Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
File: S2HMijZcxAOCox2tVPbLcj9YdYo.mft (raw, json)
Hash identifier: IcfDfRbO2RYb/AQLcW85ct1N6eBOuj70QMZl1wQRc1I=
Subject key identifier: 49:0E:15:22:11:6B:D0:29:D1:7F:56:E1:61:04:0A:72:D9:40:08:C9
Authority key identifier: 4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
Certificate issuer: /CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Certificate serial: 01935878204E02BA79AEF7E181FAE2585B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 10:01:27 +0000
Manifest this update: Sat 23 Nov 2024 10:01:27 +0000
Manifest next update: Sun 24 Nov 2024 10:01:27 +0000
Files and hashes: 1: S2HMijZcxAOCox2tVPbLcj9YdYo.crl (hash: xbEtAwbhhtXIZTM+/bk/gZ/yzi+qMZQi0RzlgBF0VGY=)
2: WOG7VnnNaCan7I1b0qFWs97bO34.roa (hash: xeo55NI/JEdkiQohfCLo1YSPCwNyr2Q/mGqkvTvo3Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:20:4e:02:ba:79:ae:f7:e1:81:fa:e2:58:5b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b61cc8a365cc40382a31dad54f6cb723f58758a
Validity
Not Before: Nov 23 10:01:27 2024 GMT
Not After : Nov 24 10:01:27 2024 GMT
Subject: CN=490e1522116bd029d17f56e161040a72d94008c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:29:2b:f9:30:ef:c8:e9:ac:68:12:cf:c4:
7b:3f:94:04:d3:ee:de:f6:2e:95:ff:c9:09:0d:f6:
3d:3f:88:64:5b:30:3e:e2:69:64:b9:9e:8b:c7:91:
12:16:aa:8c:32:4e:68:4f:73:48:c4:84:5d:9e:bc:
d4:e4:02:57:cb:aa:4e:37:f0:81:30:9e:e2:f1:60:
cf:db:7f:2e:1c:e2:5e:32:db:e5:b7:af:69:c4:69:
e3:8e:8b:5d:bd:ac:63:db:33:06:bf:77:e2:49:08:
9e:f0:8c:b0:ef:05:79:79:11:d8:f5:03:ac:89:e3:
bd:78:2f:ba:a0:ee:2f:0a:50:d9:54:4e:99:bd:ee:
f4:9b:4a:06:a2:1e:01:22:ec:b4:ca:7d:66:e7:87:
5c:dc:9e:ea:c6:bd:2f:7b:e7:8a:e7:3e:e9:70:23:
c8:53:69:11:b3:a8:aa:81:ec:cd:41:3f:b4:82:e7:
f0:d3:f2:6b:02:61:f7:98:4e:e8:ef:43:22:01:16:
00:8b:9a:ba:b2:00:ae:8f:7f:b8:dc:8f:09:ba:2a:
ef:0b:42:be:83:aa:13:0f:0e:5e:43:0f:76:34:6a:
5d:67:dd:f3:99:74:2e:5a:59:6c:b5:16:83:ce:c0:
5e:6b:70:3f:21:69:b0:34:22:8c:0a:97:8e:44:8e:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0E:15:22:11:6B:D0:29:D1:7F:56:E1:61:04:0A:72:D9:40:08:C9
X509v3 Authority Key Identifier:
keyid:4B:61:CC:8A:36:5C:C4:03:82:A3:1D:AD:54:F6:CB:72:3F:58:75:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2HMijZcxAOCox2tVPbLcj9YdYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6b9ec0-9b10-4443-b5e6-c4fd53ebeb67/1/S2HMijZcxAOCox2tVPbLcj9YdYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:67:f4:be:eb:48:73:92:21:58:14:f4:7e:33:94:56:9a:19:
c5:43:a6:88:57:72:57:1d:be:f5:ea:d8:30:9a:bd:c3:88:52:
21:70:56:54:d9:66:a7:3b:cc:42:2c:a9:3e:c0:97:7c:ef:94:
03:1a:eb:38:ca:aa:f6:e1:8d:46:7a:fb:80:3d:8a:27:4d:6f:
08:3c:3f:e9:62:67:ee:e9:52:12:70:d6:ea:68:b2:18:7e:2d:
a4:53:c7:43:c1:5a:ec:3e:02:78:3f:b1:d6:5e:46:8d:84:f4:
db:10:63:95:e2:57:ab:f5:7d:ff:d6:87:17:6e:60:36:e3:e1:
d9:87:b5:76:ad:a7:81:72:88:4d:d3:b3:65:b5:33:c9:e9:e0:
32:a5:11:95:bd:89:65:2b:64:6f:e3:a9:0e:22:77:51:b0:4b:
1c:fd:ea:60:80:8f:dd:94:a7:0d:62:66:16:a3:65:e5:14:2c:
85:09:e3:b0:07:27:84:54:78:ae:3d:70:95:5f:62:08:5a:02:
6a:74:b4:b9:50:0b:d5:b9:f1:cc:ad:09:58:a6:bb:72:59:3e:
c3:7a:42:af:5c:96:1f:7c:2d:d6:1c:2c:e8:b5:ab:73:fc:3c:
be:ad:4c:7f:51:91:47:92:a5:f3:50:b2:ef:09:72:a0:36:f9:
af:8d:db:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:48 2024 by rpki-client on console-fra.rpki-client.org