Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: VXVjAAZkOavFQ3CMv9oSpPKidNVSAEmYC6TbeVKEmYA=
Subject key identifier: 29:C6:97:15:53:B8:29:90:FD:44:85:FF:62:6A:0B:ED:34:AA:04:6C
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 019364E9B7595AB82CF28587E5C9CD62A6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 1378
Signing time: Mon 25 Nov 2024 20:00:58 +0000
Manifest this update: Mon 25 Nov 2024 20:00:58 +0000
Manifest next update: Tue 26 Nov 2024 20:00:58 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: t1txHNqbqnd69NpteIR2C4mDfPYCG6HWxmsOpDuVjUI=)
2: uUWSm5VxIwXwseXJJkBBLZ0GkMw.roa (hash: FkccSqUaO8smuB5t646UhJjUwLBCtf8lDYPB4qzL2b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:e9:b7:59:5a:b8:2c:f2:85:87:e5:c9:cd:62:a6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Nov 25 20:00:58 2024 GMT
Not After : Nov 26 20:00:58 2024 GMT
Subject: CN=29c6971553b82990fd4485ff626a0bed34aa046c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e9:b1:78:87:1d:5d:b9:70:82:84:7c:c9:c2:
ab:54:dd:ec:60:30:b2:34:3c:43:3a:f8:13:1e:62:
e7:f8:ca:ba:68:29:0e:eb:59:17:97:86:7f:59:0d:
7e:07:57:89:01:73:a5:3d:f9:95:5b:0f:55:85:17:
b4:f9:a1:23:fd:f0:1f:d6:4e:df:28:7d:94:e5:ee:
99:7e:6a:e0:e1:65:08:36:ae:09:e1:22:e0:8c:23:
8d:5e:a7:5d:19:9e:ac:86:4e:e5:aa:03:b2:78:c7:
cb:2c:87:f6:44:0e:98:5b:57:76:2e:95:4f:e1:e4:
5f:4a:c4:92:4d:19:29:61:2e:29:9b:98:05:94:6a:
ab:4c:da:39:e0:67:1a:41:cd:83:87:1e:93:06:c4:
6b:f9:64:95:15:88:2b:f7:1e:43:78:e9:dd:18:61:
99:4a:7a:cd:0d:52:c4:67:55:e5:5b:21:48:9a:25:
77:24:34:95:f7:c7:83:31:7c:ae:dd:ac:a6:9a:ce:
45:81:b9:81:e3:56:d2:8e:0a:cc:0e:35:08:ed:3c:
64:0d:2e:50:d2:89:f9:88:bd:0a:26:52:95:dc:97:
cc:fd:a9:04:b6:47:19:03:03:6f:11:d9:56:cf:fb:
2e:f6:ed:3b:ec:98:22:31:52:d8:43:95:4d:1e:e1:
c9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:97:15:53:B8:29:90:FD:44:85:FF:62:6A:0B:ED:34:AA:04:6C
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ae:d0:21:62:d1:60:bf:31:3d:ec:ea:12:ef:9c:08:69:a0:
14:5d:c8:ed:ce:24:0d:40:cf:6e:67:d6:e2:b6:e7:83:cb:99:
e7:ab:37:09:36:fc:47:cc:87:da:a2:20:6d:97:a9:0b:22:a3:
a0:c6:55:0b:23:b6:8c:d1:7e:96:f7:b7:c8:76:aa:eb:46:9e:
46:6d:26:e0:84:d6:10:c3:f4:06:73:67:76:c3:77:6b:ee:52:
88:8a:28:60:f1:6d:9d:b9:c5:cc:7a:96:cb:39:bb:4f:a8:f8:
21:f8:bf:24:7d:38:77:0c:25:fe:ca:25:34:83:46:66:45:05:
78:be:b7:a1:da:52:5a:17:82:6f:83:7a:df:35:aa:74:81:cf:
8c:b2:f8:29:ff:6f:a3:1e:66:77:64:e7:92:57:b0:e9:11:45:
25:03:4f:14:fc:87:14:2c:02:ad:3a:c4:ac:f2:38:54:f8:21:
e5:1b:ed:bd:c9:e0:87:06:37:10:4c:04:59:4a:cc:5b:52:b7:
03:fd:00:37:cf:f8:68:fc:2c:97:c4:40:14:e4:4b:65:a7:51:
03:50:43:9e:d5:54:d9:45:ea:7c:fa:d7:07:2d:b0:ab:29:31:
1a:8b:ea:37:92:65:df:07:17:51:16:85:c4:af:1f:a2:26:7b:
40:fa:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:02:05 2024 by rpki-client on console-fra.rpki-client.org