Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: FxXv6f6t9X3dzvpilkY/iO4MH0cs9PsgcBMYoFTaFsU=
Subject key identifier: 4C:02:77:22:6B:F1:49:17:EE:5D:D3:31:16:F6:BA:7F:C3:9D:18:15
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 01936A7D7792A42DC3B3C15C07C0AA41AE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 12AB
Signing time: Tue 26 Nov 2024 22:00:27 +0000
Manifest this update: Tue 26 Nov 2024 22:00:27 +0000
Manifest next update: Wed 27 Nov 2024 22:00:27 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: 3+LuHs14gN8DRt8h2XSFcu4MJo1mRubOEi6KcGh3LCc=)
2: YISxUUryyHZuqglEJ03yYy1mNHo.roa (hash: N73wC0pkv+O5IjiCoDhnpvs29+1VpirEUVUcDUMmxX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:77:92:a4:2d:c3:b3:c1:5c:07:c0:aa:41:ae:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Nov 26 22:00:27 2024 GMT
Not After : Nov 27 22:00:27 2024 GMT
Subject: CN=4c0277226bf14917ee5dd33116f6ba7fc39d1815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:33:11:dd:46:77:1f:88:2f:49:88:eb:13:df:
39:9a:ac:dd:b7:2c:3d:7a:91:51:12:7e:b8:1f:13:
82:dc:ec:0e:64:0c:3a:73:7f:ed:87:d1:1d:59:d7:
90:09:e9:da:bf:9c:c1:86:fb:ec:16:0d:3b:ca:34:
37:e2:3d:c9:43:ff:b7:d4:79:6f:ed:3c:33:e4:41:
3f:64:1e:96:66:7f:c1:cb:4a:b9:6c:01:b3:b6:35:
5b:24:08:62:d3:05:ae:6e:61:ea:32:b6:b0:fd:19:
44:a8:ce:ae:47:83:11:42:b9:25:72:70:0f:74:d2:
85:3f:3e:c2:93:98:72:da:e8:58:38:61:e4:67:1b:
45:1e:49:82:ed:be:98:64:31:6a:23:54:df:0f:31:
4f:e0:68:fb:4e:76:2a:75:09:ff:81:3e:9a:61:39:
ba:a0:b1:f6:4e:b1:dd:7e:17:8a:c5:f9:9e:8b:3e:
98:a6:12:6b:0d:c4:70:0b:0c:cb:a8:55:9b:e8:25:
77:ef:0e:2d:a0:37:f8:f3:33:75:24:99:73:64:02:
99:b5:23:0a:3b:ca:f8:c3:03:0a:cc:7e:fa:a1:ab:
0d:53:a3:b4:67:49:95:36:71:60:aa:b4:f8:f4:0a:
b3:50:2f:90:d0:28:e3:44:d1:f9:5b:44:b9:e1:30:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:77:22:6B:F1:49:17:EE:5D:D3:31:16:F6:BA:7F:C3:9D:18:15
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1a:f5:55:4a:66:6f:5a:14:b7:1c:33:58:6e:ae:a9:30:c3:
9b:f0:1d:71:35:8d:e8:20:bc:7c:74:0f:45:1b:9f:88:2b:e4:
04:8e:8f:f2:79:37:d8:4c:94:1f:c1:04:29:bc:2f:48:14:4f:
c7:1f:77:70:87:6d:ae:41:cf:aa:b3:be:ce:f3:f2:ed:d3:47:
4e:19:62:59:71:18:1c:7a:a8:11:80:32:94:a3:6a:34:4c:5b:
cb:05:47:56:c7:b0:a8:be:d0:66:39:ef:c6:f8:ac:df:cb:96:
17:c3:53:2f:68:7f:5a:a4:7f:d2:a0:ca:4c:95:d4:7a:e3:a6:
00:1c:68:ed:66:d1:3a:ac:81:e5:f8:6a:44:05:94:62:f0:35:
af:70:06:a8:b5:50:2c:68:4f:26:fc:44:80:9b:6a:70:53:59:
45:99:1c:fa:8a:85:c2:31:43:0b:56:ec:d8:0f:22:87:7b:f0:
82:bf:86:c5:9a:62:02:dc:5a:55:70:b9:9f:ed:8b:ae:f6:03:
d4:c3:87:b5:15:4b:e5:3e:da:78:3c:ef:fe:54:b5:2c:f6:5d:
1e:03:c3:db:79:bb:40:87:5e:4e:5f:22:86:a4:66:f1:62:2d:
06:6d:18:08:67:ac:2b:14:c1:03:62:75:42:8d:a9:a9:77:94:
5c:39:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:55 2024 by rpki-client on console-fra.rpki-client.org