Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: /jPkmFXcQlwcvZZidtXfJHUNN5XDOxuGH0rQslebupU=
Subject key identifier: 74:06:27:3C:FA:B1:F7:91:F1:56:9E:96:0C:48:3E:29:CB:7C:5A:A6
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 0193568AED685CA8C6CA10CB6F6464EC7CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:02:45 +0000
Manifest this update: Sat 23 Nov 2024 01:02:45 +0000
Manifest next update: Sun 24 Nov 2024 01:02:45 +0000
Files and hashes: 1: 0f1pNyRjkr6LuXeiWR_ZFzD9cIs.roa (hash: E58rMSzWjOx0DKpJmLklvsGVpXNmsw44mKJzkwToRo8=)
2: 8nY5C9uhCQ0T0S2Ro30Cr1K6vGc.roa (hash: 6/w9F4jUNR9ir2GkupRGmKtVn3eZe1Y9FMPxRUfyp00=)
3: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: 4kvVv8q3P78MLgld9+u+IdsQpmb7szIi9ooYLWgB6Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:ed:68:5c:a8:c6:ca:10:cb:6f:64:64:ec:7c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Nov 23 01:02:45 2024 GMT
Not After : Nov 24 01:02:45 2024 GMT
Subject: CN=7406273cfab1f791f1569e960c483e29cb7c5aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:84:15:d4:f6:94:fa:c5:39:ed:32:b2:9f:
a0:11:45:3f:da:1b:34:3f:c3:1e:67:0b:13:f8:73:
cb:e8:15:6e:a7:de:a5:5a:83:a7:b6:dc:c4:32:d2:
54:34:44:b8:20:1e:bf:ab:50:01:d4:b8:e1:ff:53:
85:97:3d:77:fc:7c:fe:7b:2d:87:f7:d1:a5:e6:b0:
73:6b:07:8a:40:d6:98:5e:8a:b3:4d:7c:23:62:6f:
30:ec:45:47:bc:c5:f7:af:5d:b5:e8:ae:4b:3a:3f:
6c:95:a8:4d:6a:ad:78:3d:2c:6f:43:73:5e:ad:6f:
3a:76:ff:88:d1:9a:59:e8:f1:a5:be:c6:bf:e5:9e:
ef:a8:1b:05:48:ee:2d:1d:c8:9c:5a:21:57:ba:c4:
e1:a1:6e:98:ac:1c:a3:c3:d6:4c:6a:35:49:9f:68:
01:d5:a9:ec:66:fe:38:73:1f:13:34:bd:2f:d4:28:
60:0c:ff:d8:32:20:bd:7a:f4:4e:65:1c:11:60:40:
dc:0b:cb:05:f4:44:07:19:46:5b:d0:06:b2:e6:3b:
b4:bd:84:77:76:b8:da:88:2d:5c:b2:d7:3d:6c:10:
91:da:09:2e:fb:67:c0:35:09:29:eb:56:18:c5:e2:
dd:18:c6:b9:e8:5e:18:dd:95:64:95:89:a5:39:c5:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:06:27:3C:FA:B1:F7:91:F1:56:9E:96:0C:48:3E:29:CB:7C:5A:A6
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b7:9e:e1:92:45:f4:c2:eb:f8:40:0b:9b:8b:20:7f:32:01:
03:64:f3:4b:e6:32:90:c3:4d:fd:4b:84:2f:35:b3:47:90:8e:
d4:34:d1:39:ff:0f:e8:40:28:ec:4c:77:89:67:3c:5b:fb:8e:
9a:2a:8a:71:21:86:15:b4:4d:d0:a8:7d:8b:72:19:20:4d:5d:
4c:e9:b1:db:7f:c9:a3:69:0e:06:ea:6e:df:a3:38:f2:ae:20:
23:ec:b5:46:f4:bb:ac:66:51:c7:81:45:a6:bf:96:1f:d6:e5:
17:7f:50:3c:55:7a:4f:e5:71:cc:98:a4:02:fc:c1:61:96:29:
8b:33:19:b3:f6:00:da:2d:e5:9b:c6:89:d9:7b:89:eb:7d:09:
11:a6:41:a2:21:fb:7f:e5:99:25:05:ad:34:66:c0:53:c1:70:
4e:df:aa:76:3e:69:86:91:ce:93:ad:22:b4:1c:ba:54:d0:10:
62:30:40:25:84:09:fe:b2:0d:1e:31:19:7b:0f:f8:38:7d:5f:
ab:c5:c4:1d:29:99:e6:8e:64:3d:f4:87:23:41:02:ea:33:aa:
0a:f5:5b:43:a0:c2:1c:ae:59:a1:9b:97:fa:d4:cd:4e:d9:ea:
f4:ce:eb:8b:63:08:4f:a8:63:32:88:4d:f0:92:fc:41:82:c5:
32:a0:a1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:55 2024 by rpki-client on console-fra.rpki-client.org