Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
File: 8MEEBBaR3DhPOxqM35XJZijqba8.mft (raw, json)
Hash identifier: Rb1m6djhzSLdKliQ1Zqd6KM1DeIyXhyybVdyIKd2y+s=
Subject key identifier: C2:B4:16:A4:BC:20:C6:56:DC:9C:49:4A:1E:DE:18:6B:88:A7:EB:2F
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 019354637038A483F28E5283976A85159942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
Manifest number: 1311
Signing time: Fri 22 Nov 2024 15:00:23 +0000
Manifest this update: Fri 22 Nov 2024 15:00:23 +0000
Manifest next update: Sat 23 Nov 2024 15:00:23 +0000
Files and hashes: 1: 2JPu54zcMgqpjgM_X1DTraNohGk.roa (hash: gooLU784k1i41KOHy4EVXVESp2vjgglIlrNrES6Dmp8=)
2: 8MEEBBaR3DhPOxqM35XJZijqba8.crl (hash: a+9jNS8e66/3Lxmss6lAGeWV3O2MjmXUgzL42RkSr2w=)
3: E1DE8X6j7bgx7XbOOgsHzJYmVXk.roa (hash: TO8NkPXST/nt+MJKSG2YdfrW6fXdvdbWrMfp5JvZo40=)
4: HdTGVqbOE9YXW52yUXuHGH7aWTE.roa (hash: FrFaZ2zfMLQFRbThHaQMLo3p7Ndl0ocBB0Ne4xSCWAo=)
5: NTk6a-XyRFscXqpRWzTahs1Z05E.roa (hash: quu5uJ7Es2AqjPv4Y+FxPabken2YCbNGjMF2JWnO9Vo=)
6: TRsIDyV2p5FYlR4S-DKoRIEynVE.roa (hash: H9kbK/17uqfxxO6wYtGMh+lyg9cRk0JOxdJ3pawXKlU=)
7: mzBCEFUQOZqgMwJMRuK6JVWcM-0.roa (hash: AVF7oohtla3GsvJFlga6VElVCM0hj56Ze9pOP9sxYZc=)
8: sU2Nkr4hAJZfmiVRUBlbpMa8Vzk.roa (hash: NXrHULYMaJWD23zGnCQffy+f6f5ikfr7nkGqJSfQYD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:63:70:38:a4:83:f2:8e:52:83:97:6a:85:15:99:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Nov 22 15:00:23 2024 GMT
Not After : Nov 23 15:00:23 2024 GMT
Subject: CN=c2b416a4bc20c656dc9c494a1ede186b88a7eb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:34:9c:be:34:b6:13:ce:d9:16:6b:0b:97:a8:
66:2c:74:d7:7e:ad:a5:69:32:c5:9f:81:14:16:6b:
fb:39:0e:18:c1:6c:fb:c6:79:79:5c:e6:23:0a:32:
4f:41:e1:10:95:0b:02:4f:bc:99:a3:00:83:96:6f:
df:ba:4e:45:ff:94:52:6b:8a:bc:da:4f:63:cd:bf:
77:0f:00:fa:8f:81:4d:85:94:1f:94:98:eb:29:eb:
f9:5e:bb:b4:c0:e1:53:56:54:06:38:33:bd:37:87:
64:e1:eb:f6:a2:8c:72:16:6b:46:ff:f5:26:93:f8:
97:bb:86:85:ae:ef:b0:a5:17:ef:16:05:0b:94:00:
de:89:77:ee:85:85:9c:f5:2a:2c:e1:f3:c2:f6:0a:
ae:3b:44:90:d3:37:68:8b:9b:bf:c2:f9:4b:43:b3:
cb:2a:9d:3c:ff:c7:c0:1d:77:7e:31:c5:e4:a9:f6:
0b:bd:46:5a:cc:87:6d:cd:77:65:60:a9:ea:2c:54:
6b:3b:73:bc:ec:39:77:62:7e:fb:c3:b6:56:f8:d1:
ac:58:d7:ef:63:13:c5:88:18:94:8b:00:ff:d8:9e:
15:1a:40:87:52:35:5c:89:17:4d:ab:a1:30:09:d7:
f2:37:be:8b:bf:2d:6c:1d:45:9f:65:8d:19:71:90:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:16:A4:BC:20:C6:56:DC:9C:49:4A:1E:DE:18:6B:88:A7:EB:2F
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b7:d3:91:07:c1:c5:3b:53:00:53:e5:87:96:a5:ab:37:37:
44:3f:a9:b8:5d:f0:c3:91:ae:8f:9d:7d:7b:81:af:35:46:ce:
6f:dc:52:d9:3f:4c:c2:b2:da:bb:62:2e:88:b9:4b:2f:78:1b:
9e:97:ed:27:92:ee:f3:cb:a7:4b:e9:bf:6c:9e:a0:62:69:70:
af:0d:5e:f5:9d:44:fe:9a:27:e7:7e:d4:08:8a:37:2d:0c:48:
86:7e:64:28:b3:8c:d1:2a:53:b1:cf:cc:ee:7e:e1:42:a2:d5:
6e:52:17:9a:13:19:54:2a:a8:50:7b:63:bc:07:9d:dd:7e:e7:
d4:5d:9e:e9:c4:04:59:55:b9:84:68:c8:5a:9c:9e:a5:97:ae:
5c:48:0e:bd:f1:82:a0:be:cf:57:46:62:2c:5e:a6:66:fa:84:
8d:ff:f0:a2:51:5d:2d:82:65:24:50:c5:e5:cc:b5:69:c4:64:
5b:18:e4:df:fa:99:22:dd:38:17:56:83:56:51:9d:7c:fe:c9:
38:09:c5:78:bc:80:2a:b5:5b:91:97:5d:e6:fe:cc:33:62:52:
ef:7a:7b:7f:f9:97:92:40:42:47:56:4e:b1:13:4a:03:43:e2:
c7:23:e6:68:2b:92:78:0f:e1:2c:57:97:dd:af:b8:8d:19:49:
17:ca:b6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:25:21 2024 by rpki-client on console-fra.rpki-client.org