Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
File: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft (raw, json)
Hash identifier: 5izStGeGONCCm8qKYPLh9jLoPKMkCmCr4tbON1Kh20Q=
Subject key identifier: A8:CF:CC:32:3D:E2:7E:B5:8F:8B:23:99:A1:E7:97:3A:D0:AA:C2:2D
Authority key identifier: A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
Certificate issuer: /CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Certificate serial: 0193587974725BB96EC414F0EF529CE9EC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 10:02:54 +0000
Manifest this update: Sat 23 Nov 2024 10:02:54 +0000
Manifest next update: Sun 24 Nov 2024 10:02:54 +0000
Files and hashes: 1: NX4CwZtOHmt9KIU-f3qE-xYf1Wo.roa (hash: Ihgg0aXvfXr83Bh+bt2O5XpJ6YGD4KQNjZ4wQQti82M=)
2: Q9J9erlZyBbqbg3iUKfJJDXxpOo.roa (hash: mhXyHsXPmhWpl/VcKHp3T3YKxB8INMZB27A3b6/DaRM=)
3: pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl (hash: khl9F5grNGPyrpwum4pK9C4l9ZM7mFWpn2FblZ8vfrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:74:72:5b:b9:6e:c4:14:f0:ef:52:9c:e9:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41d4e978810e9789a76e687a7ddd97526b0d9bc
Validity
Not Before: Nov 23 10:02:54 2024 GMT
Not After : Nov 24 10:02:54 2024 GMT
Subject: CN=a8cfcc323de27eb58f8b2399a1e7973ad0aac22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:e2:1a:1f:6a:04:7b:88:42:ed:fe:44:44:
3c:33:25:77:57:65:b0:f1:81:04:d2:e4:26:4d:fc:
f8:1c:84:f0:59:04:1a:bb:d2:a7:59:72:97:52:5a:
7c:cc:55:d9:55:ae:5e:c2:fa:32:0f:83:7a:27:61:
c3:d4:8f:1f:cf:2c:b1:99:88:07:d0:b0:17:b6:3a:
81:40:c1:bf:9a:91:83:36:45:55:77:04:51:06:ce:
11:61:46:81:5e:6d:d8:d3:9f:66:0a:c5:0e:c3:7b:
ec:85:3d:4d:cf:ee:a0:11:06:e0:7b:b5:45:fb:e5:
3a:04:f5:15:d3:00:2a:e9:de:25:89:1b:22:ef:50:
cf:da:4a:e7:cd:7b:9c:54:4b:d4:dd:df:85:6d:ad:
65:98:eb:52:28:a8:87:db:95:7d:5e:13:a3:10:91:
08:9d:5a:44:d6:f3:b5:78:0f:32:8d:88:fb:4a:12:
6c:40:60:7c:25:ad:a0:ff:1a:2f:ef:d2:86:b0:13:
e5:bf:e7:45:93:0f:6e:ee:d3:84:03:e5:92:68:13:
d6:46:23:4b:28:4e:6b:37:1f:7a:b6:0d:5c:b2:94:
58:cb:f1:f0:92:3f:fa:dc:da:c4:fe:cc:3b:0f:5a:
27:6b:70:b2:b8:ee:e2:96:07:5a:4d:19:93:52:a3:
38:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CF:CC:32:3D:E2:7E:B5:8F:8B:23:99:A1:E7:97:3A:D0:AA:C2:2D
X509v3 Authority Key Identifier:
keyid:A4:1D:4E:97:88:10:E9:78:9A:76:E6:87:A7:DD:D9:75:26:B0:D9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/158450-dd43-4b82-ab2b-095e7188d0a0/1/pB1Ol4gQ6XiaduaHp93ZdSaw2bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5d:a0:b4:df:fe:c0:8a:84:00:b5:bc:65:ce:24:d7:69:6c:
38:7a:01:cd:4d:cf:3c:48:7b:a4:36:5c:9a:62:6f:d4:08:6b:
b7:7e:30:c7:cf:ab:d1:60:cb:78:99:6d:ed:f4:b4:94:ea:10:
00:dc:0a:5e:fc:ae:58:bb:55:e9:01:5a:13:28:ce:4e:fa:d2:
7e:e0:29:46:e4:98:9f:da:df:e7:11:48:24:a9:1b:3b:e1:3a:
3b:fb:b4:93:89:e7:d5:45:df:42:a1:1b:0e:c6:fb:28:d1:ce:
b4:49:bf:cb:94:dc:53:71:4c:24:1d:02:70:a6:b2:d0:44:74:
36:73:6f:a7:57:34:24:39:f2:61:32:51:95:84:99:f7:14:21:
67:1a:d1:20:25:fc:2e:cb:5c:11:ab:da:bb:37:10:9c:5e:16:
5c:ec:cc:af:c4:d1:8a:c9:ac:aa:0a:e0:b9:a2:c2:98:45:03:
29:46:43:0a:bb:26:78:e6:9c:e6:c7:80:b4:95:48:39:e9:27:
6a:85:28:2a:95:ac:ed:67:b0:0f:f9:fc:dd:88:98:2f:91:bf:
d3:ad:e5:79:6f:8a:41:dd:80:63:12:10:4e:4c:71:1a:cf:6f:
b8:49:75:51:fa:23:67:b8:12:2a:82:a0:80:dd:15:9c:8c:f8:
ea:55:dd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:17:08 2024 by rpki-client on console-fra.rpki-client.org