Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
File: iNdZL0EZAMBnteeiGaNFq_26pA8.mft (raw, json)
Hash identifier: EH1nnWdfwdQPQHNHPfHf/b3eZpMmJZVkzNpLiwr2prA=
Subject key identifier: 1D:82:79:21:76:C6:0A:75:58:2F:BE:E1:5E:76:13:33:20:2D:E5:AC
Authority key identifier: 88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
Certificate issuer: /CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Certificate serial: 0193572D7D336F0FBD2A32E78C23089A29B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 04:00:18 +0000
Manifest this update: Sat 23 Nov 2024 04:00:18 +0000
Manifest next update: Sun 24 Nov 2024 04:00:18 +0000
Files and hashes: 1: B_X4250QTzFknU2T6114xYTtKVE.roa (hash: rx7NnSYHswopvf2uZ9CJ558iuB7Dh+JHRpDYJVifras=)
2: iNdZL0EZAMBnteeiGaNFq_26pA8.crl (hash: ZZoq3gFHpozXkEl0zp7BmPdMMOt5BfqvubhYuNByeWE=)
3: utvoNI7CpYE0Gw61elQtE01gu6c.roa (hash: fu1mrdL5Cv8s7xLKB7fqO6M5ivT8WTjFXBMTCvivOks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:7d:33:6f:0f:bd:2a:32:e7:8c:23:08:9a:29:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Validity
Not Before: Nov 23 04:00:18 2024 GMT
Not After : Nov 24 04:00:18 2024 GMT
Subject: CN=1d82792176c60a75582fbee15e761333202de5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:c5:c8:c9:8c:5b:c3:11:b0:19:19:88:3a:
d1:31:ef:ce:82:01:50:af:eb:e5:dd:63:ed:8e:e2:
f3:a2:ec:54:3f:10:86:80:28:3e:e5:38:cc:94:cc:
6b:c5:29:d5:82:aa:6c:9b:72:ec:ae:58:51:3b:41:
12:dd:96:01:f8:ec:4f:94:7b:13:41:79:52:76:67:
e7:22:5c:80:71:b5:1b:04:2a:f6:3c:ee:35:d7:ff:
c9:10:b8:f5:23:c0:77:3c:65:b3:da:46:c0:72:aa:
42:85:10:d7:52:8c:85:9c:b0:b6:8a:58:2e:87:96:
5e:57:17:e2:7a:2f:4b:f7:94:fd:bc:3c:70:f1:b8:
3c:c8:cb:e2:39:e5:80:77:21:13:93:dc:4c:8a:f3:
3a:7f:3b:19:72:68:55:df:1c:7a:f6:15:8c:67:66:
0c:2d:79:d0:54:af:ba:e0:9a:44:12:7f:ee:92:6d:
56:55:78:56:dd:3b:f6:84:53:1e:0a:e0:d0:6f:8c:
28:5c:43:a5:c3:ce:9b:14:fa:10:65:67:07:88:f4:
c7:27:d8:1c:57:a2:f8:76:1b:ee:6c:18:25:24:0b:
28:64:15:ef:cd:d0:e1:0f:d2:c2:e9:54:13:70:e0:
1b:bc:75:b0:d3:67:4f:e2:5c:37:e1:ad:d4:a6:61:
54:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:82:79:21:76:C6:0A:75:58:2F:BE:E1:5E:76:13:33:20:2D:E5:AC
X509v3 Authority Key Identifier:
keyid:88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e5:4b:c5:05:e9:f4:48:71:95:02:00:8f:21:27:58:60:08:
a3:77:be:fc:c5:5a:3d:c8:5e:48:ca:62:64:21:2b:83:a4:73:
5f:14:83:90:71:46:35:aa:a1:ce:97:1a:99:99:1a:6c:65:3e:
cf:d8:40:29:44:4a:b1:e4:02:d0:84:f2:f5:fd:61:b1:98:d9:
02:a7:c9:d4:f8:ad:56:ba:72:43:e5:fe:90:44:e3:a7:af:07:
9d:73:c4:0e:fd:33:7e:ec:17:fb:2b:57:a2:9d:69:c9:9f:83:
1d:8d:e9:bc:10:07:b7:db:ed:9d:c4:26:71:2f:b4:07:c9:eb:
c4:98:f8:08:b6:b1:1a:bd:74:e0:73:f3:fc:52:2f:5f:8a:72:
10:98:a5:84:d1:ef:69:85:25:be:0e:26:ac:43:34:2d:6b:ea:
ae:a3:00:a7:3f:fe:96:84:d1:9d:35:8e:2b:c3:68:e3:8b:c8:
b1:6c:c6:18:d5:37:f7:46:83:15:52:34:39:f8:6d:1c:49:07:
7d:70:f4:e1:35:e8:78:c9:3d:2a:2f:f8:62:0e:04:1f:8d:79:
f8:8f:28:01:b6:8c:a4:91:74:b0:95:ed:b1:d8:ac:9a:f2:72:
60:7a:a6:dc:a8:a9:94:d1:70:b1:5a:f9:61:06:5d:66:3e:e7:
49:2b:89:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:46 2024 by rpki-client on console-fra.rpki-client.org