Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File: 5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier: VRF0vMBrmPitHVO5omItfFQs3dYQHYvpGM1+bF9tNnU=
Subject key identifier: D5:BF:71:B8:50:EC:AC:69:22:B1:18:CE:67:47:34:6C:F8:5C:81:29
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 019367EB2971AF5E80516E3470D460CFAC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number: 101A
Signing time: Tue 26 Nov 2024 10:01:25 +0000
Manifest this update: Tue 26 Nov 2024 10:01:25 +0000
Manifest next update: Wed 27 Nov 2024 10:01:25 +0000
Files and hashes: 1: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: mD6ovpIOw+ZevmfxsyUuBiCMf6onhvL3G8jUKQu+wms=)
2: _xi51u4J1rake7sO3MIGV8ngFiM.roa (hash: rRI5kn9gXNYWf4rQusPSzg4EfXHUNGaYQHsGtQah6hQ=)
3: aKfto2wjgPyoEmcUV6t493LvzUk.roa (hash: /obZ/gO+6rPA2rf+Po8Q3SVeICTRveSNXQIFOXjsTb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:eb:29:71:af:5e:80:51:6e:34:70:d4:60:cf:ac:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Nov 26 10:01:25 2024 GMT
Not After : Nov 27 10:01:25 2024 GMT
Subject: CN=d5bf71b850ecac6922b118ce6747346cf85c8129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:a6:ae:b4:cb:ad:12:2c:9c:0b:fc:52:bc:
b5:12:9f:c0:f4:f1:dc:7b:5b:bb:20:7e:0c:7f:f1:
71:16:9a:88:9b:04:3d:40:19:7c:02:89:89:75:93:
d9:ed:96:0d:19:89:36:15:07:27:fa:f8:8f:e2:3f:
53:1a:cf:e2:c6:b3:a3:15:f6:ee:22:d2:89:cf:8e:
f8:d3:61:2e:d1:71:82:78:4c:35:39:d3:6f:ed:56:
e3:00:d3:b1:08:90:d3:72:e4:0c:03:9f:3e:a1:2c:
92:04:0d:af:96:a5:9d:8b:01:8a:82:78:cb:19:79:
9f:51:61:45:9e:17:de:cb:e9:a9:7b:2c:6b:fc:1a:
64:b4:d9:13:a6:ac:ac:7b:1a:5f:2e:07:64:92:d0:
e9:cd:6c:3c:06:da:56:72:e7:0d:c3:72:b9:d3:68:
be:b6:97:39:66:53:3c:d3:73:98:3c:73:26:4d:86:
c1:a1:e0:02:33:e2:91:13:77:85:83:f5:c4:8d:5e:
8c:9e:34:3a:c9:53:91:40:52:3e:cd:ed:24:ed:db:
8c:e0:e4:97:2b:4c:80:72:1d:ed:ed:fb:2e:c4:0f:
f8:95:fe:db:6e:51:d0:7d:8d:b0:ce:6c:8f:41:f1:
50:94:9d:0b:dd:c5:5a:c4:5c:2b:10:b3:ab:48:97:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:71:B8:50:EC:AC:69:22:B1:18:CE:67:47:34:6C:F8:5C:81:29
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:79:98:1e:cc:52:17:93:b0:13:f5:d4:cb:9f:2c:23:44:22:
ed:1e:bc:53:cb:06:f9:eb:51:59:20:47:2c:4a:5a:e9:21:e6:
aa:4b:7c:a7:41:02:1d:c2:aa:cf:01:7d:09:36:c5:29:a3:c8:
35:10:a2:47:8a:d3:70:c6:cb:f3:56:90:00:b5:64:55:a5:9d:
2b:29:77:f5:ea:17:df:7e:ee:a9:72:7a:86:54:b4:31:60:89:
dc:2c:86:19:a5:28:52:ea:f9:48:32:e4:ea:d1:de:44:3c:ec:
ed:08:34:e3:1e:b7:ec:1d:a5:6d:a4:fe:87:a4:47:35:27:df:
c8:a9:6b:bd:9a:a0:6c:d2:f2:45:0e:ec:bb:1b:f7:04:21:66:
a2:d0:7e:e6:43:0f:f1:e0:79:23:c8:3c:3c:38:7e:0f:52:53:
96:af:98:8c:aa:22:f6:a9:c5:e7:86:80:fb:95:9e:e9:f7:7e:
de:39:2c:7e:22:1a:b9:c4:15:5a:b5:7b:e5:ca:f5:ad:14:25:
8a:b9:5a:c7:73:13:23:29:40:42:e8:7d:80:00:dc:a2:45:39:
79:4a:f3:97:4f:1d:5b:3a:45:5a:22:cc:c4:ed:8a:25:35:b3:
1b:97:4d:0e:7c:ce:e0:9c:79:ef:a3:a1:10:13:59:43:80:25:
8e:ea:40:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 15:52:53 2024 by rpki-client on console-fra.rpki-client.org