Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: o26XJ0W8bFu++eE8LO9a7zfdJ9rXKM+JuqCUoMALdn8=
Subject key identifier: 53:31:1F:D4:A5:AE:D4:08:80:49:26:4E:FB:C3:59:69:14:06:76:73
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 019358403431BBDEABBEA6015C7237D44E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 09:00:22 +0000
Manifest this update: Sat 23 Nov 2024 09:00:22 +0000
Manifest next update: Sun 24 Nov 2024 09:00:22 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: F3FyoJwEAWot+e20Sv7UQNgMMdGuKuH+vwSGTuv2zVw=)
2: G-I2s73RA53gv5Zn7vKqiN6ibEs.roa (hash: Yi9Mn6mQMvxn2+JIGZov39pIUKQzg+KgeZ9fwDM8NfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:34:31:bb:de:ab:be:a6:01:5c:72:37:d4:4e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Nov 23 09:00:22 2024 GMT
Not After : Nov 24 09:00:22 2024 GMT
Subject: CN=53311fd4a5aed4088049264efbc3596914067673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:e9:dc:3e:dc:81:fe:40:da:fa:49:9e:5a:
41:be:97:a5:78:74:dd:5e:f8:ed:18:3b:e6:c7:5d:
f7:01:30:43:1c:80:5f:3f:a1:ac:db:51:5c:24:b4:
b3:1f:86:e5:ad:21:ef:15:01:20:1a:5a:a4:f8:a9:
39:ee:4e:d8:91:37:63:b4:59:6e:e1:2c:db:f1:4e:
e8:a6:fb:c8:40:eb:ee:85:76:b8:c0:d1:9d:84:74:
5f:16:5f:93:b6:e7:c7:83:65:d5:c3:8c:4e:7a:e6:
94:38:2b:8f:3e:5f:fb:55:0e:0a:66:6e:06:cb:f0:
29:94:1a:59:60:2e:0c:43:62:dd:ef:2b:a5:a4:a1:
d0:a8:db:5f:af:88:7a:3f:63:23:ca:74:73:ba:7a:
57:4b:ac:2b:cb:8e:a5:00:1f:8f:87:85:c6:5c:c3:
45:6b:85:39:3d:f1:bf:26:b0:39:32:08:3f:4f:ac:
6a:fd:72:c0:fd:18:1e:f0:db:31:88:b7:a0:ca:62:
68:4c:c1:ee:f0:da:45:3e:93:91:f3:c7:fb:bb:37:
fa:35:be:b3:8a:8f:a4:de:83:40:60:90:14:4a:98:
48:23:3f:5c:10:ac:76:66:f4:c8:a0:94:19:37:97:
4e:4c:92:5a:21:d3:76:59:59:ae:58:3e:99:cf:26:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:31:1F:D4:A5:AE:D4:08:80:49:26:4E:FB:C3:59:69:14:06:76:73
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:42:d5:6a:d7:7c:6a:e6:63:b4:7e:95:ea:80:59:ab:b6:6b:
a3:db:b5:87:22:2a:e2:68:f2:87:cd:9e:79:6b:d5:46:60:4c:
1c:fc:43:94:a1:81:2c:6c:2c:92:53:d2:78:5e:cb:de:80:52:
3a:21:91:33:b2:70:32:57:65:70:7c:69:c5:a9:2c:48:8f:26:
29:5a:40:38:c2:25:9b:fc:6f:53:76:79:e0:1d:b8:d3:f5:92:
03:36:cc:55:cf:51:14:43:d8:45:3b:65:3f:be:fe:a3:c7:53:
25:d9:8f:11:93:69:f2:f9:99:de:95:4d:a4:d8:b9:37:36:11:
d7:0b:41:63:c0:66:6f:dd:58:8b:da:27:35:bb:e9:cd:65:69:
3e:f4:20:2d:e2:bd:f3:e5:9c:aa:15:7e:de:4b:43:39:ca:2f:
fa:8e:b8:07:c2:b3:5e:e9:d3:39:e8:48:e5:2b:c4:52:2b:20:
77:8d:d3:f4:3a:c3:9a:5a:fa:f2:5b:da:ba:41:fc:a0:6d:9d:
66:5b:6b:0f:4d:97:03:3a:2c:be:da:37:29:7c:59:70:59:db:
05:89:75:1f:74:6e:b0:58:ee:35:24:6e:34:de:ef:ad:41:62:
90:9c:72:3a:36:02:65:b0:47:72:2d:bb:5b:5b:9c:ba:9c:05:
48:9c:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:23 2024 by rpki-client on console-ams.rpki-client.org