Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: VS9XeoAOv4K+Go229dwFNbiKutY66PRw4W44Dmk9yn8=
Subject key identifier: 74:28:AB:B5:C4:FD:FC:66:DF:58:71:0B:2C:EF:D5:0D:38:18:BC:FE
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 0193579BF008D11929B3BF82090A7F1009A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 06:00:57 +0000
Manifest this update: Sat 23 Nov 2024 06:00:57 +0000
Manifest next update: Sun 24 Nov 2024 06:00:57 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: /8yNglKTeetOzXsvT3uko3/aXgwD5KZypGK8oCETCS8=)
2: k5xySaepVT3GEpo0o3iaOYQX_pE.roa (hash: gmLnTIPP8y780HxrFgXCaN2P9+AUpwk3VPhBCbx23xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:f0:08:d1:19:29:b3:bf:82:09:0a:7f:10:09:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Nov 23 06:00:57 2024 GMT
Not After : Nov 24 06:00:57 2024 GMT
Subject: CN=7428abb5c4fdfc66df58710b2cefd50d3818bcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:29:17:65:73:fb:dd:40:df:91:1b:5f:f2:
96:d6:41:86:ff:44:22:1e:46:c9:5c:a7:f9:39:99:
e8:a3:8c:a9:62:65:78:2f:20:54:5d:4c:3c:7c:4c:
2f:9f:f8:43:65:41:4e:70:27:e1:56:a4:79:08:42:
f2:fb:3c:b7:a4:76:79:b7:87:63:4e:8d:ab:7d:e6:
29:95:e5:8a:d1:b7:26:9d:3c:c2:4c:ff:36:ab:16:
b4:32:ed:c4:80:72:a3:83:6f:10:19:79:b7:c9:8f:
20:70:93:6f:b7:e8:3b:c9:a5:6c:87:e8:8d:dd:6e:
1d:41:99:23:33:c2:1a:4e:b6:17:89:ad:7c:9f:88:
ad:f1:95:12:fc:8d:6a:83:d7:66:b2:11:9c:68:7a:
d6:e2:f1:24:e4:e9:52:bf:92:34:2d:c5:1c:d9:a7:
1d:41:79:0a:6d:ca:76:4b:b6:de:e3:9a:e6:ea:8f:
ab:d3:77:4e:2d:83:94:84:e6:f3:cc:14:8a:6b:cf:
2d:53:55:7e:41:1a:7e:e8:1b:7c:15:1f:33:d7:7c:
14:fb:13:22:df:d7:45:a9:22:17:d8:27:78:bf:b0:
79:c4:9c:c4:6a:60:8f:e1:4d:dc:f7:2d:43:75:de:
72:60:6f:8c:15:4d:4a:ac:5d:56:8b:f9:a8:d6:d0:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:28:AB:B5:C4:FD:FC:66:DF:58:71:0B:2C:EF:D5:0D:38:18:BC:FE
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:99:f8:72:1f:d1:b3:98:c1:07:6a:48:b9:e6:51:5d:17:29:
bd:87:79:16:fe:dc:4a:f1:76:c5:47:fa:87:be:68:c7:65:c8:
54:cb:95:da:b9:b5:f8:7f:7e:55:2d:33:01:f1:37:c7:9e:d3:
44:e5:bb:b9:d7:99:e4:6e:81:1f:48:0b:2e:88:2b:91:3c:4a:
2b:65:56:c7:11:0d:27:33:03:12:83:02:96:93:c0:fa:16:e4:
8e:e4:f4:dc:9a:2b:75:e4:00:35:23:97:27:0c:37:bf:b9:3b:
68:e8:e4:b3:53:79:4d:b1:ed:f3:ef:89:b3:da:ff:c0:d9:bd:
3a:de:c8:f6:98:24:16:f8:a4:8a:01:9e:b6:f2:87:f2:d5:8e:
44:00:81:0e:53:8a:c1:05:45:55:5a:8d:7c:97:f5:8f:01:f0:
a8:cf:09:2b:48:f2:0f:8b:bc:7e:92:12:f2:a9:ba:f4:b4:a9:
81:da:99:3d:38:72:20:34:09:38:31:a6:ee:79:70:01:1d:55:
3c:db:7f:c0:ec:0a:49:79:0a:8e:73:aa:21:fc:04:70:b0:90:
32:75:28:e2:67:3e:0c:c4:3c:b5:cd:0c:38:ad:19:8e:d7:96:
4c:13:16:e5:fb:36:fa:92:fc:ba:4a:1f:7c:a0:50:89:1b:56:
ef:fd:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:16 2024 by rpki-client on console-ams.rpki-client.org