Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: SqHrRbLgHQgXuTsasrC2IIlR8m76miJDBRlsLDRO/Qg=
Subject key identifier: 2D:98:33:05:BC:CA:87:9C:D5:F0:26:A1:CB:D0:C9:4D:F0:E2:41:94
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 01935688B411A202B98737F6200AB9631894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 02F9
Signing time: Sat 23 Nov 2024 01:00:19 +0000
Manifest this update: Sat 23 Nov 2024 01:00:19 +0000
Manifest next update: Sun 24 Nov 2024 01:00:19 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: E9oySyQLTaIVTqS1CICxalapyZbyDxBuaa2Lq/3eyv4=)
2: T4THamuG1AM3rZHQL9SadxFBHog.roa (hash: 7QBYtaz1klDzyIgBZlJPw4UvO7IPyFQVOGxVoLUXvQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:b4:11:a2:02:b9:87:37:f6:20:0a:b9:63:18:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Nov 23 01:00:19 2024 GMT
Not After : Nov 24 01:00:19 2024 GMT
Subject: CN=2d983305bcca879cd5f026a1cbd0c94df0e24194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c5:8e:2e:7f:a8:4f:6e:07:95:a7:02:ae:25:
5d:da:54:92:46:4e:17:89:62:6a:69:3f:1b:93:60:
7c:79:0d:69:44:35:21:0e:cf:75:6b:cd:91:98:9c:
ee:70:6f:52:76:db:09:4a:6e:98:59:db:c6:5d:3c:
7e:a2:9d:10:d9:b6:16:08:ad:40:dc:bc:f5:c1:09:
65:5e:51:57:40:f9:94:bd:fd:52:ef:4a:d9:15:1e:
4e:18:e8:f5:18:0f:5b:66:85:27:49:d2:e9:63:fb:
e9:85:de:50:a3:b5:fa:8f:3a:cc:42:ef:14:44:ff:
e4:1f:5a:97:cf:25:73:d3:d8:7f:0e:38:08:c5:65:
da:d0:0d:0e:af:a4:8a:fc:63:4f:c9:0a:4f:c3:cb:
58:b5:73:01:57:d6:81:f7:1b:42:fd:be:92:d7:2f:
85:73:eb:21:f3:bd:34:98:19:da:38:86:f2:cf:3e:
75:40:91:0e:db:c2:7d:53:61:9a:01:4e:b5:e8:35:
49:d7:f8:3f:07:98:f4:b5:f3:92:3f:4a:9c:b6:a1:
d1:b7:3a:95:4f:f8:91:e2:32:79:3c:3e:e4:a8:9b:
16:c1:4f:c9:83:58:49:ae:3f:eb:1d:be:63:a4:04:
7f:36:3f:a4:b6:46:b5:28:17:1b:a1:96:7f:e4:f4:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:98:33:05:BC:CA:87:9C:D5:F0:26:A1:CB:D0:C9:4D:F0:E2:41:94
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b2:03:00:90:42:ab:87:f2:ed:ff:f8:a0:c5:d4:17:d4:6d:
50:08:4c:b3:8c:52:f8:d8:e5:1b:0b:96:e0:9e:bc:e8:e9:ba:
d9:47:2c:56:4e:43:38:77:a3:77:09:b3:61:3d:c0:e1:eb:f5:
0f:f0:32:4b:65:21:06:04:3a:d3:dc:a9:67:b4:58:e1:b8:58:
e1:90:c0:f5:00:a6:87:ef:ad:d5:25:15:37:75:36:80:1c:94:
2f:83:01:f1:ea:71:63:31:12:da:14:6f:4b:93:ca:0c:88:49:
c2:ec:c6:9f:cc:95:75:a5:4e:34:05:c6:71:15:2d:4a:bb:ef:
bd:83:b1:47:d7:2d:e7:d4:b7:e1:d6:c1:12:2b:25:63:ef:96:
14:43:0c:3d:2a:e6:1b:24:e2:83:3d:87:45:20:43:33:1c:74:
f6:0a:99:5d:1b:15:bd:81:ba:c7:00:55:52:e8:50:8a:d8:4e:
ce:08:b3:93:12:03:df:fb:d2:07:5d:77:85:76:bb:10:23:a8:
1b:1b:41:20:87:ee:e2:c8:85:36:bb:71:b4:92:ef:a7:bc:98:
89:59:d2:4c:f0:53:d4:8a:8a:76:e7:10:c7:27:d9:f9:b5:25:
97:a3:55:68:69:0e:00:2c:2a:7f:d7:3e:f3:35:31:1a:09:96:
08:25:23:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:36:20 2024 by rpki-client on console-fra.rpki-client.org