Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: 9q0P6rDwsHK4TLSZNDj/A9nzFA8DFb9uLGtFzFxcATE=
Subject key identifier: 71:9F:3A:1C:BE:1C:53:5D:7B:65:78:40:B9:E7:C6:AA:7B:F1:18:54
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 01935878454FE8222E6A084F35E7BF5E270A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 10:01:37 +0000
Manifest this update: Sat 23 Nov 2024 10:01:37 +0000
Manifest next update: Sun 24 Nov 2024 10:01:37 +0000
Files and hashes: 1: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: HEQ+hQjx9nmTG/Ru+CQ74cdOZl4rwp5ZIztDD3twphk=)
2: serVsKNWieP6yN8Y-ONg7CrxF6A.roa (hash: /lcW43TLA8dgcT4Met9fuiAYnGg4zAOrNUNf1GBvjzE=)
3: x_Xf4Jqyyc0fFXsSDRqm9udhIVI.roa (hash: PlMN1TVk8NoS6Aua7QPjL03Q/9G8l3AM9SUL31+F8Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:45:4f:e8:22:2e:6a:08:4f:35:e7:bf:5e:27:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Nov 23 10:01:37 2024 GMT
Not After : Nov 24 10:01:37 2024 GMT
Subject: CN=719f3a1cbe1c535d7b657840b9e7c6aa7bf11854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:54:5b:6a:66:ac:67:33:c8:3d:45:d0:69:
81:df:6a:b9:9f:91:00:07:5e:7b:3b:17:65:99:d0:
7a:9f:47:ed:b8:7b:37:2f:34:dd:c0:4b:76:a6:05:
ea:ae:e7:78:eb:98:a2:9b:16:97:a7:49:7b:7d:6d:
a5:86:b7:fc:5f:ec:2b:25:61:f0:8f:2d:3b:28:74:
45:4f:8b:78:79:60:6f:60:e5:66:2e:82:3d:c6:0d:
9c:04:be:c4:bc:bd:00:b7:16:81:a0:0e:3c:8a:dd:
73:ce:4a:74:83:19:a1:7a:f4:74:d1:d7:22:2b:93:
05:1a:fa:14:97:6b:65:97:c0:47:de:22:dc:49:22:
2e:8c:d3:ee:d8:f3:95:ee:81:1c:29:ef:1f:6b:97:
aa:a6:04:8f:26:64:2d:bd:d5:1f:ef:b2:5b:50:b1:
65:ce:6c:18:9c:fe:66:ca:c8:cc:aa:91:3b:50:93:
73:79:56:8b:c5:3f:09:47:1f:99:1f:a8:b3:53:f6:
0e:b3:41:88:b1:79:03:1d:35:c0:a1:08:94:14:9e:
2f:01:fd:4f:42:84:b9:fd:6e:af:d3:ca:ca:e5:0f:
23:b0:11:fe:90:b8:87:03:50:d6:0a:fc:1d:11:de:
94:fb:68:b0:f8:8c:24:ab:fb:ce:cd:68:c1:52:57:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9F:3A:1C:BE:1C:53:5D:7B:65:78:40:B9:E7:C6:AA:7B:F1:18:54
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1c:5f:76:36:de:27:7d:ad:77:c2:e2:9a:0f:d8:eb:43:73:
c5:42:2b:d2:7d:f6:40:3f:67:09:1e:27:f1:28:26:db:52:cd:
d8:fb:42:69:41:4a:7a:62:d5:cc:e1:f9:82:6b:a0:89:a9:d3:
ac:df:1c:c4:b3:1f:a7:f8:65:c5:e8:25:cf:8d:3b:66:ee:a6:
0f:e8:b9:0a:a5:24:19:af:2d:34:3d:2f:89:6e:4f:c3:01:06:
e7:67:4c:2a:d8:34:b5:df:c2:57:ad:c0:ee:97:ac:12:8e:6f:
a6:bd:3d:c5:c7:87:ce:d1:93:83:88:83:68:74:be:ed:c4:ce:
94:b8:53:21:f3:ad:a7:b2:59:ea:42:b6:33:db:89:fe:89:59:
51:19:76:92:76:0e:d5:25:b6:db:c6:c9:75:93:82:00:e3:3f:
e3:31:94:aa:fe:03:9d:15:f3:2f:6e:7f:77:01:17:c4:2b:20:
6b:77:32:93:ae:6a:c2:e1:1d:23:01:07:a0:25:ec:b5:4c:49:
02:b2:1d:80:3c:2c:6b:39:7d:64:d5:78:79:ad:ef:0c:a1:07:
31:e4:5c:a5:ee:1c:50:ce:e7:ba:2f:ff:b3:a2:45:ab:4a:93:
00:41:ff:f1:a6:18:ee:40:81:a0:b7:ae:84:fd:4e:23:79:45:
b5:db:3c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:33 2024 by rpki-client on console-ams.rpki-client.org