Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File: t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier: fiaaHXe2hwQotIndmM/4yI37Rkjywc38PKNiygCIqR0=
Subject key identifier: 1C:F6:3E:9D:CC:64:CD:32:60:A4:F8:66:F6:92:E8:B3:60:E2:BF:8F
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial: 019353BEA7AAED69124FA5A86BFF8DE08BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number: 02E6
Signing time: Fri 22 Nov 2024 12:00:23 +0000
Manifest this update: Fri 22 Nov 2024 12:00:23 +0000
Manifest next update: Sat 23 Nov 2024 12:00:23 +0000
Files and hashes: 1: IjLvzEagMTndDWuAQNBBVbTR3IY.roa (hash: XCVVG4W23sKnQEUfk6MjWQVJqvGdA/uvghgcTwqSkl4=)
2: S1iKwv78pj78vn6ylzRyWeqom-Y.roa (hash: NNSovzltmAtVdXkQAVVW+lJcFITCWSQQZ727vOCfQM8=)
3: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: 25Q3V8ADoY0yfSF+G3TeY06Bs3TD9U1bd3H5IHaSqBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:be:a7:aa:ed:69:12:4f:a5:a8:6b:ff:8d:e0:8b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Validity
Not Before: Nov 22 12:00:23 2024 GMT
Not After : Nov 23 12:00:23 2024 GMT
Subject: CN=1cf63e9dcc64cd3260a4f866f692e8b360e2bf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e6:a1:25:20:6c:07:49:93:3c:c2:e5:95:c0:
97:f4:cc:f0:80:0e:5b:a1:7c:6e:0f:c5:49:e1:97:
b6:10:e8:20:90:ee:e5:82:52:92:73:db:89:a6:01:
04:10:3c:96:72:7f:aa:19:ae:cd:3d:05:69:94:41:
fa:3f:c9:ae:ba:1a:19:76:e2:d4:76:12:67:73:5d:
5a:c7:81:af:ab:0d:29:3f:52:2d:4f:46:8b:5d:eb:
05:20:76:97:01:a8:d9:cd:80:5b:b0:0c:15:75:96:
e6:ea:21:a7:1d:7c:8d:69:ef:72:31:87:a2:9c:81:
94:f3:ad:a5:50:f8:d1:fa:f7:c1:ac:eb:47:31:07:
c6:e5:64:7c:9c:91:9c:e6:ab:c0:93:d1:0d:28:24:
95:c3:5b:a7:84:fc:e0:8d:32:75:2b:cf:74:02:f8:
4f:67:5b:1d:ce:11:9d:25:1e:58:3f:a7:0a:a3:2f:
7d:9d:2f:e1:09:56:8e:91:fa:87:58:0f:59:95:40:
37:8e:28:55:40:37:27:a1:36:8c:8b:52:53:89:47:
17:4d:ae:38:01:b2:d7:a7:e8:81:1e:16:5a:00:1e:
7b:96:42:28:ff:86:5b:6c:41:b5:33:f1:49:00:fa:
4e:c7:d5:f0:cc:5a:a0:54:8a:a3:82:ec:04:8c:b3:
30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F6:3E:9D:CC:64:CD:32:60:A4:F8:66:F6:92:E8:B3:60:E2:BF:8F
X509v3 Authority Key Identifier:
keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1b:77:2d:c1:87:8e:e1:2e:42:a5:40:01:25:2a:1f:f2:4e:
45:d3:dc:fc:b8:53:35:d9:b7:18:5a:c4:71:a3:c7:c2:5d:35:
8b:9f:2d:d2:e1:4c:9b:11:fe:67:ee:a8:15:12:7b:23:e4:35:
03:9f:ce:d7:2d:85:1e:4a:58:8e:19:4b:32:f1:d8:57:27:1f:
4d:59:46:ad:92:9a:b3:dd:0d:53:6e:cb:27:52:f5:3a:4d:39:
4b:36:83:42:07:a8:18:ba:7b:fe:f9:a1:55:f4:cc:ca:0b:4b:
54:8e:2c:b7:d2:45:30:eb:0d:63:93:8f:7f:45:01:1d:61:69:
73:f2:b4:f3:aa:ad:4b:21:b3:18:ce:92:26:9b:f7:07:64:46:
aa:af:1e:5a:87:08:b2:44:21:39:fe:a5:07:79:12:2f:5d:65:
69:6d:2b:92:53:aa:4c:37:cd:ce:a8:6f:30:b7:7b:9b:f4:2f:
f0:b3:d8:04:59:19:80:1f:9e:6c:fe:e8:6a:b0:8f:94:cc:24:
fd:5b:34:ad:f0:47:2c:fa:ff:43:ad:a5:96:7f:c6:e1:64:ab:
c4:a9:a9:d2:37:2a:91:67:58:0a:8c:6b:41:a6:b4:db:f5:10:
7a:e8:8f:bb:7d:c5:e6:97:13:04:17:f4:0d:65:77:e0:3e:43:
6f:0f:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:27:54 2024 by rpki-client on console-fra.rpki-client.org