Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
File: STeGYPXwGSOUbDXZS-XM19K3EFE.mft (raw, json)
Hash identifier: MQfegr8Yg1ZTwzStHXQRS9NV+YbyDzDYj4FrfbaV8vg=
Subject key identifier: DC:47:50:B4:6E:00:24:8E:22:2F:A1:E2:AB:4E:6B:4B:82:2E:8A:87
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial: 0193553F2AF67A190623C1DA71EAA8317CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
Manifest number: 08FC
Signing time: Fri 22 Nov 2024 19:00:23 +0000
Manifest this update: Fri 22 Nov 2024 19:00:23 +0000
Manifest next update: Sat 23 Nov 2024 19:00:23 +0000
Files and hashes: 1: DXOSjkPgPhkpthG4moFFsYGoGkc.roa (hash: gQyxqUbTgcaGBlgj8iHg7FIZqxouBFmZfuivnmKq7Js=)
2: STeGYPXwGSOUbDXZS-XM19K3EFE.crl (hash: 5Ofu2JUxPIOWWmDr0RpYX4WJ3t7TVWvgnUuF4mECn88=)
3: wJIwB-WtaZrrHIFdBBYgxn6GD1E.roa (hash: NqHmt7h+5fdv7B8QFPA7P2zaKRzx/fSTSqwwDs0WBdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:2a:f6:7a:19:06:23:c1:da:71:ea:a8:31:7c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
Validity
Not Before: Nov 22 19:00:23 2024 GMT
Not After : Nov 23 19:00:23 2024 GMT
Subject: CN=dc4750b46e00248e222fa1e2ab4e6b4b822e8a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:49:84:71:ca:ab:47:ea:cd:e5:b6:1a:ad:
bb:c2:8f:39:12:56:f5:d3:dc:95:99:65:fc:6d:a6:
3c:41:67:79:f6:2d:eb:73:a4:9f:d6:c3:46:40:95:
e9:72:23:14:1c:43:51:b4:82:e4:eb:8c:20:58:22:
c5:b8:14:d8:68:ce:32:c5:0c:0e:86:ac:e6:cb:28:
b4:22:4d:f1:31:e4:7d:1f:5e:98:b5:78:12:4d:c9:
c8:3f:fa:03:73:69:9b:53:fe:cf:19:56:40:80:74:
e0:d0:55:95:00:08:e9:52:c9:8a:e1:1b:db:a0:a6:
7b:bc:ea:23:0c:8b:43:8e:72:d7:22:a2:31:27:68:
93:8b:d6:a2:3e:2f:b5:1d:fd:3f:54:3b:4f:ce:e8:
8e:ab:88:48:53:a6:12:77:de:35:83:e4:8c:a3:b2:
3a:96:dc:94:a7:f2:2d:79:3d:99:cb:32:46:46:c8:
f2:0e:ea:8b:c7:90:27:84:34:60:9c:84:73:42:30:
d8:0f:7b:5f:6d:82:8e:80:66:42:18:30:50:90:b6:
e3:79:ae:0e:4d:bd:a7:0e:e8:70:74:d1:37:58:99:
97:8d:c4:c3:a5:9b:22:01:42:85:a2:99:38:ba:ef:
e6:18:c7:57:cc:2c:d5:1b:e0:f1:29:a4:e2:da:86:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:47:50:B4:6E:00:24:8E:22:2F:A1:E2:AB:4E:6B:4B:82:2E:8A:87
X509v3 Authority Key Identifier:
keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3c:af:82:ad:19:cb:54:08:02:42:81:19:90:77:e8:ce:9f:
ef:f1:ca:40:e5:14:0a:86:a5:e2:52:d4:36:3f:c4:4f:f7:28:
46:93:06:cb:f6:b4:f2:9c:5a:56:50:0f:ab:92:5a:6b:31:03:
d4:a5:64:e2:88:8c:c6:61:4c:33:0e:c1:ce:89:2d:a5:13:05:
ef:58:a0:53:5b:9e:92:79:cf:9c:b3:99:6f:d3:37:b2:4b:c5:
59:48:b3:6d:6e:ae:a9:44:60:f9:c1:b7:c0:29:06:9a:06:8f:
be:d5:02:4f:df:a4:c4:15:95:b4:03:a4:3f:95:9e:c6:43:e3:
0a:f0:ac:7f:51:41:b3:cc:a3:bd:a4:1f:fa:30:db:3c:95:d9:
6f:83:2b:97:9d:45:23:55:dc:0a:c9:74:ac:7d:23:4a:4e:d0:
3b:61:44:a9:37:87:54:e8:56:ca:8a:7e:df:4f:f2:7c:eb:d2:
bc:b6:65:7d:2a:32:0c:d1:2e:d1:11:07:1e:d1:1c:1d:8d:f3:
b7:82:7a:ea:53:21:10:d5:bd:69:ce:75:8f:db:b3:1b:10:7d:
e7:6c:23:c1:28:8d:d9:e5:1d:15:69:2f:bf:12:e2:01:3a:b5:
c2:76:92:73:17:a8:39:a1:b4:94:9a:dc:9a:64:6d:4f:86:8b:
fb:64:59:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:10 2024 by rpki-client on console-fra.rpki-client.org