Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier: uI1718razmDNCKOlognpT6JbemiO9aUCq68VjcdE6nU=
Subject key identifier: 28:CF:97:45:CA:D9:07:8D:87:A9:6E:5E:65:B3:F4:04:7B:E7:E5:6E
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial: 0193568AA0702C165955C5C9B805FF77E6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number: 0124
Signing time: Sat 23 Nov 2024 01:02:25 +0000
Manifest this update: Sat 23 Nov 2024 01:02:25 +0000
Manifest next update: Sun 24 Nov 2024 01:02:25 +0000
Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: oqoM6sU4VYkOvi6mmMWGcM0c9MbGtAphGq8D6MiYIGU=)
2: SOa6_EH2log-m1qK3pvmbJaqa5o.roa (hash: 9E/WquAEZqM8O2ETkeB7bWHgejNweIEbKMc7kUZSV1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:a0:70:2c:16:59:55:c5:c9:b8:05:ff:77:e6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Validity
Not Before: Nov 23 01:02:25 2024 GMT
Not After : Nov 24 01:02:25 2024 GMT
Subject: CN=28cf9745cad9078d87a96e5e65b3f4047be7e56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:55:22:fa:09:08:fb:5f:84:2e:5f:4e:dd:
ef:15:ed:5e:be:1f:ab:60:00:54:e8:c2:4a:05:a8:
cf:56:1b:7f:68:a6:90:6f:c8:1a:c2:11:8e:19:24:
a0:fc:46:ee:dd:d5:a7:a4:77:43:1a:b1:82:4e:25:
36:59:a4:b6:cf:5c:a3:30:df:00:f9:46:f2:89:1f:
ff:c1:d6:52:05:19:54:97:7c:c4:7a:43:91:6f:cf:
5b:a2:4f:e2:48:9c:39:ea:ab:27:65:be:95:79:6f:
19:d9:af:b0:b0:18:dc:4e:f8:47:ed:16:7b:0e:71:
3a:a7:4f:2d:3e:c7:67:7f:ba:9c:d7:76:6c:f2:f5:
12:a7:16:d2:99:02:2e:c2:89:02:37:14:26:1b:4d:
51:85:ae:31:78:7b:ce:e1:8b:4d:2a:5a:2a:a1:06:
87:b5:c2:9d:e3:84:2f:46:a0:fe:2e:f4:c9:a1:5f:
8a:3b:db:39:ac:3c:cf:96:60:2d:4f:49:15:6e:d4:
06:bd:fe:5b:c4:24:86:d9:98:a9:33:6f:ff:ee:86:
26:dd:d6:ce:b1:28:71:33:b1:a9:e1:d7:da:cd:0e:
30:60:c9:83:a7:47:86:ef:95:ff:40:1b:5c:23:06:
96:06:f6:47:a8:74:91:a7:96:e0:f5:0e:cf:c3:77:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CF:97:45:CA:D9:07:8D:87:A9:6E:5E:65:B3:F4:04:7B:E7:E5:6E
X509v3 Authority Key Identifier:
keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:09:94:55:54:7b:8e:af:a4:3d:c6:95:dc:05:a5:27:67:10:
47:61:18:bd:26:c8:37:4c:06:bb:a9:a7:66:cf:2f:64:03:f3:
3d:7e:8d:c2:9f:30:ce:b7:90:18:e4:97:c1:48:2a:4d:7c:c0:
fb:5f:12:64:41:64:e4:fe:d3:30:72:5d:fd:5d:31:a5:53:c6:
2c:44:2b:c1:6c:3d:b6:49:12:26:d4:2c:26:80:15:44:df:95:
10:73:f3:a4:ad:9d:64:b6:22:6c:8a:27:22:b3:40:ad:6c:9b:
f4:5b:a2:9f:31:ff:24:97:b5:79:9c:ae:7e:34:a3:18:35:bd:
f3:b0:82:82:6b:17:5a:e2:26:87:97:c6:95:cf:ab:72:6c:ee:
4a:c1:56:55:0c:9d:c3:e3:ec:02:14:a4:77:96:ec:bf:d9:b1:
b9:ac:96:9f:0b:b3:9e:f6:67:ea:4c:1d:2d:7b:54:98:f3:8e:
5b:dd:1e:cc:d1:80:44:5d:26:48:e2:7a:e2:e7:a4:6b:1a:9f:
ec:99:12:f0:bc:d7:ee:57:05:3d:18:00:ac:a3:34:73:f3:cb:
7b:fd:20:c6:e4:d9:e1:e6:3e:ca:9e:e9:24:98:48:6e:46:47:
1d:f9:56:10:36:d8:9b:35:16:68:00:20:58:47:24:bb:57:31:
fd:57:63:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:42 2024 by rpki-client on console-ams.rpki-client.org