Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
File: rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft (raw, json)
Hash identifier: ycW1woigkhqI525MBCPXtj5O1G32Ly6oUI9Duw9qZVQ=
Subject key identifier: 1E:08:8F:A7:3D:B4:9D:88:E7:E9:CF:19:DF:EB:AF:36:6B:FE:86:AF
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 0193926952CAC5ED16E9DA9447AE573F43F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
Manifest number: 053A
Signing time: Wed 04 Dec 2024 16:03:16 +0000
Manifest this update: Wed 04 Dec 2024 16:03:16 +0000
Manifest next update: Thu 05 Dec 2024 16:03:16 +0000
Files and hashes: 1: kjfwGIJ0iUb_Qo461r3ECsqvUdg.roa (hash: L8Fdi2QBmIab/DANF2RbIIEdSrPt9nvg6tb1KpWKKR4=)
2: rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl (hash: 48FnOUqJ3kWvykTHTBW6PVMHNpZiJoTv3tVHbPYH7CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Dec 2024 15:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:69:52:ca:c5:ed:16:e9:da:94:47:ae:57:3f:43:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Dec 4 16:03:16 2024 GMT
Not After : Dec 5 16:03:16 2024 GMT
Subject: CN=1e088fa73db49d88e7e9cf19dfebaf366bfe86af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:8a:35:91:ea:c1:d9:c5:42:91:43:a3:4d:
64:53:87:6b:d9:12:6a:28:0b:85:e6:6d:cc:33:a8:
cf:7e:c8:84:98:cc:c5:a5:4d:7a:90:99:d9:9e:01:
b4:33:0a:33:d7:de:e8:08:a6:72:bf:50:de:dc:21:
e7:d2:c5:f3:93:0b:2e:d5:63:80:80:c5:a8:e6:c8:
29:75:5a:fb:57:c8:ca:44:8e:21:fc:4d:34:f5:c8:
33:15:a5:f3:c8:de:c2:36:1e:c4:3f:92:23:7c:85:
73:13:df:e7:50:a3:a4:bd:59:94:6a:ce:ac:74:92:
42:ac:87:18:3c:87:c4:f6:ef:de:0f:29:b0:ee:41:
32:d7:68:9f:6e:36:37:2c:d5:09:24:7b:16:33:db:
c2:db:e3:b0:77:bd:27:4f:d9:09:4b:60:46:e9:bb:
83:13:8d:11:e5:da:5f:80:31:da:15:61:a2:ed:0d:
56:76:22:d9:f8:8c:74:55:02:ce:1a:55:b0:3b:9e:
ae:42:91:00:5e:e7:3b:ae:12:78:1a:77:18:b0:e8:
66:8b:73:1b:56:60:ad:fb:78:a5:68:fd:f9:86:b0:
8c:79:50:73:5c:32:a5:8e:ac:b6:54:d2:a7:b5:5e:
dd:ca:43:3f:88:08:92:ed:9a:d8:f1:02:56:77:cc:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:08:8F:A7:3D:B4:9D:88:E7:E9:CF:19:DF:EB:AF:36:6B:FE:86:AF
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:43:40:7e:ef:04:a3:31:17:78:8a:b9:e5:c1:a3:f7:09:eb:
b2:07:4a:c1:55:e1:42:21:b4:f8:d4:a1:78:0f:5d:d8:70:f7:
07:09:54:d6:17:bc:1d:c7:20:4f:3b:bc:fb:18:4f:79:5e:70:
2a:7c:47:68:20:85:33:cb:3e:52:38:07:8a:f3:d4:bd:47:95:
0a:f3:54:49:2f:e8:fc:05:bd:77:8c:a5:6a:f3:64:19:37:8a:
20:68:20:d7:6e:13:bc:89:e9:d7:9d:f1:68:68:86:bf:ff:27:
28:36:fc:8f:12:8f:d7:64:3d:eb:04:56:bc:4e:bd:90:71:e1:
f8:0e:b6:93:5f:5b:16:d8:6b:8d:ec:24:e2:c6:8f:0e:0b:9c:
68:f3:0c:df:d3:07:35:17:b8:3c:c4:25:dc:2d:9c:8d:55:8c:
b6:81:c4:34:98:c1:df:0e:2d:3b:20:ee:ca:ef:c6:d7:b6:cb:
cd:d4:5b:59:fa:c6:de:7b:dd:2b:d0:17:f8:31:50:17:70:ed:
2b:cd:07:96:91:d4:d2:20:dc:e7:07:97:da:ba:53:80:66:98:
21:39:ab:39:06:85:98:12:7c:e1:42:7a:e1:fc:9c:26:e1:9d:
94:c8:d0:31:0f:4d:16:41:91:78:dd:b3:db:cd:7e:dc:4b:3c:
88:d8:86:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 4 20:50:57 2024 by rpki-client on console-ams.rpki-client.org