Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File: CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier: mdDmDThknEfmGejv8imqtsKSUaFno8+ie8so2Dt2x58=
Subject key identifier: F9:DD:0C:0D:33:D1:D9:F9:E8:76:92:AD:CD:5D:38:7E:8A:98:1E:A8
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer: /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial: 0193568B000F9A492E849996A3A479B8D1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number: 109B
Signing time: Sat 23 Nov 2024 01:02:50 +0000
Manifest this update: Sat 23 Nov 2024 01:02:50 +0000
Manifest next update: Sun 24 Nov 2024 01:02:50 +0000
Files and hashes: 1: 1ctpF4qbES0uhVgaWT70mRT3eto.roa (hash: PK8LOJaDo9tm6Xn25GLaqg3rfxRH8R/d2CIwxxqNg8k=)
2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: xif+6dokLCU+iAvG1xqIQvqwtllyDmriob5r5TWJeFw=)
3: lXz1SIbXuevEbshGOg1tJCah0Co.roa (hash: JUSXp+S1N2Jq0Dh6YSmdaeiL1gSi3RKjT8DceACDbfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:00:0f:9a:49:2e:84:99:96:a3:a4:79:b8:d1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Validity
Not Before: Nov 23 01:02:50 2024 GMT
Not After : Nov 24 01:02:50 2024 GMT
Subject: CN=f9dd0c0d33d1d9f9e87692adcd5d387e8a981ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:af:af:81:48:35:54:91:71:5e:08:a7:42:
92:ae:de:2e:cb:fb:c1:e7:50:0b:25:a6:07:b3:8c:
a9:1a:71:c8:3b:3a:04:9c:a7:71:ac:a0:c2:cb:18:
30:c6:35:6f:00:cd:7a:6f:d3:22:86:95:c3:bb:ff:
7e:22:8e:5e:5d:2c:62:f4:26:8c:b1:cd:e7:af:00:
c6:ab:95:04:b0:53:8c:2b:f3:7f:ee:9f:5b:71:b1:
e9:52:e9:22:0e:19:73:11:b0:72:52:4a:e7:fc:98:
10:22:ef:a0:68:42:25:7d:31:d1:5c:13:9c:12:48:
d9:29:87:16:d3:74:35:10:87:dc:04:15:85:28:52:
1a:b5:07:1f:d3:1b:87:dd:4b:6d:28:5f:96:12:3a:
b4:d0:af:fb:84:6f:99:32:3d:26:b6:4c:93:77:12:
86:e5:01:bf:34:ea:93:24:df:df:54:e9:0d:7a:2b:
b1:40:62:c0:12:5d:e2:38:c5:97:e6:e1:c1:68:eb:
ba:b9:d7:cc:09:74:20:37:c9:58:02:c7:2e:0c:de:
1d:03:18:73:78:8b:1a:e0:27:3c:5e:9f:a1:57:38:
11:59:6d:53:49:23:b0:78:ff:84:fb:f1:a1:25:2c:
9e:4d:21:87:c7:1e:ce:fc:a1:03:c9:00:be:07:9d:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DD:0C:0D:33:D1:D9:F9:E8:76:92:AD:CD:5D:38:7E:8A:98:1E:A8
X509v3 Authority Key Identifier:
keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b6:6c:7e:3c:d8:86:70:0d:f0:82:92:7b:cc:82:0a:32:81:
23:d2:e5:c4:ba:92:15:53:97:f2:2d:67:f7:87:8e:06:c9:4a:
08:22:68:92:d4:24:15:b9:1a:1d:69:62:17:89:2d:e8:3e:4b:
61:a3:1a:46:6d:17:24:6d:bc:4a:b7:89:b1:e2:95:6c:8b:91:
2a:42:76:a7:68:c3:ce:53:16:55:3e:64:8f:99:19:4d:43:ba:
41:c7:54:2c:46:5e:f0:55:6b:75:82:ab:60:f9:55:09:c8:9a:
63:7f:04:ba:6c:bd:85:7d:b9:65:67:05:dc:aa:bd:e6:7b:89:
81:0a:05:78:c8:41:d8:84:57:f6:5a:c1:b5:bb:0d:d7:04:15:
0d:94:6d:e3:55:16:0f:5d:87:df:e7:8c:83:9f:ea:a2:d3:55:
5d:d3:dc:8c:72:a5:78:c6:a1:c1:f5:aa:67:04:52:cb:b6:6f:
58:ce:eb:a4:8b:45:a3:24:1a:2d:85:95:7c:e0:53:03:a8:40:
5c:b5:63:2d:19:c2:cb:b5:5e:7e:20:4f:39:a1:2d:4d:4d:94:
85:39:f1:db:35:d8:18:04:5c:44:c6:ce:52:61:34:f9:b0:13:
d9:da:54:ae:9e:3d:71:26:41:42:c9:e2:54:05:65:be:72:a9:
be:02:af:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:58 2024 by rpki-client on console-ams.rpki-client.org