Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File: po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier: K29YqVEaNAbZk8jIvHM/OpJv0BAB67/1rGyqULlrhek=
Subject key identifier: 44:67:01:9B:51:EB:1A:D2:C4:0D:00:F4:36:40:91:2D:5D:51:D0:09
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer: /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial: 019352AC623E83E124B2C8B1475CEF1462F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 07:00:49 +0000
Manifest this update: Fri 22 Nov 2024 07:00:49 +0000
Manifest next update: Sat 23 Nov 2024 07:00:49 +0000
Files and hashes: 1: QLfJn-FiXZ5EKMAJOaZHJ2yNKD0.roa (hash: 75m8mYC5yUkgrNQhLaAJwF1W4PmotcogNRZG/kShYBM=)
2: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: MtzwiS6HYbxKEnG7VX9wPliLu7qayrsWkfJJAlEcG6E=)
3: r535_ZiVdnxwSrq9NwZ3PHSB0h8.roa (hash: Mu16izYWjSkv8WI9Wewop/41XvuqyE75M49pOIo0qlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:62:3e:83:e1:24:b2:c8:b1:47:5c:ef:14:62:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Validity
Not Before: Nov 22 07:00:49 2024 GMT
Not After : Nov 23 07:00:49 2024 GMT
Subject: CN=4467019b51eb1ad2c40d00f43640912d5d51d009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:f5:b8:9f:67:70:08:8a:1e:65:06:a1:0a:
e3:53:59:7c:67:32:5d:b1:8e:88:15:2c:88:26:2d:
ee:41:a9:4d:a4:38:98:af:92:cf:b9:80:aa:81:2c:
65:5c:09:10:14:27:6c:48:0a:67:fa:a5:43:f6:a7:
86:43:e4:c1:d1:df:c2:3e:fb:8a:60:cb:61:3c:3b:
c9:e1:db:b2:0a:b3:d1:ee:fc:a1:fb:66:2b:62:4b:
07:ab:d7:af:4e:4d:6d:5f:23:6b:58:10:e4:c6:19:
61:9b:6f:f8:16:55:28:93:09:d9:dd:3e:6f:67:35:
f9:d1:7e:33:07:3b:5f:c8:03:61:20:21:25:53:c4:
e8:18:33:5c:93:d3:b3:a8:1c:1e:0d:86:80:90:a3:
a4:53:15:52:5b:a5:48:98:15:fd:75:12:aa:2b:34:
87:a4:6c:41:6c:39:24:79:16:57:8a:f4:98:5c:01:
9e:50:ee:79:50:33:a7:90:5b:9a:f0:ad:66:a0:2c:
e8:ca:c6:7c:de:21:0f:e7:48:6a:f2:58:ac:60:f4:
39:c2:ae:d7:ad:1c:9e:ea:0d:27:2d:dc:78:29:ba:
86:29:bc:4a:83:ce:37:a2:9d:4b:49:ec:b3:98:1e:
7f:9e:d0:3a:fa:3a:bc:97:c3:d5:bc:34:b8:03:87:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:67:01:9B:51:EB:1A:D2:C4:0D:00:F4:36:40:91:2D:5D:51:D0:09
X509v3 Authority Key Identifier:
keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:09:cb:97:b9:03:86:6a:aa:07:ca:5f:18:cd:62:fa:f8:82:
35:01:c5:96:cd:08:61:b6:ba:b5:6c:8a:c0:98:62:6e:8e:dc:
7f:ca:81:b0:f7:ab:1b:b4:7c:f4:43:e6:c8:3d:8c:32:8a:fc:
e7:05:d3:e2:46:f9:9a:04:b4:29:f0:af:2b:e9:52:a7:da:2f:
18:ec:6f:f1:53:5c:9f:7b:93:18:ea:f5:0e:8b:40:1e:c1:34:
c0:a7:4f:53:19:77:9c:4d:93:1b:5a:f4:78:f2:aa:ba:b4:aa:
79:bb:6a:a0:80:98:ed:50:3c:d7:b4:c6:9c:7d:1c:56:c3:db:
a8:f6:fe:1d:62:1a:d7:15:ef:12:eb:44:4b:19:dd:81:61:39:
01:76:05:01:6c:1b:62:7c:3d:a3:e2:8a:03:20:ec:30:11:e7:
de:ef:f8:64:ce:ee:c6:d8:76:c4:85:5b:ff:7a:de:96:66:0f:
6c:67:92:f3:99:ed:33:3f:f3:c5:29:8c:30:7c:c8:52:2e:df:
6a:64:72:4e:4a:e3:0b:88:f6:37:44:2f:38:e1:55:02:ec:a5:
a2:b0:31:e1:7f:d2:a2:44:35:dc:09:22:c6:10:82:16:d0:db:
90:03:55:1c:69:d2:45:b9:45:12:24:db:15:28:92:fd:69:91:
7b:b6:1c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:21:25 2024 by rpki-client on console-fra.rpki-client.org