Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
File: xN29nyMJGTIb9WcG8QaTd5JhGfk.mft (raw, json)
Hash identifier: YIQUZIe7ponpYiUeqPesjmJ8eRGrzhrmWudteySA4VI=
Subject key identifier: C7:6C:B5:4D:30:36:A2:82:62:06:06:C0:DC:BC:B5:64:D7:66:5C:FE
Authority key identifier: C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
Certificate issuer: /CN=c4ddbd9f230919321bf56706f1069377926119f9
Certificate serial: 019355E4531BE0CA7E4731A6E983EA6042D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
Manifest number: 038F
Signing time: Fri 22 Nov 2024 22:00:47 +0000
Manifest this update: Fri 22 Nov 2024 22:00:47 +0000
Manifest next update: Sat 23 Nov 2024 22:00:47 +0000
Files and hashes: 1: Blk2kZtsAzLmyZ1H2212ArL3Nuc.roa (hash: RtOa5NrSHOwcKzzX5y1ZYQmOENWLiH5g9ZjK2UUWngM=)
2: Z8BRGz_aS1a0TplDBX_AjtTjOK8.roa (hash: XSjC0jc4mo79lKpZLiAmCuI2hxKJYoGFvL4lk3hzG38=)
3: xN29nyMJGTIb9WcG8QaTd5JhGfk.crl (hash: aMY+Ni9XLY5Ws3j/vCo7NV3gY7nPOmDhGNrjYHkWd3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:53:1b:e0:ca:7e:47:31:a6:e9:83:ea:60:42:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ddbd9f230919321bf56706f1069377926119f9
Validity
Not Before: Nov 22 22:00:47 2024 GMT
Not After : Nov 23 22:00:47 2024 GMT
Subject: CN=c76cb54d3036a282620606c0dcbcb564d7665cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:57:1e:8a:13:db:69:25:e1:10:bf:54:24:
d8:2d:b9:0e:38:7b:4a:70:ff:9b:48:8c:94:b6:69:
42:ef:1d:c0:d2:ee:33:44:8e:e9:f7:56:e7:3a:4e:
e9:4c:4e:27:b6:c9:4b:92:fd:8c:e1:46:7d:21:cc:
55:64:ea:a5:80:ab:84:90:b8:c6:63:31:f4:c1:37:
eb:2f:99:07:b6:c3:30:c7:55:27:88:1e:ee:4c:de:
3b:a6:d3:5e:68:3a:09:f1:de:8d:bd:8d:5b:78:49:
0b:89:67:98:47:df:42:da:7c:20:0b:34:e5:f9:cf:
44:4f:92:79:33:a9:89:c2:ab:51:06:fc:de:9f:86:
c2:10:e8:59:0f:7c:4c:ad:a2:8c:63:7e:db:5f:58:
a4:09:29:93:df:81:b5:e7:80:d4:98:ca:75:9f:47:
23:7e:1d:d3:cc:54:db:76:75:64:2e:a0:15:7c:cb:
a5:4b:d8:59:34:96:82:ae:df:d5:68:fe:17:de:0e:
6f:30:71:53:89:0b:51:0d:95:22:40:ae:18:cf:64:
1d:6b:ce:c3:be:dc:e2:d9:c8:8b:45:1d:38:d1:02:
d9:15:f5:0d:74:ae:3d:68:a3:5a:60:2c:b3:1d:c1:
04:52:c7:41:d6:d8:a3:43:dc:97:e2:0a:21:04:9d:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6C:B5:4D:30:36:A2:82:62:06:06:C0:DC:BC:B5:64:D7:66:5C:FE
X509v3 Authority Key Identifier:
keyid:C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5a:9d:4c:25:cc:b9:7b:e0:34:72:94:cd:5a:3c:fb:1c:b9:
9d:72:0d:5a:0e:48:4b:74:82:fe:80:a2:59:7d:f2:a6:d0:40:
d8:0c:08:cd:89:b7:e1:20:85:e4:6c:94:e0:8a:79:57:14:c6:
09:aa:7a:c7:c4:10:df:48:87:37:f0:b0:fc:26:af:10:c4:17:
f3:4a:5c:eb:9b:d9:5d:a2:3c:44:a0:56:a2:90:6e:3c:1d:5b:
05:7a:71:5d:64:05:49:ba:c7:11:d1:21:03:73:56:ac:d3:24:
51:2a:f6:1c:e4:18:93:a2:ac:52:7c:00:cf:a0:09:bc:f4:97:
6c:7b:c5:23:ef:65:9a:52:46:b6:a2:4f:40:75:32:a0:33:d4:
bf:b6:02:86:bb:5f:4c:29:78:1c:0e:4a:87:47:46:ff:53:dc:
17:95:d2:c6:2d:86:33:64:84:0d:d8:bd:b7:4e:a5:19:f4:79:
2f:22:c3:30:24:25:de:89:65:ec:58:4a:59:65:d7:42:c6:eb:
ce:15:69:72:19:e4:b3:9e:0a:0c:bc:5e:cb:c3:e1:9f:fd:82:
7e:c7:81:8b:64:8d:b4:18:ce:57:ec:d6:01:5f:0e:a6:9b:8d:
7c:20:ef:ba:b6:2f:30:ec:32:34:dd:09:36:ea:02:c3:22:b2:
56:a6:58:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:21:17 2024 by rpki-client on console-ams.rpki-client.org