Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: HfT7XL7kwiEh/HkBFbFlbYE41E271Z9L5Hpy6L+Limg=
Subject key identifier: 91:D7:30:87:5B:EF:50:71:ED:5D:AA:FF:11:A8:6B:5F:21:89:0D:2E
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 0193587794F78F1EF7AF72A26256B127BD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 0F7E
Signing time: Sat 23 Nov 2024 10:00:52 +0000
Manifest this update: Sat 23 Nov 2024 10:00:52 +0000
Manifest next update: Sun 24 Nov 2024 10:00:52 +0000
Files and hashes: 1: QKJXBuj0YgwQYhI-HUF5YUSngCo.roa (hash: Lo/DfnO4pc6PKNXS7S37SEkAm0vBSLvnVWRB3lrWmqA=)
2: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: bMXD/xRDCIsqEorBDk7BWOSDaxINDuIc9q6tt69cagQ=)
3: rLZGLT8dF0NmUHBTvGTUgLbN5sM.roa (hash: FnNYUjY1bidLh7OmIvFH5no5YMXIdn7y1I3V1422kAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:94:f7:8f:1e:f7:af:72:a2:62:56:b1:27:bd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Nov 23 10:00:52 2024 GMT
Not After : Nov 24 10:00:52 2024 GMT
Subject: CN=91d730875bef5071ed5daaff11a86b5f21890d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:7a:ce:93:c5:a0:86:47:08:cf:bf:c1:f8:
50:3c:1d:c9:ea:f9:ab:f2:2e:9b:3e:fb:0b:ac:53:
d2:0b:e7:c4:eb:eb:08:1c:70:c5:17:e7:f7:d9:32:
86:2e:10:49:99:76:c7:9a:78:0a:bb:9b:c0:74:2c:
98:ef:c6:61:4d:36:7e:1b:76:77:74:d9:8f:3d:74:
83:d2:e5:63:10:4c:11:06:b7:c7:e9:8e:2f:78:fe:
0c:78:89:2c:3c:17:40:2e:81:06:20:09:ea:7b:05:
93:67:f5:f2:cf:74:e7:2b:d0:a9:26:05:66:00:98:
9c:94:29:67:19:b4:86:98:80:f6:6e:71:e8:e1:8f:
bf:2a:2e:d5:68:dc:13:2a:86:3e:0f:15:63:7a:cb:
14:9e:f6:3b:a3:53:e0:f3:c7:1d:4a:ea:b6:ef:98:
8b:18:d8:3e:7d:ce:b9:54:f2:73:f6:87:85:e5:5d:
fa:5b:e7:70:74:8d:cb:6e:76:6b:f4:85:d4:f9:3a:
74:2e:e1:22:80:ca:cc:fe:fb:1c:74:5e:35:9c:61:
c5:85:f6:69:ff:30:89:22:a6:45:47:5b:b2:1c:95:
f5:dd:5a:93:08:21:99:f2:ff:37:b0:63:75:d6:5c:
be:e1:10:53:fc:af:70:db:33:3f:52:0a:89:72:ec:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D7:30:87:5B:EF:50:71:ED:5D:AA:FF:11:A8:6B:5F:21:89:0D:2E
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:83:dd:ad:4a:39:21:36:52:4e:35:cf:1c:0d:2e:ed:44:8c:
5e:6c:b9:a8:71:a4:f8:ab:29:a2:f1:f2:3b:9e:dd:04:fb:10:
a9:b4:be:3c:5a:70:aa:10:8d:85:8d:42:92:34:70:39:02:2c:
ae:05:02:9d:f3:df:ea:4e:82:b7:34:a0:ea:e2:5c:04:f9:96:
7f:d7:cd:41:b2:84:35:34:82:c7:17:43:27:a3:e2:ea:da:1f:
20:c5:d9:83:74:aa:f1:c9:6c:48:5c:77:4b:7c:c4:2d:8b:c4:
98:34:28:4b:8a:c0:21:49:93:14:62:68:69:82:c1:3d:01:eb:
44:eb:b8:b3:15:54:b4:eb:1b:da:a0:06:cc:62:1b:cd:c4:c6:
24:66:a3:4f:0c:4b:49:54:0a:75:97:29:9e:4a:74:d8:53:25:
03:87:34:df:2f:70:3d:9f:0b:41:02:5d:98:90:d5:8d:1c:f0:
fa:c6:42:b6:b5:03:c7:78:36:e0:91:d9:fa:ff:20:16:9c:8c:
95:29:dc:e8:47:3f:2e:ba:0e:e0:51:db:6e:d4:74:e4:8c:40:
ac:61:dc:f2:e1:5b:a7:ea:26:41:e3:e8:9f:a2:63:f8:a7:6b:
9f:5a:76:ba:49:60:53:97:54:87:37:c8:19:ae:87:37:a2:df:
8d:11:61:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:24 2024 by rpki-client on console-fra.rpki-client.org