Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
File: S-kZqE4aIp94nZOdGqpxKk08OZ0.mft (raw, json)
Hash identifier: mBwxrIVaJSExamXDT1ht9dlTx5b3nsk3lZZfoWPUt4s=
Subject key identifier: 87:B5:7E:4D:8B:A1:60:4F:B4:DC:59:F7:34:3A:BB:CA:02:CB:A8:69
Authority key identifier: 4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
Certificate issuer: /CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Certificate serial: 019357D26F1DE79BCA9356D3237038912836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
Manifest number: 01CF
Signing time: Sat 23 Nov 2024 07:00:28 +0000
Manifest this update: Sat 23 Nov 2024 07:00:28 +0000
Manifest next update: Sun 24 Nov 2024 07:00:28 +0000
Files and hashes: 1: S-kZqE4aIp94nZOdGqpxKk08OZ0.crl (hash: nG1Gz5Nw9ZGJgixM/t7vqiYRNMI8zXt2yViaKM0muK4=)
2: XBzZyIG8kn6q8p-NdmjKwJMgy_k.roa (hash: /tQRFvIHtA8tTIsKx/psa8bQCraIFIMLtK5n1XSTFgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:6f:1d:e7:9b:ca:93:56:d3:23:70:38:91:28:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be919a84e1a229f789d939d1aaa712a4d3c399d
Validity
Not Before: Nov 23 07:00:28 2024 GMT
Not After : Nov 24 07:00:28 2024 GMT
Subject: CN=87b57e4d8ba1604fb4dc59f7343abbca02cba869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:5f:5a:e7:8a:7b:ea:5d:07:1b:32:57:06:
3f:67:c3:b2:8a:e5:5a:73:7d:bc:0b:73:d4:19:58:
bb:69:6e:3c:00:85:f1:7e:e9:d2:27:9d:3b:46:f8:
ec:0b:64:2a:e1:9f:e2:a3:92:02:ae:76:8b:14:b6:
a4:f5:3d:35:13:b1:41:d1:f8:b5:07:f6:1d:70:7b:
56:bb:de:e1:b1:45:5e:01:fb:a5:12:60:f9:00:39:
29:a6:4b:b5:a4:b4:e9:29:8d:e0:4f:22:da:f8:26:
6d:a1:68:e6:da:9a:da:4d:a4:4d:66:94:c9:50:f3:
49:af:b3:8d:44:d5:8f:1a:92:56:8e:1d:78:7f:d5:
45:26:c1:09:f1:b2:97:2d:ef:28:8d:9e:f5:c2:71:
ab:95:ac:c6:1d:d3:09:23:87:8f:76:69:b1:89:ce:
03:89:c8:d5:77:1a:e8:d1:8b:04:24:e1:9b:b9:78:
c7:8e:7c:c3:41:cd:96:7e:17:4a:82:1c:3f:3b:e1:
9c:af:26:f0:44:53:62:6a:65:71:4c:5c:af:20:ff:
12:db:87:22:a5:8d:23:3a:60:ad:8e:1e:19:fd:99:
53:3b:8c:b3:91:ce:a5:9d:ba:b3:b3:6c:a0:9a:23:
07:02:e1:87:3a:b6:04:b5:ef:e7:2c:fe:9f:c9:90:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B5:7E:4D:8B:A1:60:4F:B4:DC:59:F7:34:3A:BB:CA:02:CB:A8:69
X509v3 Authority Key Identifier:
keyid:4B:E9:19:A8:4E:1A:22:9F:78:9D:93:9D:1A:AA:71:2A:4D:3C:39:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-kZqE4aIp94nZOdGqpxKk08OZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/367748-885c-4621-b44c-1195fe050de1/1/S-kZqE4aIp94nZOdGqpxKk08OZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:be:01:df:2d:76:7a:55:7e:a1:64:2d:72:a4:ee:31:f0:2a:
e1:da:78:e8:74:dd:76:70:0e:a4:ba:eb:c8:9c:81:86:eb:da:
54:25:6e:d3:be:3c:b0:39:7e:fb:c3:44:72:08:fa:7b:6a:3e:
b0:37:0b:b3:10:4c:d4:25:8a:0c:c9:94:2e:22:8e:f4:ef:d3:
a8:58:5c:1d:e6:0c:c3:25:05:c2:35:7a:f1:0f:52:80:1b:4a:
20:6a:67:23:12:19:ec:5c:99:68:5d:9f:85:e4:62:bb:b5:02:
57:b9:7d:ad:74:a9:e4:43:c4:13:4b:ff:e9:f4:bf:0c:a8:bf:
72:03:17:ac:99:d5:4e:c6:d5:a2:0a:f0:cd:20:72:9e:f9:e8:
8c:88:57:d6:20:34:93:72:11:14:03:a7:c6:44:b8:b1:2f:71:
5b:0e:8a:03:df:0a:07:bf:64:9d:90:6e:c3:f5:07:a9:6f:16:
e3:f4:d2:14:e6:28:95:26:1b:5f:e2:d3:ac:d5:5b:c7:9f:8a:
45:2b:a8:06:13:88:a3:bc:ea:04:69:f5:a1:fe:04:b1:1a:f6:
ff:5a:82:45:a2:e8:a5:2b:b4:dc:53:cb:92:76:c2:2b:ad:0d:
a6:11:62:d9:66:d6:c1:38:ef:c8:b0:ba:ee:16:b1:5a:ea:b1:
41:4f:d5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:24 2024 by rpki-client on console-fra.rpki-client.org