Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
File: p2i77FqeEb-9rthKqNOqzaKYifk.mft (raw, json)
Hash identifier: ys9n1bega4QW8DHpTEbOooqM/TSDomYtJz0ZLacp/NE=
Subject key identifier: 7B:23:F4:11:32:51:AD:CA:EE:00:B7:4F:FD:BF:37:68:AF:B8:EA:00
Authority key identifier: A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
Certificate issuer: /CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Certificate serial: 019355AD0AB1666A9D412B6CEA09C1DD8C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 21:00:23 +0000
Manifest this update: Fri 22 Nov 2024 21:00:23 +0000
Manifest next update: Sat 23 Nov 2024 21:00:23 +0000
Files and hashes: 1: lI8q2nE0XuDOc50G9NlebCUou4c.roa (hash: L4KUtCiaPJmAf7AjLCZkafs6zARdLaqTc4IFU/d4CKE=)
2: p2i77FqeEb-9rthKqNOqzaKYifk.crl (hash: ThzosIQOyMIRFnssnMWcCMiTZ1bdpEe7ci+TVKMe6dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:0a:b1:66:6a:9d:41:2b:6c:ea:09:c1:dd:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a768bbec5a9e11bfbdaed84aa8d3aacda29889f9
Validity
Not Before: Nov 22 21:00:23 2024 GMT
Not After : Nov 23 21:00:23 2024 GMT
Subject: CN=7b23f4113251adcaee00b74ffdbf3768afb8ea00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:3a:56:89:3f:e2:3e:f4:a7:4b:42:64:53:
0d:28:d9:b6:61:62:ec:bc:ce:c2:e7:c2:52:74:c3:
f2:0b:f7:a5:bc:42:f9:ff:97:8d:cc:d1:6e:18:0e:
70:67:32:e5:46:a1:8d:54:2e:c8:98:a7:ac:e7:44:
23:3e:1a:69:f4:36:bf:7b:58:e6:fd:82:27:41:8b:
a6:4f:ba:8e:31:7c:18:36:24:8a:22:5f:61:b8:49:
4b:c0:18:fa:71:e1:51:d4:93:d8:61:46:a0:0d:8c:
4f:bb:bb:ce:24:0b:9c:4b:1f:83:04:19:e2:54:48:
f7:88:85:b6:ec:4a:ed:ec:02:32:5c:16:ae:f7:65:
e5:20:0c:b6:97:d1:94:a0:75:50:28:17:08:02:4a:
0d:aa:eb:a3:06:72:3b:8b:74:fb:5d:65:aa:ba:7f:
36:44:22:40:0c:18:98:fc:77:53:70:22:78:33:42:
96:09:2d:90:e8:48:21:8d:dd:60:d5:5c:59:c5:cd:
ee:73:0d:6d:08:24:38:77:14:29:05:95:20:e4:3c:
27:1a:d6:73:cc:c5:1a:c4:ac:da:83:c3:ff:a3:81:
25:2e:c8:96:5a:6a:65:91:9d:ed:69:a1:af:fb:02:
82:72:58:e6:37:0c:de:5f:8a:6d:9e:b9:f3:b0:37:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:23:F4:11:32:51:AD:CA:EE:00:B7:4F:FD:BF:37:68:AF:B8:EA:00
X509v3 Authority Key Identifier:
keyid:A7:68:BB:EC:5A:9E:11:BF:BD:AE:D8:4A:A8:D3:AA:CD:A2:98:89:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2i77FqeEb-9rthKqNOqzaKYifk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eac1f4-ace1-4ce1-a181-cfcabb19f989/1/p2i77FqeEb-9rthKqNOqzaKYifk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3e:4d:24:de:2b:aa:5d:20:66:89:21:a4:67:10:5b:16:ab:
33:05:99:3c:df:1a:ec:bd:9a:8b:49:27:4e:12:b0:72:a1:ae:
6b:67:5b:82:ff:95:91:ef:c8:06:9a:5c:5a:4e:e7:39:ed:69:
ad:7a:91:80:e7:9c:8f:38:59:74:ba:71:d3:42:32:e5:7e:17:
10:f0:ad:a7:1f:47:0f:eb:6d:d8:11:0b:c5:62:43:c9:77:b7:
fe:b9:03:06:03:0f:c2:8b:cf:90:47:ff:26:38:df:ff:0a:68:
fa:1f:7a:3e:8b:b0:d9:c9:81:ec:0c:47:09:d7:61:a9:31:ec:
c4:24:4f:77:84:0e:83:09:7c:d9:3e:82:98:a5:f8:25:32:d3:
29:6d:ca:34:d8:34:df:a5:03:b4:ca:85:df:d0:94:37:2e:1e:
7f:39:2e:ae:67:6b:6a:28:9b:85:5a:d2:56:f3:4a:d5:a1:20:
cf:bf:68:d8:fa:8e:29:e9:e3:de:3e:21:e9:3a:8d:8f:c2:cc:
79:00:d7:65:c7:5b:3e:10:c2:5c:c5:7e:a4:52:5f:62:40:21:
53:53:eb:06:74:96:ae:b1:83:25:f9:b9:7d:3b:0e:c6:93:8d:
b8:61:ab:50:61:81:42:f4:cc:85:86:ac:36:b1:18:9e:7f:84:
ff:c6:6d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:14 2024 by rpki-client on console-fra.rpki-client.org