Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier: hpw+Lanj6daWvNDhKuLq0lVojICKQK113EDC/B7PAIM=
Subject key identifier: F6:37:3F:69:D2:96:63:01:CA:47:5D:95:37:AE:A1:4B:57:EB:B4:13
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer: /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial: 019356F6C316FE257270218BC2E3BF225EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number: 0EC2
Signing time: Sat 23 Nov 2024 03:00:32 +0000
Manifest this update: Sat 23 Nov 2024 03:00:32 +0000
Manifest next update: Sun 24 Nov 2024 03:00:32 +0000
Files and hashes: 1: GD7mekuGefVvda4o_6FnPgGHbrc.roa (hash: RkCdUgqNHEIFaudhuJ2GwsHlY49UtrmqEUjYqLog5q0=)
2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: OLOnj7feoeb3teUpbOhB71ChCLJjzfAzYWiAtEkwV3k=)
3: S5QWM24MUiT6mWUCeYQtVOK0re4.roa (hash: 0/GuMve4TCNIFx2cczlP3hVdL0AZnyvDC0dn6syuyRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:c3:16:fe:25:72:70:21:8b:c2:e3:bf:22:5e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Validity
Not Before: Nov 23 03:00:32 2024 GMT
Not After : Nov 24 03:00:32 2024 GMT
Subject: CN=f6373f69d2966301ca475d9537aea14b57ebb413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:3a:77:0d:7d:d5:5b:30:86:48:9a:64:61:
18:6b:30:6a:af:b0:d5:1c:f1:29:5d:c5:85:c4:24:
d9:ca:d5:b8:4d:18:0d:b8:52:f6:94:c7:c6:88:fa:
2c:b7:a7:83:c0:0e:d8:12:d6:68:82:3f:e3:1b:2f:
2e:11:e6:aa:a9:6c:f9:43:ef:06:9e:b3:cc:57:a2:
6d:39:e4:18:bf:78:52:a8:28:a3:f2:ef:5a:55:8d:
e3:d1:c9:15:27:1e:51:b5:ed:27:51:56:f7:a2:6c:
e7:3d:0d:41:4e:c4:bb:e5:73:a8:c4:f9:00:7b:39:
1e:23:8e:05:f9:8a:11:22:ce:3c:25:94:4a:bc:98:
d5:00:6d:c2:b7:c3:1d:bb:89:f7:23:87:a5:28:de:
87:44:a4:77:c4:87:3a:68:9b:75:af:63:7d:28:65:
92:80:a9:d7:cb:4c:cb:cc:a5:01:75:92:cc:98:ea:
c6:68:90:16:66:9f:5f:be:08:48:a4:a0:7f:34:e9:
d8:56:e3:95:e7:99:f0:76:ec:84:47:74:5e:57:2e:
1d:fc:36:cc:03:1b:cb:14:30:48:77:06:03:54:70:
2e:bb:d2:63:3f:bf:71:d5:36:3a:13:cc:a3:6e:df:
4a:c5:b3:71:96:57:b8:1c:e3:57:be:1d:a1:b1:0f:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:37:3F:69:D2:96:63:01:CA:47:5D:95:37:AE:A1:4B:57:EB:B4:13
X509v3 Authority Key Identifier:
keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bc:52:2c:dd:d1:11:6a:65:f7:ab:56:d4:f5:69:f6:b4:cf:
65:94:b7:1c:91:1a:46:e5:d6:37:a3:a1:4b:37:fc:5d:89:88:
a8:23:c8:c2:ed:63:32:a4:9b:e7:70:d6:dc:42:47:e9:cd:ed:
ca:b3:83:3d:18:81:e7:ed:68:97:ff:82:2a:20:c9:c3:a2:e4:
b8:f8:e5:a8:4c:61:9b:16:d0:c9:b4:ee:02:94:34:20:b3:87:
f5:09:48:13:3a:45:9f:b9:94:de:b7:70:f6:c3:64:40:3d:44:
67:ce:86:36:f6:20:fd:54:34:77:c1:fc:8b:47:24:4e:77:84:
4b:ec:b8:d7:21:5d:6f:a8:fc:e4:a9:46:68:b9:57:e6:75:1b:
c7:89:54:f1:ab:11:39:ff:7f:bb:48:af:2f:a9:e0:f6:cc:d3:
f1:f2:47:21:d3:f0:6d:d9:04:16:ce:8d:41:69:1b:03:2f:cd:
71:47:b5:0e:8e:a2:6e:92:7f:dd:8b:1a:f7:f1:0c:d6:99:ad:
3d:f6:a2:74:11:9b:7e:17:b6:11:c0:11:c6:04:d9:90:8c:0b:
c9:0c:ef:b1:59:20:34:86:fb:56:3d:22:5e:3a:8b:a9:0a:df:
60:83:5e:70:28:9c:a0:c9:15:23:6a:bb:d0:13:61:52:43:88:
1d:a9:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:55:41 2024 by rpki-client on console-ams.rpki-client.org