Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
File: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft (raw, json)
Hash identifier: 78vKhdmZN0yNk0TOIAKRHBTCYMTLXgAIaoTIE7slzDs=
Subject key identifier: 32:FE:EF:F8:1A:70:8E:3F:13:FC:6F:4C:67:56:6E:63:49:0C:29:86
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 01935274E6D30A876595BBCEFD74BAC479FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
Manifest number: 138A
Signing time: Fri 22 Nov 2024 06:00:13 +0000
Manifest this update: Fri 22 Nov 2024 06:00:13 +0000
Manifest next update: Sat 23 Nov 2024 06:00:13 +0000
Files and hashes: 1: 2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl (hash: DrQ2FwcpCjFAlvoMqh+k0sAsyUJnM8KB2PgK5RxHCHE=)
2: ClBpqHBk3_kiZEqUFElQaUBmFWM.roa (hash: 5dGpDt19ysT4nFbvGjXB+f8lkmqa9pEP5UJDLKga284=)
3: WWELrgNTr0WeVe7WGq3fYLlV_WE.roa (hash: vPJ27Et1+D9b3C3+OGzqDnHACZ+A/xVGEGUOJDAAYUk=)
4: XWUFU9Krfbz1sTpxoaS63PoibYo.roa (hash: 84rCbO8XVuJs/Ek63Oh0deUho7Ru8a3qdyEs/vBAD9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:74:e6:d3:0a:87:65:95:bb:ce:fd:74:ba:c4:79:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Nov 22 06:00:13 2024 GMT
Not After : Nov 23 06:00:13 2024 GMT
Subject: CN=32feeff81a708e3f13fc6f4c67566e63490c2986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:c7:ef:01:d3:d4:e6:a0:99:b7:75:98:0c:
c2:8b:4a:74:81:44:a0:2a:2a:77:1e:7e:0a:84:2f:
4b:82:ed:cc:a9:73:a9:cd:ad:e5:3c:a0:ee:30:d8:
09:fb:ed:5d:b2:dd:b7:c1:b4:40:90:0f:1e:63:e0:
55:75:1e:8b:7c:6c:51:34:91:f6:df:f3:2c:39:36:
17:23:10:8c:37:78:9a:81:1e:22:17:41:da:87:27:
d2:1f:62:39:66:c2:62:1d:f5:06:6f:98:7d:0c:10:
12:91:54:57:49:d7:8b:72:81:61:d8:9d:be:af:3f:
eb:36:0c:97:a2:62:ac:a5:09:b3:a3:f0:a8:48:bf:
b2:2e:0f:46:ca:14:45:56:1a:6f:cd:99:ea:a7:16:
49:4a:d9:7f:b6:c5:67:61:7f:12:ed:4a:d0:bb:e4:
c6:25:e1:df:ea:bd:3e:36:ef:22:65:d3:96:ae:88:
fd:50:09:98:ff:13:4a:e6:cf:41:cb:cf:dd:ab:db:
5d:c6:ac:59:31:77:2c:e2:21:40:c0:31:50:87:c2:
56:cb:db:67:1d:9a:ac:f2:58:a3:8b:40:70:ee:04:
50:cc:9a:23:7c:b4:01:dc:33:2b:0d:70:d0:ae:cc:
f0:4c:07:31:42:a9:f0:5d:c4:f2:c9:9e:36:bf:b6:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:EF:F8:1A:70:8E:3F:13:FC:6F:4C:67:56:6E:63:49:0C:29:86
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:97:78:c0:88:20:44:52:ea:e0:c4:5d:d3:e7:c4:9b:9b:4d:
7a:81:ac:8b:54:35:71:18:a2:08:09:ee:fd:10:b2:78:fe:ff:
a3:f2:b8:b3:a0:0c:dc:56:20:e0:66:70:b0:8c:fd:73:05:91:
d3:66:67:db:32:1a:d5:fe:16:1f:94:26:a3:69:bd:0f:c9:0c:
f2:36:d1:5e:00:8e:33:a1:dd:aa:18:09:cc:78:65:55:75:6c:
19:7c:c3:3a:c6:41:85:ee:86:8a:09:40:56:6c:da:fd:49:ad:
f8:99:3d:7c:dc:6d:51:0e:bb:f9:05:1c:ec:5f:83:e0:e0:e4:
ba:c9:c9:2a:c6:74:df:5c:2e:88:74:04:92:5f:0f:3d:0a:34:
4c:15:bb:f9:89:79:e0:2b:b9:f3:5d:d4:a5:ca:7f:d2:bf:36:
2e:a0:77:67:bc:ed:c7:30:29:c0:22:97:64:d5:a0:54:24:36:
4f:19:a4:5c:f2:44:24:0e:df:08:5e:45:61:8f:d2:39:b8:a1:
00:dd:e4:f7:38:76:4a:bc:88:80:03:3d:69:44:d1:16:ad:18:
58:45:1c:8f:d2:ae:fa:a3:44:18:2a:7f:50:dd:1d:47:35:c6:
ae:97:73:51:33:ec:22:85:d1:15:f1:30:3a:e8:ef:5f:22:a3:
1d:47:66:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:04 2024 by rpki-client on console-fra.rpki-client.org