Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: 40uBakAUzEntZGtJ0SeuRNEBK8AwIuXkjnQ3jZV9cc4=
Subject key identifier: 9D:4F:DF:00:ED:EA:99:0C:CF:24:34:14:33:7E:E3:54:EE:91:59:E4
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 019359C0BBABCBB212C92CA12D1E3359150A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 111D
Signing time: Sat 23 Nov 2024 16:00:23 +0000
Manifest this update: Sat 23 Nov 2024 16:00:23 +0000
Manifest next update: Sun 24 Nov 2024 16:00:23 +0000
Files and hashes: 1: cWoWhhp7HojpkqqhSUARX8MMlZw.roa (hash: O1zFzVAouNtHytG8NULVs5bdHkvTD8caleGcV5yEzFk=)
2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: Q6EOuk8iLP98K2p7dt/5he9rCt8GYiwWYS6xWkd4Lzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:c0:bb:ab:cb:b2:12:c9:2c:a1:2d:1e:33:59:15:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Nov 23 16:00:23 2024 GMT
Not After : Nov 24 16:00:23 2024 GMT
Subject: CN=9d4fdf00edea990ccf243414337ee354ee9159e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:1f:7b:1f:4e:93:4a:b1:07:0b:62:a8:57:
ea:17:1d:19:19:a4:97:a6:9f:96:28:7e:30:0a:c3:
8f:1f:87:1b:40:9e:0d:fd:46:b7:16:ca:7e:d2:08:
14:b9:90:b8:cd:28:8b:10:4d:a8:33:fd:15:40:31:
d7:8f:eb:29:ed:a6:2d:cf:44:f2:ce:55:81:0c:74:
41:c3:e5:e2:1d:68:30:8d:b3:a2:ea:78:cb:50:40:
30:cf:90:c4:af:0a:c9:6b:24:96:88:3c:0f:e0:59:
3a:26:ab:2b:25:23:91:91:59:72:7c:ed:5f:2f:9f:
5e:c5:f9:b3:25:b4:f0:90:90:d7:60:8e:47:43:d7:
10:e1:8c:45:db:3d:9b:2f:24:8c:6d:38:19:9b:a0:
e9:a2:ab:77:e1:be:cf:f8:3d:82:e2:e2:1e:bb:ca:
68:73:f4:8f:c0:60:89:b4:d6:79:7e:4c:37:e5:f1:
10:39:91:36:cc:13:57:09:03:01:41:28:b5:05:3d:
a4:92:0b:6f:c0:03:3b:2d:e7:bd:2d:6f:8b:af:b0:
9a:32:35:2e:72:df:f9:0e:bb:e0:6f:80:a6:41:f6:
be:41:16:45:18:f3:6b:35:a5:60:d1:00:28:fc:d9:
68:f5:5c:df:7c:8a:e8:49:d0:af:41:05:f5:2c:7b:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4F:DF:00:ED:EA:99:0C:CF:24:34:14:33:7E:E3:54:EE:91:59:E4
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:86:bf:de:a6:e6:71:76:e2:4e:0e:77:91:72:b9:55:79:0d:
c7:f9:c3:74:d8:5a:e1:3e:d8:19:a5:cf:2b:73:2f:0c:4a:6a:
f9:0d:28:b7:c4:6f:94:2d:6d:70:4b:8e:a0:cd:ad:14:f7:21:
26:f6:d0:6f:71:da:a7:76:31:c4:a0:93:09:4e:8a:0b:c4:27:
e6:a4:d7:8c:59:61:a9:1b:29:1e:b8:59:47:a1:96:89:53:d5:
08:dc:c7:8c:2d:8a:73:80:e1:d5:78:8f:ed:fc:48:6f:76:97:
a1:41:96:3c:a6:39:89:82:5a:96:06:38:14:df:a3:25:0a:18:
a1:b2:25:68:68:35:47:69:d8:5e:92:19:09:7e:41:c3:d3:d8:
c2:1f:39:7a:a6:e5:74:bc:cf:fa:5e:73:02:dc:cc:2c:3c:64:
0d:60:61:db:4d:09:ed:a3:e0:4d:dd:14:8e:61:02:13:32:4d:
55:65:bb:be:c1:cc:18:3b:4f:80:85:c7:34:5b:c0:8e:d1:c4:
b6:b5:c9:bc:d3:9d:64:31:8f:ba:2b:3c:ba:3a:cd:c6:03:56:
2e:2e:83:4d:1c:ad:44:94:ee:4b:66:49:f2:4d:3e:32:18:ce:
27:ee:33:38:ed:b7:01:58:b4:45:f1:66:62:9e:62:77:bd:b2:
ff:5d:99:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:16:27 2024 by rpki-client on console-fra.rpki-client.org