Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: gTdc7mMJK4t5bDsEd+h2p1DJm9h4YtaENBW8bIn+3iQ=
Subject key identifier: 18:95:62:55:BC:A7:FA:54:A9:DD:6D:73:51:C4:72:06:71:97:C1:51
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 01935688D78FD798A6585DAB4F3AEAC3CBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 0DAC
Signing time: Sat 23 Nov 2024 01:00:28 +0000
Manifest this update: Sat 23 Nov 2024 01:00:28 +0000
Manifest next update: Sun 24 Nov 2024 01:00:28 +0000
Files and hashes: 1: dxhVGpZvKySCoLe3RRwVMqn7qfE.roa (hash: 3eX5qRXvzQhrv/TA1bW9/S7j84/2YrzYJDn/4YTCtcw=)
2: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: kbC2SUi6w0RipB0UPP/ayUquMYvWuMkJ10AVGawbZxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:d7:8f:d7:98:a6:58:5d:ab:4f:3a:ea:c3:cb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Nov 23 01:00:28 2024 GMT
Not After : Nov 24 01:00:28 2024 GMT
Subject: CN=18956255bca7fa54a9dd6d7351c472067197c151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:a2:96:80:ac:91:c5:63:8c:35:fd:12:92:
27:9b:15:c6:92:f6:6d:a9:85:81:22:02:bd:0f:a2:
d2:56:e2:59:72:52:c5:40:96:da:c2:8a:4f:10:9a:
63:9a:24:6a:fc:df:2c:3e:ae:10:04:af:94:4c:36:
89:bc:82:9f:af:f6:bf:b8:74:7b:b9:88:6f:6d:fd:
50:ee:4c:9d:fb:90:0e:6c:44:5d:b7:b0:6f:0b:12:
b0:3d:c3:28:5d:3d:71:07:f0:fa:0a:59:e8:03:ce:
af:33:3d:ce:cf:7d:62:94:ea:1d:eb:2e:33:01:4a:
8f:dc:a6:2e:42:5c:e5:d4:1d:1b:66:2b:ca:c2:06:
65:b5:ec:de:74:3b:40:a6:ab:7c:e7:6a:93:ac:53:
20:ad:21:7a:fb:7f:fa:c2:be:db:7a:f8:c4:35:20:
c1:4a:d3:66:28:57:5c:bf:c6:c7:aa:f4:0b:b2:70:
63:94:77:af:d9:fc:1d:2e:2e:fe:8d:e7:af:0a:18:
fe:b4:86:48:ff:3a:07:59:df:01:da:25:c8:e4:aa:
a5:9b:4f:3c:ea:6f:ba:25:d3:db:ed:c9:38:98:d1:
b2:2a:74:72:4e:d9:1d:15:b0:1c:51:3a:5a:98:56:
e8:d9:9e:8b:a9:5b:c4:00:48:a2:dc:2f:6f:b7:bb:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:95:62:55:BC:A7:FA:54:A9:DD:6D:73:51:C4:72:06:71:97:C1:51
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e4:a8:cb:ca:35:c1:a1:94:0d:83:aa:80:28:99:2c:60:7e:
62:2c:ad:0c:18:8d:a4:3e:1a:fe:c9:f0:38:ec:3e:55:f4:98:
bb:7a:a6:3a:c9:4a:8b:e8:2a:ac:0b:a1:15:b7:da:bb:00:20:
84:93:a2:fe:a9:4d:d4:8d:ad:2d:cf:5f:aa:dc:98:28:dc:fc:
23:42:48:f7:2b:f0:2a:ed:c3:30:84:e5:69:b5:9c:86:32:c1:
f6:f1:84:0e:a9:71:ee:2e:0d:b6:45:ae:13:5f:5b:67:aa:b8:
24:8d:e3:ec:81:94:04:92:60:ce:2b:96:91:a5:5c:93:c2:d7:
6b:b4:cf:41:d6:58:c8:6c:96:7e:52:72:76:4f:48:97:c6:c4:
46:b7:ce:19:8c:11:bb:17:bf:36:5f:45:1a:fe:dc:dd:a0:cb:
ae:cf:0d:b4:2a:61:e5:20:ca:db:ba:87:2c:1d:27:8e:60:ae:
94:31:6f:81:2d:c2:ba:f2:f7:67:df:15:6a:4b:8c:84:7b:db:
48:18:ad:4c:8f:16:f2:5e:a8:37:57:79:49:b0:f7:3e:36:4e:
19:54:dc:1c:ee:66:3c:7f:d6:e6:2b:e2:f4:f4:89:1a:ba:bc:
95:13:82:b9:ee:3a:11:02:c6:65:97:7e:80:d6:bc:5d:7b:a9:
03:c4:49:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:10 2024 by rpki-client on console-fra.rpki-client.org