Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: wbjq6jpreCwEH2BwsDR3m9AOuP9zUU9IDnelRj2wLFU=
Subject key identifier: B4:76:9A:BA:B4:CA:99:8D:B3:C2:B9:35:C9:AD:A9:FB:59:8A:9C:B6
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 0193622012E8E5E18F3756E4D6F3D727A4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 1373
Signing time: Mon 25 Nov 2024 07:01:29 +0000
Manifest this update: Mon 25 Nov 2024 07:01:29 +0000
Manifest next update: Tue 26 Nov 2024 07:01:29 +0000
Files and hashes: 1: 60KvSLj6HQZwAOmNiwR9WMDOI3s.roa (hash: 395ndy2zANz3I/NIR4PPsfiuryqclQ+pjeGLUUa6Y30=)
2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: R22EiVztCDBiiE+qn9pq3HshhPJff0I7m4F4XWga7vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:20:12:e8:e5:e1:8f:37:56:e4:d6:f3:d7:27:a4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Nov 25 07:01:29 2024 GMT
Not After : Nov 26 07:01:29 2024 GMT
Subject: CN=b4769abab4ca998db3c2b935c9ada9fb598a9cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:c5:41:2c:03:11:6a:a6:da:1a:9a:2c:88:
5c:aa:9e:05:87:f5:6b:2b:85:27:18:7c:8f:9f:ac:
08:f3:9b:4c:56:4c:d6:80:72:52:45:3d:1e:9a:1f:
a0:37:98:ba:7f:b5:1d:6f:e9:65:81:67:87:93:9c:
2a:2a:91:23:ad:d2:f9:3b:a4:67:bf:6d:ee:6f:56:
a4:c8:ee:7a:95:5c:90:f8:74:2c:46:aa:e6:93:54:
bd:a0:93:58:18:7c:96:69:31:0a:35:75:20:e4:1e:
99:6b:23:73:1b:d4:9c:13:1b:5a:69:09:cc:55:2c:
dc:6d:e6:ab:f9:5e:da:59:74:16:ec:c7:40:72:c8:
d7:4b:fb:7d:ca:2d:a9:16:bd:1b:18:9e:db:d3:06:
5f:9d:b8:f4:78:0f:8d:2e:3b:a9:6b:90:8b:bc:65:
a2:59:b4:cb:bf:b6:ef:40:fb:05:3b:75:72:d1:8a:
58:57:c2:4c:f3:5e:63:3b:9a:ef:54:6e:04:14:f2:
cf:d3:ee:20:7d:ad:f2:8a:6f:b1:94:c4:5f:82:b7:
f8:8d:d3:28:b2:f5:90:9b:8e:82:96:fb:90:7d:24:
df:ef:db:12:0b:27:6e:97:96:ea:b6:13:47:ef:24:
33:00:42:9e:69:86:23:70:e8:fb:d1:b5:b0:79:cd:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:76:9A:BA:B4:CA:99:8D:B3:C2:B9:35:C9:AD:A9:FB:59:8A:9C:B6
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:d1:08:26:d3:c0:7d:86:3b:cd:ae:26:c3:16:18:3a:73:de:
0b:39:ce:4e:23:fd:52:5d:e0:1c:8a:8a:0d:ac:6e:bd:b3:56:
1b:f3:f8:b8:5d:d7:a5:9a:46:0a:78:1f:3f:06:6b:cf:db:2f:
78:6e:56:30:8c:15:2f:81:6f:7d:1a:1d:ed:42:4f:9f:81:9d:
78:98:e8:28:bf:f9:00:5f:dc:5f:b6:f2:9f:3d:ae:ab:f0:a6:
47:4c:06:8a:4c:4e:75:8e:d7:63:e8:a5:28:01:3c:c7:48:12:
1f:63:df:89:90:63:6a:d5:d9:df:c1:2f:46:9d:da:7a:af:89:
c8:d0:a5:06:e4:1f:2a:f0:40:f9:9d:23:70:42:bd:8d:f3:f0:
95:12:4a:f9:1c:f7:a1:31:22:46:11:44:10:6b:c6:d9:b6:28:
9b:9f:c6:29:b1:a4:12:9c:1d:31:97:e3:70:b2:14:bd:ba:27:
85:da:6f:e3:44:3b:4b:5c:37:a3:f4:9f:d7:84:c2:ff:be:1b:
f0:a5:53:fb:b2:e0:6d:f1:90:77:be:ea:91:e6:08:f0:13:f2:
2b:a2:b7:73:1b:1f:30:07:32:03:91:22:8b:08:85:3b:e9:3d:
75:52:64:32:b5:b0:18:97:e1:68:02:47:87:13:92:b3:dc:29:
7a:d9:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:33:07 2024 by rpki-client on console-ams.rpki-client.org