Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
File: grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json)
Hash identifier: FZLo9VrSvCfJmW+OdybKp+sMT0T9u4Ek9OOUCdPLpUs=
Subject key identifier: 5E:E4:40:17:01:1A:74:18:AB:AF:5B:D4:37:D1:BE:42:91:02:7F:00
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial: 0193568ACB6BEF45AE92ED53D8DBE94AA951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
Manifest number: 0BE3
Signing time: Sat 23 Nov 2024 01:02:36 +0000
Manifest this update: Sat 23 Nov 2024 01:02:36 +0000
Manifest next update: Sun 24 Nov 2024 01:02:36 +0000
Files and hashes: 1: F1eUFlw-pFHxcyctu0_zkJhwAls.roa (hash: sx3FR/gH4J2Vtkf+3kbd9Lilk4qUiSS5/Um3H5HQ6ww=)
2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: TM/+KTTRuKls0vkvsR9xbZwVXtWY97wkeJo3GwtNP80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:cb:6b:ef:45:ae:92:ed:53:d8:db:e9:4a:a9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Validity
Not Before: Nov 23 01:02:36 2024 GMT
Not After : Nov 24 01:02:36 2024 GMT
Subject: CN=5ee44017011a7418abaf5bd437d1be4291027f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:82:b8:84:03:ba:e7:c4:52:b8:29:9c:f0:
7e:46:70:a5:2d:34:7c:bf:b4:34:3a:ce:3a:a2:18:
4c:82:72:fa:4f:cb:03:3a:7c:1e:66:37:92:22:fe:
24:0f:ad:b6:b3:5d:2a:f2:bc:a8:e1:2c:84:b5:5a:
5f:0b:50:e1:bd:9d:ce:76:a3:96:60:2d:88:eb:51:
99:e0:28:d8:73:da:f9:a4:d9:d7:b4:3a:3e:d2:30:
7c:e5:79:46:70:ee:80:11:dd:f2:91:2e:00:bf:57:
81:32:6b:be:b4:d7:74:97:d1:f5:f1:36:c8:b9:af:
5c:93:4d:11:0b:9b:8b:f8:65:1b:09:2e:29:79:e4:
e7:82:8c:7f:6a:12:93:45:31:ae:51:a3:b6:c6:b3:
82:06:2d:d6:c5:58:42:30:af:f9:25:9b:e1:45:cf:
a0:92:28:bf:55:b7:9c:da:c1:65:af:11:9b:a8:53:
64:7f:11:6a:20:10:22:28:bd:0a:22:45:1f:dc:04:
2b:74:11:a5:bc:e4:5c:6e:6d:27:06:3c:08:eb:76:
4a:b5:2d:6d:e0:36:2b:b3:20:14:97:b5:54:64:f6:
60:c0:7b:f8:50:e5:03:7f:de:cd:e9:26:50:3f:12:
83:9f:06:9c:d4:ba:23:0f:d3:f7:01:c2:d8:cd:fa:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:40:17:01:1A:74:18:AB:AF:5B:D4:37:D1:BE:42:91:02:7F:00
X509v3 Authority Key Identifier:
keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:57:2c:9c:93:10:d0:61:33:ad:e4:50:b1:e8:db:72:8a:83:
a9:f6:84:99:86:35:42:9a:56:cb:9e:f0:d1:84:92:12:48:06:
56:6e:f2:8e:b5:3f:5d:c0:76:f3:55:14:08:d3:e0:f4:e9:bd:
e2:77:ac:5b:8b:fa:36:e4:a3:eb:9a:4e:a9:8d:b2:9a:e6:3b:
d9:9b:a8:38:e1:85:46:94:3e:b3:94:f2:be:41:1a:78:50:3e:
61:f4:a6:26:05:c6:40:d8:cb:01:50:2c:9e:e8:df:07:73:31:
ce:76:ec:99:f7:65:e8:be:d1:c4:02:e8:d4:89:3f:b9:e0:b4:
80:64:66:e0:64:6e:1b:19:e9:e5:1b:e4:da:50:93:9b:24:5a:
ad:b0:6b:12:3e:4c:a3:b9:6a:4e:77:3a:d9:37:7a:b3:5a:90:
3d:f9:1e:bf:34:d4:bf:78:49:02:a8:2d:f5:1a:68:91:a0:01:
93:4a:23:6d:b9:71:c9:69:64:16:e5:c0:00:c7:81:59:39:b9:
ee:7e:3f:5d:19:1b:37:17:40:05:fa:65:92:0e:bd:34:ee:83:
c2:07:73:ba:d0:a0:2f:1b:84:fd:e6:34:30:ef:a9:51:ad:db:
8b:44:1b:93:4b:6a:9c:5c:c8:1b:86:66:c9:cb:e3:fc:29:8e:
e6:29:ae:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:11 2024 by rpki-client on console-fra.rpki-client.org