Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
File: C52GCWpJEQz5v2cCQLUZMVtmq8s.mft (raw, json)
Hash identifier: X8iYSNJIFisGxh4F5qubCSAByQNhyzxeds5bUQMmrB0=
Subject key identifier: 17:C8:1D:58:58:57:67:D2:08:93:C6:94:E7:B5:11:07:9D:61:47:2D
Authority key identifier: 0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
Certificate issuer: /CN=0b9d86096a49110cf9bf670240b519315b66abcb
Certificate serial: 019367EA7C916F68336B6AF3CD99DD91F4D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
Manifest number: 138A
Signing time: Tue 26 Nov 2024 10:00:40 +0000
Manifest this update: Tue 26 Nov 2024 10:00:40 +0000
Manifest next update: Wed 27 Nov 2024 10:00:40 +0000
Files and hashes: 1: C52GCWpJEQz5v2cCQLUZMVtmq8s.crl (hash: DpG1zocEYQmPVjUQPnhqBq0/ZWBDH9yGWOZvNirCh34=)
2: rFm1vq8BqvY_GGOnLe_-WghGhV8.roa (hash: Yh+INgjfKAWwLwVpfmfJj6T3iGEP47HezkGAgipEHlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:ea:7c:91:6f:68:33:6b:6a:f3:cd:99:dd:91:f4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b9d86096a49110cf9bf670240b519315b66abcb
Validity
Not Before: Nov 26 10:00:40 2024 GMT
Not After : Nov 27 10:00:40 2024 GMT
Subject: CN=17c81d58585767d20893c694e7b511079d61472d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:66:72:8e:16:b0:0f:e8:ae:3b:16:eb:f3:
f1:2d:d1:c8:fe:f9:c9:96:88:e2:56:ee:a0:5b:8d:
2d:f8:f6:7e:1a:23:bc:5e:74:08:fc:98:4d:a2:96:
04:e8:86:09:21:75:06:19:1a:60:87:5b:79:b8:1b:
27:56:96:29:eb:3b:a9:4c:4d:13:40:d8:ab:a5:40:
b4:99:6a:f9:04:50:25:2a:68:fa:21:bd:4c:8d:09:
44:b4:62:fc:50:fa:20:86:2f:29:39:c9:61:d2:6e:
9c:98:23:65:d0:f6:d9:a9:72:d9:11:53:b8:b9:10:
e7:bc:29:4a:af:f4:e5:e8:85:94:39:5d:16:ee:e7:
1a:98:6e:ca:11:64:c1:04:f4:fd:28:8d:8e:d5:ed:
c8:d9:6c:67:c5:ab:4a:37:7b:50:b6:30:ad:b6:b5:
93:85:f0:5e:84:7c:28:23:05:e1:3c:ea:77:9b:1e:
ee:df:05:d4:b7:a8:f0:ce:9a:ac:1e:ff:33:96:bb:
07:89:6e:38:09:d9:35:7a:47:42:87:52:99:5f:61:
f3:c9:0e:ab:bf:cb:f8:00:92:47:aa:23:ca:5f:51:
15:c6:0c:7e:84:22:37:9e:40:9d:46:8a:4a:47:38:
5d:2a:50:42:8b:ca:3f:a6:c3:23:21:df:81:01:91:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C8:1D:58:58:57:67:D2:08:93:C6:94:E7:B5:11:07:9D:61:47:2D
X509v3 Authority Key Identifier:
keyid:0B:9D:86:09:6A:49:11:0C:F9:BF:67:02:40:B5:19:31:5B:66:AB:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C52GCWpJEQz5v2cCQLUZMVtmq8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1e1a97-f276-4a51-b1b5-8c10909a485c/1/C52GCWpJEQz5v2cCQLUZMVtmq8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:be:e5:c6:70:a3:83:42:39:e9:20:80:5f:a7:b7:e7:1c:e3:
e5:96:85:5e:30:27:e5:b0:c6:41:ac:d9:f6:b7:16:9b:db:19:
bc:3c:bd:40:49:22:09:b8:df:c7:09:23:77:e7:51:0c:2d:9f:
b1:66:1d:b8:85:d4:c5:6d:ab:b4:42:1b:c8:d0:7f:4b:2e:f3:
e2:18:d4:de:78:fe:59:e6:c6:8c:8b:3c:51:26:ef:45:62:a4:
0f:0e:d4:53:ba:1d:36:e1:a9:4d:e1:30:49:78:12:2e:98:97:
83:5d:a2:42:a1:26:c2:40:84:86:6e:ae:eb:48:c7:dc:cd:03:
01:26:a8:56:d3:66:fb:b2:26:78:10:1b:a9:cc:3c:d3:d0:73:
29:12:e1:bb:f4:a7:32:a0:1a:24:d4:ac:64:c0:3e:58:46:4d:
a1:59:b3:73:1f:71:76:b4:2b:b4:a5:ff:2e:bc:cc:00:f5:1c:
ca:07:49:3b:60:63:cd:fc:77:59:0e:5f:e0:a6:fc:33:c9:37:
cb:e3:7f:39:bd:1d:5c:20:c0:38:08:3f:40:9b:c4:a5:da:fa:
29:0c:32:e9:99:d4:8a:c0:df:7c:2a:62:ab:9c:41:de:99:59:
33:48:b9:32:2a:ad:ef:75:9a:5f:36:e4:8c:68:b8:71:0f:95:
71:0b:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 12:47:29 2024 by rpki-client on console-ams.rpki-client.org