Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: zfgkku5jxwvM+DxGhFxJI+d2LOqjpG/T3ty04Nf3A14=
Subject key identifier: 45:EA:EE:51:7C:C4:97:6C:3F:E8:26:E2:25:31:33:3D:CE:8C:24:51
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 01936031D02264320F296A9EBBE46ACF3343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 03DD
Signing time: Sun 24 Nov 2024 22:01:37 +0000
Manifest this update: Sun 24 Nov 2024 22:01:37 +0000
Manifest next update: Mon 25 Nov 2024 22:01:37 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: Im591k54awwfj/2u9gMcMGs+9fRlX02RV7mQI4CThvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:31:d0:22:64:32:0f:29:6a:9e:bb:e4:6a:cf:33:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Nov 24 22:01:37 2024 GMT
Not After : Nov 25 22:01:37 2024 GMT
Subject: CN=45eaee517cc4976c3fe826e22531333dce8c2451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:44:4c:a7:e8:f1:6c:cc:b2:d9:65:2e:b9:a7:
08:bb:e4:85:b4:bb:fd:da:57:7d:64:cb:cc:ec:74:
c1:90:40:21:8e:19:bd:41:64:6b:98:a8:b7:50:95:
fd:3c:6a:5f:ee:ba:41:d3:4c:d6:31:1f:f1:1a:95:
f0:cb:96:6b:b7:a5:51:2c:e5:5b:47:1e:3f:ea:e3:
f0:36:41:f2:16:31:c9:23:86:2d:ae:8d:32:10:2c:
14:4d:32:d2:90:16:15:3d:12:fd:e5:23:41:2b:55:
ee:5a:d5:24:eb:da:59:c4:a3:6e:07:c3:a3:45:68:
4a:9e:93:20:81:e4:d1:8c:74:25:46:af:a9:fd:da:
3d:6b:19:9e:e0:d2:58:43:89:28:e9:2f:2d:16:44:
7f:58:93:f0:56:7b:2d:6c:1b:84:11:b2:61:07:ad:
e6:69:27:1d:0f:99:a3:73:a7:66:86:ea:f5:18:64:
4e:47:2f:07:93:85:9c:93:70:69:62:e4:96:00:9c:
0c:c7:15:34:12:4d:64:77:50:39:01:2f:0f:50:ec:
35:5c:47:ec:bc:dc:48:43:c2:48:3c:db:66:03:52:
80:16:39:3e:d2:fb:cf:f6:d7:b7:d2:1d:4d:33:c4:
e4:f5:0e:f3:f2:19:65:e5:cf:9d:48:37:36:66:85:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EA:EE:51:7C:C4:97:6C:3F:E8:26:E2:25:31:33:3D:CE:8C:24:51
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e0:09:1f:85:9d:b8:71:7d:bd:ca:c4:f9:60:68:cc:df:41:
46:c4:fa:bd:6f:d6:20:9b:d1:7b:d3:43:20:c4:04:bb:fe:a6:
29:4e:8a:76:a8:62:08:c6:fe:17:21:0b:2f:60:5f:cb:47:c8:
bd:ad:80:55:f2:89:3c:e3:e3:b1:9e:1d:85:e8:c2:5a:aa:ee:
47:c1:9b:9e:43:e3:8a:b3:a0:43:9f:c5:2f:e1:39:52:02:e7:
67:d4:e0:57:ad:2a:33:78:2b:71:c3:7d:d5:46:b6:e0:ed:b4:
3f:82:6f:43:74:75:6f:ab:80:e7:85:fe:ff:2c:cc:0c:d0:3e:
8b:29:69:6e:ac:fc:d7:43:a5:ac:dc:af:13:86:3a:07:94:5e:
b6:c0:56:c3:a4:a9:04:3c:79:40:c9:91:e5:61:ea:d7:b1:57:
d9:47:ec:24:c6:27:18:62:50:c2:a1:0b:ce:65:c9:e2:03:6c:
a0:67:d4:fa:37:a4:a7:00:15:2c:63:ed:b7:7c:c9:ad:e6:ef:
14:8b:70:7d:11:af:bb:7e:b7:3f:f0:86:d1:7b:96:9d:79:c7:
7f:4a:5d:f2:c9:f5:b2:e7:06:49:fc:87:92:f7:e0:aa:60:ef:
c8:5b:e1:c5:fa:3f:24:d2:6a:85:55:8e:61:73:3f:c4:87:f2:
04:0d:24:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:43:22 2024 by rpki-client on console-fra.rpki-client.org