Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: vtopo62mVDGOTZmHfUFatBLLcuwG8nOrKJ2AkPE50jc=
Subject key identifier: 71:CC:F2:9B:41:8A:04:B1:01:3F:AE:F9:CA:A1:7A:F2:B2:37:C5:F7
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 01938BC01CBB6BFDA84D8F1DBBDA61C7E78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 138C
Signing time: Tue 03 Dec 2024 09:00:43 +0000
Manifest this update: Tue 03 Dec 2024 09:00:43 +0000
Manifest next update: Wed 04 Dec 2024 09:00:43 +0000
Files and hashes: 1: 4fK7acfYM1lXIqdGxL5K58svNjc.roa (hash: n2uKNNxdN+16wMmAcNwskb5owc1U5qjBI+fT9FQlX0g=)
2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: PKxaTwlma6qa0m3oacjFeXOr501R3NlzziY02IEcxO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:c0:1c:bb:6b:fd:a8:4d:8f:1d:bb:da:61:c7:e7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Dec 3 09:00:43 2024 GMT
Not After : Dec 4 09:00:43 2024 GMT
Subject: CN=71ccf29b418a04b1013faef9caa17af2b237c5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:80:c0:d8:9e:4c:b3:96:b9:06:a2:e4:52:
80:9a:10:f1:dd:95:47:db:50:cd:af:f7:37:42:1f:
fc:6c:80:4c:23:c0:f0:d8:ed:9a:1c:85:55:12:3b:
c1:a6:6d:a3:48:a9:7c:5b:8d:3f:13:08:9f:10:36:
8a:2e:f8:ed:be:16:5a:aa:b9:02:ba:c0:5b:71:fd:
6a:d5:9d:4e:33:7d:50:a5:65:81:56:9a:00:5b:07:
b7:80:82:db:49:a2:69:f9:a6:c1:af:d7:3b:f2:45:
0d:38:50:aa:2b:8d:75:f9:06:56:e1:4a:cc:33:8b:
9c:1a:ae:32:b6:19:35:22:bc:75:e8:0d:1b:45:35:
b9:76:92:00:5e:5f:3f:f3:65:d3:cb:e6:7f:68:1e:
45:69:2f:66:97:62:98:5e:5a:be:7d:b7:64:5d:45:
85:ff:d7:78:8b:7f:62:f0:81:c9:68:05:74:30:02:
57:bd:fd:1a:54:7e:6a:40:55:08:31:e9:8b:63:a5:
4b:62:d4:5c:89:f6:9d:4d:38:1a:6c:bb:c0:05:a6:
e3:ab:53:e4:74:e1:4c:48:46:63:21:7d:50:93:4b:
a4:9b:bc:95:bc:7a:18:5b:92:d3:71:9c:a0:27:e5:
21:14:73:bc:ec:3d:27:23:4d:ef:62:c4:d4:b6:c1:
d5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:F2:9B:41:8A:04:B1:01:3F:AE:F9:CA:A1:7A:F2:B2:37:C5:F7
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:67:fb:4b:0c:91:db:08:c9:f4:1e:a8:14:3f:2e:5f:e5:88:
69:de:d4:88:df:19:b2:68:2e:9d:31:e5:fa:0c:60:02:20:f9:
bc:d4:07:1b:c4:09:6d:2a:06:6d:fe:e4:12:8b:dd:2a:75:0e:
87:ac:07:cf:81:2d:0e:2a:07:1b:82:cc:ac:cf:8d:2e:b7:c2:
a6:a1:37:15:6e:1c:24:1c:18:16:64:29:42:5b:7d:1a:ac:50:
71:1d:da:3f:81:c5:a2:83:21:1f:df:18:e8:64:a7:f6:10:62:
ba:40:a9:11:8a:26:a4:8f:26:c8:53:6e:b1:4a:18:6d:d0:91:
7f:1f:89:a9:8f:43:d0:c1:c8:e2:0e:72:16:6e:99:8e:fd:9d:
d7:70:62:4a:dd:c0:87:ec:b3:3c:17:91:88:5c:2f:94:ac:a2:
58:35:58:35:e9:9e:7c:7f:d7:d0:5a:b9:d2:ea:68:f4:f1:d7:
24:9f:b6:a7:44:48:f7:8c:cd:84:79:4e:99:63:6f:f2:ab:26:
91:90:e9:64:b8:09:14:2c:1b:2b:56:7f:c0:fb:10:e6:4e:fa:
91:5a:ca:a3:0e:c5:94:e6:04:ea:07:10:b4:7a:ae:a3:0e:25:
bf:1e:c8:b4:71:59:8b:4a:44:be:61:71:49:a0:4e:81:5d:35:
fa:d1:33:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:38:58 2024 by rpki-client on console-ams.rpki-client.org