Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: MpHbhGppDm1MpE07ze4X9if8MSP7iTTuSUjPCTvNNtA=
Subject key identifier: 95:E4:53:4B:BA:FC:1B:CB:09:8D:FA:A2:31:96:67:32:90:0B:3D:C5
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019357D25DF2F25555C4323679D9F53AAA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 07:00:24 +0000
Manifest this update: Sat 23 Nov 2024 07:00:24 +0000
Manifest next update: Sun 24 Nov 2024 07:00:24 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: hZfovrsq+iMFhY0/IZSAjFTqby+aE+/uRXYfXCfUj78=)
2: w10xzkEPQsU6_uOc2iQ02ZhuxnI.roa (hash: QPhIhI9ICKv1SzZDtlXfM195k+zcajHp43/srumlwxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:5d:f2:f2:55:55:c4:32:36:79:d9:f5:3a:aa:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Nov 23 07:00:24 2024 GMT
Not After : Nov 24 07:00:24 2024 GMT
Subject: CN=95e4534bbafc1bcb098dfaa231966732900b3dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:0c:a1:d6:ea:7e:c6:f6:a6:8d:56:a8:86:
8b:4b:1f:6d:1b:eb:8a:56:be:d5:6a:5a:5f:4b:4b:
75:40:86:5b:c8:ce:9a:3b:a6:07:b5:8b:2b:80:a2:
01:25:2e:fc:f3:a4:e1:de:a0:9d:d1:01:35:77:47:
02:3d:fe:63:cc:ab:e4:ca:21:d5:00:56:db:15:4c:
78:b6:eb:ec:d3:72:07:83:da:7a:fd:24:b3:72:6f:
73:c5:de:b9:a0:65:3a:8e:11:4e:f5:df:cc:de:e0:
07:b5:3f:cb:74:f6:1b:b3:b7:d6:a3:40:49:96:f4:
5b:72:9c:11:dd:97:c2:d8:90:ab:12:00:4c:8c:7e:
1a:0e:60:27:31:77:9d:d2:68:be:73:fb:0d:63:bd:
45:e1:11:be:eb:7f:92:c4:53:c0:91:df:48:39:39:
7d:11:b2:b4:63:10:8d:80:a0:55:da:83:21:b8:f3:
fa:16:f6:2d:ac:38:3c:db:46:30:df:74:10:60:ec:
53:f9:76:4e:88:8d:de:ca:18:cd:aa:34:2d:79:1a:
fc:f2:19:1d:64:e6:37:25:6c:d9:79:6a:95:57:03:
56:bd:51:38:ad:87:a5:cf:78:3e:f1:57:37:d2:3f:
9d:bb:4a:0a:d6:17:28:05:73:8a:2a:96:49:57:86:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E4:53:4B:BA:FC:1B:CB:09:8D:FA:A2:31:96:67:32:90:0B:3D:C5
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a4:12:c3:c1:74:39:71:0f:4b:8a:8f:6d:e0:82:ed:c4:75:
40:2f:84:52:37:d5:ef:88:b0:c2:12:d4:d0:23:ee:f9:60:70:
b8:60:6d:3e:79:38:46:0b:38:0a:43:d5:d8:e8:f6:64:91:bd:
af:dc:17:84:eb:b4:f6:f4:05:00:c8:05:67:9e:9b:2d:4b:86:
00:6d:96:25:af:ef:ca:ed:22:0c:e3:77:97:ad:df:0f:78:cf:
7b:8c:5f:64:83:5a:a6:91:dc:5b:5e:40:5a:2f:62:d4:b7:34:
a7:54:48:1b:7d:96:ea:65:2c:33:78:a2:58:1f:0f:48:90:2d:
d0:84:5d:8a:b2:27:42:61:56:4c:b1:b4:66:58:d8:70:2c:92:
82:88:03:17:ff:6d:42:58:31:41:b6:dd:08:5e:46:51:4e:18:
4f:a3:7c:8d:07:59:28:1f:e8:9f:fd:6a:3c:67:bd:ef:4a:36:
9a:8a:41:7b:e1:e2:40:15:17:a5:e4:d0:af:a0:08:71:03:bb:
96:60:ca:bd:b7:56:4f:fa:6d:f0:fe:a3:a6:91:12:f2:67:1f:
27:80:fd:e2:86:60:fc:27:60:61:5a:b8:3c:cc:12:25:e7:9a:
4a:20:5a:90:aa:7d:e1:0c:4a:26:9a:37:30:76:d0:7e:c6:5f:
97:41:0f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:20 2024 by rpki-client on console-fra.rpki-client.org