Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
File: stitAnqWdO3JNueMXU0bZJZNhEA.mft (raw, json)
Hash identifier: 9Ym+x5G9qlNA31vn8ycCugo4rS+jMJZeNmbq7NBeLt0=
Subject key identifier: 38:A3:DB:33:F0:BD:7B:D3:33:FD:7F:02:1C:09:71:A8:0A:22:2B:BA
Authority key identifier: B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
Certificate issuer: /CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Certificate serial: 019358783C9914440EC69E81F6D801579BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
Manifest number: 089A
Signing time: Sat 23 Nov 2024 10:01:34 +0000
Manifest this update: Sat 23 Nov 2024 10:01:34 +0000
Manifest next update: Sun 24 Nov 2024 10:01:34 +0000
Files and hashes: 1: UZM5MeupELXkU5YQNrG3mdIyM6U.roa (hash: 2aFaUtrNYnw7SLvHS9p254TECTnzunyzVAH4DetQWAo=)
2: stitAnqWdO3JNueMXU0bZJZNhEA.crl (hash: xMRSPNIxfVDV06tqPDGObMexwqZ0cJyp4SYsM2w5l/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:3c:99:14:44:0e:c6:9e:81:f6:d8:01:57:9b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2d8ad027a9674edc936e78c5d4d1b64964d8440
Validity
Not Before: Nov 23 10:01:34 2024 GMT
Not After : Nov 24 10:01:34 2024 GMT
Subject: CN=38a3db33f0bd7bd333fd7f021c0971a80a222bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:c5:ef:66:e6:27:48:44:04:a7:6d:e2:9e:
1f:8b:71:3e:b0:fe:fd:f3:93:99:74:c0:1c:0a:be:
4f:fc:62:60:62:f4:e3:cd:e2:23:c8:b4:33:0e:3c:
a9:69:55:60:1d:8f:65:a1:ac:ae:bd:de:53:c9:94:
fb:93:74:2d:14:d6:8d:4a:81:36:d5:d0:25:80:13:
28:d8:d3:37:db:50:a4:eb:b0:e0:bb:8f:bf:91:02:
de:d3:3b:54:7b:77:6a:18:c5:b4:c8:62:61:32:7e:
38:dd:a1:b0:4c:23:c5:3f:93:2f:b3:56:48:5e:b2:
be:8b:b1:10:f0:d2:50:9c:0a:9d:d3:b9:b9:dc:c9:
4f:2d:3a:1e:de:55:01:9c:64:37:c0:20:c5:19:cf:
fc:d9:6d:6d:c9:31:b2:3f:a5:46:e0:bd:c1:c2:7d:
9f:29:df:76:f4:f7:60:24:bc:09:7c:10:af:da:36:
da:65:18:0e:f3:b8:e9:65:e3:24:e9:a2:43:80:54:
40:6e:ed:3c:2a:d0:70:5b:fe:a6:92:d1:52:22:55:
48:05:fb:50:09:4e:4b:3b:8a:0b:b1:5e:2a:f1:b5:
92:4f:7c:ad:ca:40:da:ee:8a:1e:5d:1a:fc:8e:c5:
3d:18:be:b8:e3:a7:f1:76:c7:81:17:dd:bb:ae:e6:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A3:DB:33:F0:BD:7B:D3:33:FD:7F:02:1C:09:71:A8:0A:22:2B:BA
X509v3 Authority Key Identifier:
keyid:B2:D8:AD:02:7A:96:74:ED:C9:36:E7:8C:5D:4D:1B:64:96:4D:84:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stitAnqWdO3JNueMXU0bZJZNhEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88c9d7-e377-4874-9868-715247c3dcdc/1/stitAnqWdO3JNueMXU0bZJZNhEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:0c:e9:5c:67:10:ff:8b:7e:81:1a:4b:99:12:ec:73:d5:2e:
fc:87:b5:41:65:4f:91:06:b2:9b:bf:f6:6a:5b:f2:0b:81:03:
10:ca:c0:be:9f:31:d2:54:1b:58:38:4b:ac:f6:f8:a1:60:84:
ff:0f:a2:62:5a:4a:0d:1b:66:de:51:58:42:12:12:e4:7a:05:
c8:15:9e:30:24:c9:7a:df:a9:a9:eb:09:c9:71:af:10:46:6c:
e9:6a:f7:ab:c8:76:44:65:91:92:bb:a0:04:ba:a3:0b:34:14:
23:a2:61:48:1f:55:10:ab:f7:4d:7e:5a:c5:cc:48:d9:90:02:
30:88:ed:95:c9:54:c2:95:52:7d:0a:b9:bf:37:70:f3:79:2c:
34:6d:68:83:f0:31:f2:cd:60:90:1b:61:a6:11:29:28:78:02:
67:ef:8f:40:df:a9:60:b9:3d:7d:15:11:c0:3b:25:bf:5d:e7:
92:22:62:20:b2:1d:fc:78:f1:c3:e7:95:40:44:b8:27:13:90:
25:95:a1:99:a4:c4:29:0b:34:00:9d:a2:13:1b:c4:89:70:a7:
1b:c2:5c:f5:78:d8:16:33:dc:b8:b1:2a:89:18:ad:c2:29:cb:
7a:dd:d4:e6:36:40:e4:c2:e5:33:db:20:c1:15:b6:00:6d:2e:
c3:27:9e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:32 2024 by rpki-client on console-fra.rpki-client.org