Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier: 2pppwIge+NMWtWMJIgxwNvAaCMMvnDvfrujKevbxw/k=
Subject key identifier: 62:77:47:4D:CF:BC:66:42:B4:B1:51:45:E1:78:78:4B:9F:59:4B:80
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer: /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial: 0193531A379DD7746D6BC1811FCA9EBFE422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 09:00:47 +0000
Manifest this update: Fri 22 Nov 2024 09:00:47 +0000
Manifest next update: Sat 23 Nov 2024 09:00:47 +0000
Files and hashes: 1: FC3fxKgdiY9D6phK2Z2f28cri94.roa (hash: 7lmKxHWmoQEWgSeUzyRIBKOHwRim5dq+d6ytsGJUXVg=)
2: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: 40Yvyj6zc20yMSvfGEy670pj4Tbam1WWgol3OdSoR7E=)
3: xkbuLbmsXLCQ-l6bciy-ZzWAdT0.roa (hash: vayMyJoYxbpt/hNPnLKfOFPXYnDXSImDD6pyJsljYRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:1a:37:9d:d7:74:6d:6b:c1:81:1f:ca:9e:bf:e4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Validity
Not Before: Nov 22 09:00:47 2024 GMT
Not After : Nov 23 09:00:47 2024 GMT
Subject: CN=6277474dcfbc6642b4b15145e178784b9f594b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:de:d9:46:ff:be:25:0f:a2:f6:95:50:e7:
26:d1:df:7b:d6:73:ec:16:dd:18:d2:e4:93:72:6f:
19:50:3c:5f:a8:f7:3a:f0:37:83:57:e8:3f:06:23:
3c:25:8f:30:ad:27:83:0f:37:5f:32:7b:39:c9:91:
d6:21:6e:ce:79:8f:6a:cb:ab:0e:9b:04:ab:2e:a3:
b7:d2:37:7a:cc:7f:83:69:d4:9c:6d:7d:31:16:82:
8c:f3:8b:c6:c1:35:04:20:86:8a:21:93:8a:91:91:
5a:dc:37:1d:f3:ff:8c:b3:d0:01:98:af:ab:7c:1c:
fa:a6:87:01:97:7b:0c:10:7e:25:b6:41:43:e5:28:
0e:6a:39:6b:d7:bd:a7:2f:0d:4e:e7:01:3f:89:f8:
ba:ca:61:7e:88:dd:60:7f:24:43:81:10:85:be:3b:
dd:fa:ad:36:9f:87:8e:20:f1:42:8d:3d:3d:98:5b:
e8:1d:e7:7d:a6:3a:6b:da:12:e2:a5:03:bc:c6:69:
2b:85:58:6c:b3:e5:e0:8b:00:c6:14:1f:42:16:a1:
1c:2d:af:d2:3b:e9:7f:9e:a3:04:f1:ba:88:b4:0b:
77:a4:df:a8:19:25:a3:16:ed:38:8d:71:67:0b:9a:
d6:da:07:bb:dd:9a:56:64:0f:ff:fc:24:be:bd:b9:
b0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:77:47:4D:CF:BC:66:42:B4:B1:51:45:E1:78:78:4B:9F:59:4B:80
X509v3 Authority Key Identifier:
keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:58:fc:ac:3d:e0:df:07:99:f2:12:c5:69:a9:2f:b8:4c:7b:
98:fe:54:ea:43:40:f5:8c:22:c5:16:7a:2b:f7:63:70:5e:c5:
59:d9:53:ce:23:04:3a:5d:68:39:48:6f:92:ba:a9:62:a1:b4:
4c:0d:50:29:8f:02:2c:e0:0f:64:0d:43:92:41:6f:fa:b1:65:
fa:a0:37:ff:f4:ce:7d:65:1c:c1:8e:1f:1f:b5:34:6a:b2:18:
da:cd:c9:6d:f9:02:ad:56:7b:58:6b:f4:d5:aa:f8:af:18:fe:
e8:56:75:ca:ae:c2:9e:75:c5:b2:d3:c8:4e:10:ff:37:58:81:
d2:12:e3:71:db:21:47:81:b5:a1:92:67:6c:9e:66:37:bc:47:
cb:ac:c1:8c:b1:22:24:27:43:87:40:45:4c:98:19:5d:29:82:
89:7b:d7:61:9c:fb:ba:cf:4f:87:00:ca:64:07:59:b7:f5:79:
c0:11:68:83:75:6d:ef:4d:7e:92:60:6f:7c:62:23:30:b4:78:
a5:f8:74:e2:31:88:88:82:f9:4f:55:06:fe:06:3a:b8:48:0c:
30:30:8a:ff:27:8c:39:6a:d8:cb:46:d4:3d:5f:56:0f:c4:9e:
b8:51:cc:ea:49:9c:3a:f9:d5:9d:96:65:21:fc:3e:cf:51:fc:
e9:c5:c3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:57 2024 by rpki-client on console-ams.rpki-client.org