Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: ony3fSKgXH6b1YAVc1JTtmOwnFxpZI5Liiy9PS+By2g=
Subject key identifier: 90:65:A0:39:CE:B7:C0:3E:FB:EA:DD:6F:62:AE:7C:02:C1:E9:54:95
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 019367EC8428B8F0E1D324B3A08D0232602E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 10:02:53 +0000
Manifest this update: Tue 26 Nov 2024 10:02:53 +0000
Manifest next update: Wed 27 Nov 2024 10:02:53 +0000
Files and hashes: 1: 1kFyUEkNaNG0UBbGGLXaU69gpIQ.roa (hash: sDBBSedfhyunOA+vkb8h0iBmPQE5aRKNTqQB6nYU1fM=)
2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: cP1uVrq0tM/YNeo9F/MDSqBgmh8Op/qigy2X8GN4V0s=)
3: BfVELPY0oZxurmPtAfGk0_MT_Y0.roa (hash: gJb+IukpXACxd7NHhgMSGyCE17/L3ICRXEC7abf6S5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:ec:84:28:b8:f0:e1:d3:24:b3:a0:8d:02:32:60:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Nov 26 10:02:53 2024 GMT
Not After : Nov 27 10:02:53 2024 GMT
Subject: CN=9065a039ceb7c03efbeadd6f62ae7c02c1e95495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:76:48:9f:57:d9:f9:ae:52:83:ec:b8:11:
49:a9:0b:91:21:45:52:33:b5:17:23:f4:31:49:91:
25:33:e7:a2:5c:86:a2:80:fe:84:db:28:74:1f:8b:
e1:c2:13:a2:90:a4:79:b7:f7:b1:94:3f:72:eb:c7:
dd:87:f9:0b:11:40:b1:67:b1:07:1a:d3:3f:f9:e0:
74:f7:26:00:31:b7:7a:8a:a7:a1:8b:d4:a7:77:e5:
a5:08:67:fd:d0:6a:4e:5b:7d:4a:c3:4a:f6:3f:a0:
e5:7a:99:aa:f3:ed:3e:14:da:b3:95:0a:a0:b8:26:
ce:d0:f6:af:6d:99:9b:5e:bb:f1:39:4c:ba:eb:25:
9c:67:08:e1:ba:7a:b2:31:93:ed:b4:74:23:6e:5f:
6d:f3:c4:e4:96:c0:38:ae:49:a7:01:59:df:49:c1:
a2:09:f4:8f:44:3a:c2:91:4c:5f:78:47:64:8c:d1:
86:5c:77:5e:e4:8c:2f:ca:35:1e:5c:83:9c:eb:91:
ca:56:c0:c5:58:8c:a2:1e:e1:2b:59:02:bc:71:90:
b9:6e:dd:f7:c9:81:bb:d4:2a:c1:f8:97:53:80:c4:
3c:37:30:01:0b:a1:ef:93:b6:32:ce:29:a6:29:af:
52:33:03:31:eb:4a:f0:b8:59:6b:03:00:69:c7:cc:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:65:A0:39:CE:B7:C0:3E:FB:EA:DD:6F:62:AE:7C:02:C1:E9:54:95
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b3:21:4e:e9:18:2c:45:55:ec:c6:e4:00:c1:10:ab:d5:94:
be:cf:0b:49:95:a0:27:6b:67:d6:b3:e7:36:54:55:2b:e7:7e:
5b:0a:63:9e:97:01:aa:12:75:15:92:e1:3c:61:57:85:64:b0:
37:46:fe:dd:f6:8d:0c:14:66:e6:0c:37:54:a0:35:91:cf:d6:
1e:b1:c2:25:bb:32:cc:23:6e:c5:1a:f9:cf:fa:a1:88:ed:fd:
8c:fb:64:9a:66:19:8b:b8:20:f9:3c:cf:af:25:98:92:ab:f5:
5a:a6:3b:6b:9c:8f:0f:76:47:89:fa:87:80:c9:99:c2:75:45:
8c:18:b8:ff:33:ac:49:67:c1:b6:e6:bf:5f:cb:d3:17:a6:20:
39:dd:f9:9e:1c:a7:6a:47:6b:a2:a9:a1:9c:03:62:4e:b0:d6:
d9:4d:d6:3c:1a:9b:e5:e5:d6:92:72:13:34:20:7e:49:17:83:
10:a3:0b:10:17:60:23:60:c9:8f:65:f3:3e:9f:9f:c4:24:76:
45:d2:1d:f1:88:b6:53:f0:35:b5:ae:dc:ea:5b:f4:ac:2c:3f:
82:42:7a:a4:d2:46:75:b3:7b:41:7d:62:b2:3e:6c:3d:82:95:
93:e1:40:10:87:1c:f1:d5:51:fe:77:e3:d6:1c:da:a5:8d:b0:
03:c6:3d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 15:50:04 2024 by rpki-client on console-fra.rpki-client.org