Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
File: IwNA0n5LJPkSSXcyLts2lC4tFgw.mft (raw, json)
Hash identifier: RhwU9EHkB8M4wcQkRCc3vrviE/aRdhcJRp6/qkcXV2Y=
Subject key identifier: 56:DE:09:2A:0A:9D:CF:D6:5D:CE:BF:8B:28:1C:03:5B:B8:1B:2D:92
Authority key identifier: 23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
Certificate issuer: /CN=230340d27e4b24f9124977322edb36942e2d160c
Certificate serial: 019358406D80001A912CBD584077F2F2D8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 09:00:37 +0000
Manifest this update: Sat 23 Nov 2024 09:00:37 +0000
Manifest next update: Sun 24 Nov 2024 09:00:37 +0000
Files and hashes: 1: 37iii381buSWvga8TxKKF25_Wmw.roa (hash: 5U4ixFbWqJrZr3brvTJnd+5mrSVKL3t+m8sddCsZlG8=)
2: CoKFm945lUG_bPWHhkeUJeGQh84.roa (hash: g7kJMh9PWX1DRAtA2O58ID9CpSSrTxVcNoT6Jl+9Ub8=)
3: IwNA0n5LJPkSSXcyLts2lC4tFgw.crl (hash: g33KxoToKJGPoALdiFCEPAt1B2l3GzYh9CpHTeWwj+Q=)
4: Z5rHjvgUx6fqbRaZqPzICbQhxAo.roa (hash: Hr5e9lSTAKKoeT+GNvDZkLLHCeBQ5EKql5SfhHCvpsU=)
5: aE0wkVOWDxBIiI7DNbEuML2c7QY.roa (hash: +Ks8QRTdYO2MXG6QiStCkLU7m1R7ItX7TQ90LsnMczY=)
6: d0JTcLqGjG3taQkrSywda44GQJc.roa (hash: Jyt6fS5TufEp/gKivNl55LsBN8cDy2ZLLsIbAjNuskQ=)
7: sMjren0IMoprvYYhl88BbJMKuFc.roa (hash: XPNcR3X+KZIZ5XTlZmVhg+rLluDwOhR35Y7IH2iDr/o=)
8: zuNb_ENhItc9d3C-Wr9Ih7fwhno.roa (hash: f7VkQM61KOvEr4Up9vusjZ5zN9dX2+Ax7MlGTC6rXpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:6d:80:00:1a:91:2c:bd:58:40:77:f2:f2:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230340d27e4b24f9124977322edb36942e2d160c
Validity
Not Before: Nov 23 09:00:37 2024 GMT
Not After : Nov 24 09:00:37 2024 GMT
Subject: CN=56de092a0a9dcfd65dcebf8b281c035bb81b2d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:d8:08:e4:91:a0:17:7d:9b:fd:46:0f:72:
42:12:9f:32:87:1b:02:d2:4f:33:6c:9a:23:86:f9:
94:48:4b:74:20:35:7e:10:b5:eb:7e:a9:06:90:3c:
ab:41:26:1a:37:10:27:50:20:64:38:2f:f6:8c:18:
df:d3:95:be:78:7f:76:79:99:a1:b0:61:b0:c6:b9:
73:4d:b5:b9:9f:b5:21:2e:e3:bd:d9:c1:3d:df:cf:
74:a3:8d:99:29:cb:c2:b9:0f:a9:cc:67:bd:ce:fa:
51:a2:d6:61:ba:6d:42:39:f1:7e:b2:5f:fe:1a:35:
25:46:34:3f:94:20:cd:51:48:09:cc:6c:bc:04:b6:
2b:31:5e:66:3a:19:4b:d1:c4:84:dd:72:34:3f:fb:
5b:4e:84:07:74:27:d6:7b:b9:73:0c:d7:bb:88:7a:
3d:48:4d:be:47:98:8c:c3:b0:a8:54:2a:4f:4e:66:
fb:d3:b1:eb:b5:6f:62:de:73:ba:10:bb:57:04:96:
51:a4:98:e0:94:44:5f:b4:43:db:14:80:4a:0c:01:
70:6f:36:25:66:68:b8:c8:29:5a:71:c5:d9:b5:33:
47:c7:34:cc:27:94:b8:8e:f3:2c:60:ab:95:9d:9b:
07:94:40:35:de:73:27:b2:70:f7:ad:24:c5:80:61:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:09:2A:0A:9D:CF:D6:5D:CE:BF:8B:28:1C:03:5B:B8:1B:2D:92
X509v3 Authority Key Identifier:
keyid:23:03:40:D2:7E:4B:24:F9:12:49:77:32:2E:DB:36:94:2E:2D:16:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwNA0n5LJPkSSXcyLts2lC4tFgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7bdf52-6ac5-4c24-bfd0-b570907b59eb/1/IwNA0n5LJPkSSXcyLts2lC4tFgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6c:4e:83:ac:7e:d0:b0:b6:a1:fc:a6:73:e8:f8:12:bb:da:
f6:e5:7d:d7:11:89:81:0c:78:98:32:fc:df:ae:db:24:b7:0f:
6f:09:83:bf:f1:55:49:05:c1:25:6c:e5:c7:ff:3c:20:ee:e8:
77:34:e7:a4:88:a6:92:ec:42:c9:52:98:74:2e:38:b0:ca:51:
d8:06:81:d5:2f:81:0b:0e:b4:4d:90:f6:ab:a8:14:c8:92:45:
a6:cb:52:72:de:36:75:ea:0a:22:3e:58:5b:46:52:bb:88:d1:
ba:8f:ea:f3:46:2c:de:1c:cf:2b:b6:6d:e3:6a:13:78:09:73:
44:d9:81:57:76:e5:6f:8e:82:76:ca:9c:68:97:e7:3f:ce:9f:
0b:54:b3:50:8d:1f:07:94:1b:6d:2a:a1:ec:2b:74:2b:79:dc:
14:2e:b3:8c:fd:fc:8f:07:1e:08:69:97:98:77:51:87:3f:37:
99:4f:4c:54:c7:10:fb:d5:83:51:84:49:a3:50:c6:1a:37:8a:
69:c7:dd:1b:2e:f7:a4:cd:7f:07:33:f8:bc:ba:06:bf:24:93:
23:2c:3a:fb:d8:73:fb:1d:37:2d:38:6a:16:41:b9:7d:85:bc:
46:a3:41:67:ff:ed:53:af:84:1b:a7:33:d0:b8:11:d1:ab:07:
d3:64:2c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:02 2024 by rpki-client on console-ams.rpki-client.org