Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
File: 9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json)
Hash identifier: b2XoGr7UDo7oseeiZsaSdjfc8V7QnhdNEZKQUZtJQ9A=
Subject key identifier: E9:DA:56:AB:10:59:C1:9E:98:DB:9B:DC:31:26:1B:26:04:D2:91:B8
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Certificate issuer: /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial: 019357D2A3D7E8AC4243B98A8C5893F4E0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
Manifest number: 019F
Signing time: Sat 23 Nov 2024 07:00:42 +0000
Manifest this update: Sat 23 Nov 2024 07:00:42 +0000
Manifest next update: Sun 24 Nov 2024 07:00:42 +0000
Files and hashes: 1: 1-FYvMC6ph_CcKlep5DWb8ylHlyg.roa (hash: dpkEx8PngDVOCDmuL/BxaGfyBhSAAc6TQb7M6y0VZFc=)
2: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: sE3EggixHjV6vu8BVZwtaJDsg8RYqhQ24UNWxa1vLmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:a3:d7:e8:ac:42:43:b9:8a:8c:58:93:f4:e0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
Validity
Not Before: Nov 23 07:00:42 2024 GMT
Not After : Nov 24 07:00:42 2024 GMT
Subject: CN=e9da56ab1059c19e98db9bdc31261b2604d291b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:d4:a6:8e:e1:d6:35:1e:cf:c8:fb:a2:3b:
9b:db:60:29:18:35:93:f7:08:a3:f2:8a:c9:1d:d1:
91:15:be:ef:b3:a6:6e:5f:23:5d:7b:f8:cb:4c:22:
5a:54:c5:f1:62:b2:1f:fd:5a:90:4d:77:55:73:ac:
29:5b:98:3f:5d:04:2d:a9:14:3a:07:0e:6d:79:ec:
74:29:df:82:57:a1:ce:25:01:77:aa:4f:91:a3:06:
1c:97:0c:c7:f3:e0:e4:71:4f:99:1d:d9:f2:99:43:
e3:27:cd:65:1c:d3:de:ad:a3:25:70:f5:fd:b6:eb:
1c:18:92:de:ca:58:13:2d:12:96:7a:6f:fa:f4:a2:
bd:ff:ae:c0:dd:7f:68:58:e3:bd:62:d8:28:5e:52:
a4:15:0b:ea:1d:bd:e0:48:6a:6a:52:d8:cd:f0:67:
51:f0:6a:81:fa:f9:eb:cc:bc:75:b7:4a:20:08:a4:
d9:37:be:a3:96:49:04:a3:fb:65:ef:c4:3b:54:c6:
81:cc:4d:f2:9c:36:91:54:41:0a:31:21:e9:27:7d:
4a:f8:c8:a5:93:04:b4:90:d9:77:c5:ec:91:16:0a:
ef:f0:7a:6f:71:1d:5b:0a:34:30:e3:13:ac:45:d1:
45:1d:78:60:2f:7f:15:a0:a1:57:73:2c:b3:d7:ea:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DA:56:AB:10:59:C1:9E:98:DB:9B:DC:31:26:1B:26:04:D2:91:B8
X509v3 Authority Key Identifier:
keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4c:a5:3c:e6:a8:3b:96:6c:d6:38:69:73:1b:d5:3b:24:4d:
f9:10:8a:f4:2e:85:47:94:e0:77:f6:a0:6a:6a:4b:a6:5d:88:
f4:fc:89:93:fb:80:c5:2c:ab:ef:63:1e:02:59:49:43:8b:7d:
a2:aa:e4:01:5f:d7:9d:2f:3c:b6:7e:6c:32:d0:af:bc:ac:49:
15:94:70:74:42:5b:1b:46:9d:45:e7:75:16:cb:2f:29:e8:99:
3f:fc:49:1b:ce:8a:63:d4:67:07:90:3e:e6:83:6b:a6:b1:83:
c8:72:e7:fe:38:10:3b:d2:2f:7a:96:4a:a0:b0:80:4a:be:5c:
c1:75:95:9d:e8:bf:85:da:2b:24:4f:5e:4a:e0:3f:b4:72:d3:
80:cb:38:41:bf:97:3f:1e:07:04:fc:9e:b3:31:1a:43:b1:64:
be:64:ca:d9:cb:4c:16:4b:87:7f:c1:a0:e2:d3:b5:58:a4:e4:
a7:cb:2c:cb:ba:fb:73:9a:37:ad:b9:71:b6:56:ab:34:de:f5:
69:97:f5:2b:ac:71:3c:52:f4:f5:be:2e:2a:0e:1b:fa:7c:e4:
56:6c:78:9a:15:09:8e:a7:74:9a:34:36:1b:61:47:cc:31:89:
2c:56:c5:86:20:5c:dc:ae:58:a0:c3:29:4f:45:3c:b6:9d:ba:
02:16:6a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:36 2024 by rpki-client on console-fra.rpki-client.org