:c5:c1:b5:95:d5:9c:d2:f0:9d:f5:8b:
5d:d4:62:f5:e1:7e:31:30:2d:fc:60:dc:10:e4:fb:
71:f8:55:96:2a:66:03:de:81:57:92:e4:1b:59:45:
26:7f:2f:aa:ae:31:c3:95:87:c9:39:ac:60:77:be:
74:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:44:59:CE:FC:C4:E7:93:6B:17:AB:B6:D1:73:F0:B6:13:D7:45:D9
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c7:dd:ea:20:48:99:2b:31:63:08:91:f4:51:24:14:5e:62:
07:39:06:54:e2:d9:67:d8:49:33:86:5d:6f:5e:c5:1d:cd:cf:
78:53:62:87:07:f4:c2:f1:2b:bf:92:0a:b0:9b:05:40:0e:b4:
6c:33:49:4e:e5:01:5a:7b:0d:1c:71:5c:55:a0:4e:cd:22:ae:
c3:b0:e2:fb:1c:b2:9e:b2:f9:96:2b:f2:e5:6f:b2:29:0d:4a:
d8:5a:be:e6:db:b1:2e:a6:5f:eb:8c:0c:4f:03:a9:17:47:e7:
06:11:62:79:d0:35:04:74:97:2c:21:03:65:a8:6f:3d:fc:4b:
3d:a5:35:04:bb:04:42:cc:c4:b1:28:4e:a2:60:3e:11:b9:64:
4b:ef:7c:92:7c:99:19:e5:6e:3b:0c:ce:4f:fe:27:4c:90:39:
a9:6f:a7:dd:e8:d9:4a:6d:11:56:fa:c9:1a:44:1b:09:11:ed:
d7:99:ce:ec:dd:6f:1b:8c:e4:13:e4:ab:af:bb:67:75:aa:f2:
6a:82:d2:61:95:97:78:1a:34:01:c7:9c:09:68:51:0a:bd:09:
5b:f3:51:f9:b1:b0:41:49:47:69:10:b2:e0:5c:60:fc:e5:e3:
a5:4c:d0:38:c6:a8:bf:2d:72:26:49:81:b7:2e:3b:3c:2a:8e:
3c:5e:77:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:23 2024 by rpki-client on console-fra.rpki-client.org