Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: Jd4I6nBG/og2PVMGDytO7P0wDQei4o1m+pBX3XBtn7g=
Subject key identifier: 40:65:3D:51:92:59:79:73:E5:6B:47:2B:F5:77:B1:2B:2B:2F:1C:EB
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 0193549B76CE6B5362F5ABABA79B35BAA11D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 16:01:34 +0000
Manifest this update: Fri 22 Nov 2024 16:01:34 +0000
Manifest next update: Sat 23 Nov 2024 16:01:34 +0000
Files and hashes: 1: RXhDmF0Nf1871TrkNv974L3Z29Y.roa (hash: NgWViqE4Dkuoc5sG/jNUAWTg7/UWYJWTg2J3N4zUoWc=)
2: b2i0yJCTA3TbjyBhwiCPi6G1HcQ.roa (hash: 2enGwKWlzAj5IVLU1ZBT2R5DyQa6rmbo9jwkcO6am6s=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: TM23Of6fghd7m5NGsHwtqLnc5MjeFizI3rHEAUPX3R8=)
4: nBd4kX4cGmoxrEbCcke0GgV11cQ.roa (hash: AXHUBqkLh7EWA94vAbBhbaZ895btIXuw7RoyjT+oLPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:76:ce:6b:53:62:f5:ab:ab:a7:9b:35:ba:a1:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Nov 22 16:01:34 2024 GMT
Not After : Nov 23 16:01:34 2024 GMT
Subject: CN=40653d5192597973e56b472bf577b12b2b2f1ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:3c:84:44:62:3b:47:90:c8:ec:e4:d3:a9:
0c:d5:0d:9a:40:72:ef:a1:6e:49:65:2a:5c:67:06:
58:49:b9:26:f2:1e:8e:2b:51:db:c4:d1:5e:2e:73:
3f:d8:27:cb:80:2a:f2:8b:af:a6:b8:f6:c9:7d:a0:
bd:3f:76:48:c2:c2:b6:68:c5:de:21:16:11:3e:fc:
c8:c8:37:a6:3d:b6:54:83:cb:0c:e6:20:ad:c3:5b:
1e:8e:2d:50:07:0f:e4:1c:86:a4:d5:e7:30:3e:e8:
3f:98:d3:4a:ca:98:d5:c6:91:f2:9e:52:dd:a2:35:
08:c4:ab:8e:e9:79:93:15:10:20:ec:d7:e4:25:4a:
cd:08:6a:67:f2:6a:0c:84:39:ee:45:43:56:bb:b3:
4c:02:ca:7d:18:ae:88:ee:04:6b:d1:e4:e8:52:34:
a3:7e:86:9f:72:46:be:d5:e2:84:08:da:35:79:40:
b1:87:e1:86:91:b4:0b:67:cd:3d:66:ef:de:8c:07:
bf:67:a4:33:b0:23:ab:5a:c8:7f:1a:70:fa:8b:05:
8b:fe:7d:9e:8a:bf:f9:a6:af:be:f4:2f:25:97:5a:
5a:2b:73:09:54:37:23:af:e9:6d:17:b7:2b:7c:30:
f1:8c:2f:5e:d5:9d:6f:e9:02:44:82:89:82:1d:53:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:65:3D:51:92:59:79:73:E5:6B:47:2B:F5:77:B1:2B:2B:2F:1C:EB
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c6:f7:e4:53:b3:25:25:37:81:75:1c:d4:53:e4:48:0a:f9:
bb:2d:0d:c0:64:96:b1:15:28:da:ce:4d:9f:e5:5d:03:36:9a:
e4:3f:88:8f:31:92:2d:25:97:aa:c2:f3:09:f4:7f:f4:11:aa:
c6:89:0d:4f:ee:8e:4b:e2:44:eb:c3:88:cd:3b:12:ce:96:e0:
72:21:2a:89:d0:37:bc:06:d6:49:96:43:7a:38:8c:39:84:5f:
61:f5:59:95:38:44:b6:91:37:77:4f:60:fc:47:5e:ed:8b:59:
06:70:a6:b3:99:96:69:8c:c2:65:02:08:29:a5:c6:5f:a4:6f:
a5:ac:c3:92:af:c2:94:29:06:f2:79:fe:3d:18:af:65:55:72:
36:af:0b:84:ac:55:e2:10:ec:fd:b9:b7:e6:0f:39:6f:2d:bb:
42:31:f2:14:89:73:c4:ee:de:1b:1e:7b:5a:15:e4:95:1c:85:
f3:6a:f7:e6:d3:18:10:6a:1b:aa:16:97:d2:4e:d1:06:a2:3b:
c5:70:d7:e0:b1:5b:46:72:61:8c:20:87:34:a0:e7:6b:28:a0:
54:dc:e5:b8:cd:04:d2:4d:e3:2c:40:7e:79:c1:19:d9:d6:cf:
3a:3c:ca:fd:8f:7d:72:1f:ab:de:b3:c0:10:6e:08:82:fe:66:
2c:db:90:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:44 2024 by rpki-client on console-fra.rpki-client.org