Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
File: L9lxonxvwsZi8GXdi_qLihMsHq4.mft (raw, json)
Hash identifier: tU5wOg9Wsi7UD7smGV/lQgx9P07uP1bmyRakUKCZQmk=
Subject key identifier: C9:60:F4:B4:48:AF:BC:E8:C7:6C:54:B2:07:8F:BF:EC:28:D6:85:68
Authority key identifier: 2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
Certificate issuer: /CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Certificate serial: 0193609EFA67EEDBBA847E1A7547DD688A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
Manifest number: 0B6A
Signing time: Mon 25 Nov 2024 00:00:51 +0000
Manifest this update: Mon 25 Nov 2024 00:00:51 +0000
Manifest next update: Tue 26 Nov 2024 00:00:51 +0000
Files and hashes: 1: BjgxXw5dB_wuQ0ZRzXS45sCbI2M.roa (hash: nSybFFrjmEruKoTvku3jHfun9w/b6/3srwb2Ve09tHs=)
2: Gi9vxsbGv7TXvWaOEgekBanjuT0.roa (hash: JOBhjIfBMZGvIblLBW8vH46rmW/4zCUevGoOsbzZB0A=)
3: L9lxonxvwsZi8GXdi_qLihMsHq4.crl (hash: YPfTHRIq+QPW25UFl8cgLEOfWN6GuUfkakM6ObxyE8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:9e:fa:67:ee:db:ba:84:7e:1a:75:47:dd:68:8a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Validity
Not Before: Nov 25 00:00:51 2024 GMT
Not After : Nov 26 00:00:51 2024 GMT
Subject: CN=c960f4b448afbce8c76c54b2078fbfec28d68568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:46:2b:17:21:ad:de:fe:09:d6:e9:0c:e9:
5d:70:83:40:f3:5c:a0:27:6f:06:9a:a5:b0:f3:d7:
90:9b:d3:45:6c:51:c4:f7:16:67:a2:89:89:bf:35:
19:2e:bb:b9:58:dd:1e:9a:30:c4:e6:75:2e:c7:d1:
dc:ec:36:52:f5:bc:e4:e0:2f:c2:37:f2:f3:99:35:
cb:f0:95:f3:fa:93:26:a6:f3:7e:62:3b:4e:66:21:
0a:64:45:eb:8c:1b:2a:f9:82:b3:da:e2:9a:cd:7a:
a2:aa:6f:0c:9b:b3:c6:fb:f4:85:56:61:ca:99:ce:
e2:c0:f5:76:d0:80:bf:e1:de:d1:bc:a3:6a:62:9e:
a1:75:7d:77:df:13:5c:87:7b:c6:46:5e:6e:fe:ba:
da:59:b3:a9:36:50:22:af:d9:5b:b2:27:74:ae:31:
5b:9f:8d:2a:1e:7e:54:8a:3c:40:70:f8:5c:ec:16:
69:f5:f6:70:5b:22:fe:fe:c0:5b:81:e4:01:34:d6:
bd:cd:af:85:ae:1d:6a:af:1f:84:e0:b7:7a:35:2d:
e0:7d:9b:ba:5d:af:49:d5:2e:2b:fe:a5:b6:66:ce:
f6:c7:23:25:7b:e4:07:a0:0f:3a:0d:61:25:da:64:
47:6c:81:d2:8b:46:90:a1:b4:45:73:bf:fa:2b:50:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:60:F4:B4:48:AF:BC:E8:C7:6C:54:B2:07:8F:BF:EC:28:D6:85:68
X509v3 Authority Key Identifier:
keyid:2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ab:42:76:7e:57:f8:da:d4:f0:a8:d1:42:30:53:0f:ef:8e:
2a:a7:e2:08:23:44:45:95:06:3b:61:67:ff:93:ec:23:f4:6f:
ed:91:c4:c7:57:93:1f:d6:b5:64:6c:61:bd:3a:07:c5:64:b9:
a1:06:ac:af:82:3f:1c:34:89:f5:20:14:35:44:1c:48:76:46:
22:22:61:62:62:c7:13:4e:c1:64:73:b1:b0:c2:a4:ff:44:8b:
de:51:20:79:ea:9a:74:92:97:55:38:8a:70:1b:47:bd:59:6e:
32:2a:da:fd:02:e9:b6:60:bc:96:5a:0c:6c:63:c1:7f:10:d7:
b4:0f:8e:be:8a:04:89:29:fd:f7:ab:f0:fa:7c:9e:b3:5b:e8:
ed:c9:3b:2c:a2:52:69:a7:00:a8:c4:66:5b:87:fe:11:e7:04:
45:93:56:3f:84:88:89:ef:12:1d:56:0f:81:3e:90:5b:01:48:
30:27:04:08:d0:0a:1e:71:1e:a2:d7:f9:1f:9c:21:a5:4d:92:
3d:db:99:4a:30:8e:a2:36:63:b9:05:b0:bc:6d:bd:0c:4a:7e:
14:4f:c7:ef:db:2e:ed:67:3f:91:2c:c6:dc:28:7b:91:ac:46:
66:44:e4:6e:74:c7:01:f7:eb:52:fa:d9:d1:df:c9:49:0b:c0:
57:ff:f2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:46:16 2024 by rpki-client on console-fra.rpki-client.org