Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: zecS//sfGu9QaLdyjGGEjDwaa2cfm+zr0ZILVFZn29A=
Subject key identifier: 80:76:FA:AF:43:DF:4A:4C:DB:B0:84:07:BD:E1:29:7B:38:2E:A4:F8
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 01935878F63E391F33EBB8CDD4E5F68CB6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 0E35
Signing time: Sat 23 Nov 2024 10:02:22 +0000
Manifest this update: Sat 23 Nov 2024 10:02:22 +0000
Manifest next update: Sun 24 Nov 2024 10:02:22 +0000
Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: 52DjtKVDj86rXIspaq4wiHOhQSIJqAAWAJWHlkG8/bc=)
2: s5xSuo41HmXaY13utZ6xtQpAByQ.roa (hash: Yiglqk2VjuwrYYOgfDsylfaInaXRal46WX4Dmkuk7qo=)
3: wj_QXGWq_lXr1By96wqLZpW6PBY.roa (hash: 6t01aC1HTsseKcS+wzNPk964hJx/ReoYdqJsbqkOssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:f6:3e:39:1f:33:eb:b8:cd:d4:e5:f6:8c:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Nov 23 10:02:22 2024 GMT
Not After : Nov 24 10:02:22 2024 GMT
Subject: CN=8076faaf43df4a4cdbb08407bde1297b382ea4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:45:41:2c:8b:b0:3b:4b:fc:82:b6:eb:41:
e3:6a:25:c1:99:8c:85:db:1f:25:c9:7a:61:8a:4a:
3f:55:81:65:10:d1:58:70:0b:7b:96:fb:c5:42:14:
dc:b4:2a:ca:57:38:b9:23:21:ad:3c:5a:4b:28:15:
3c:94:52:5b:ff:fb:45:0b:0f:8e:1d:11:0b:a0:d6:
06:07:54:11:4d:a8:f7:01:b7:f3:96:5d:2c:87:d6:
71:e4:8d:5c:52:06:2d:21:48:28:62:51:93:2f:b0:
d9:23:c0:36:bd:29:30:d2:f9:9b:cc:35:e6:00:82:
32:af:b2:36:72:ff:a9:8c:d5:68:6a:59:31:3f:be:
3a:9e:de:f6:42:c9:64:5b:f0:af:40:54:54:ba:b6:
43:8a:0b:a0:01:a7:c7:8f:39:f8:ac:3f:2e:85:ef:
d1:dc:f2:fa:3c:a9:2a:10:04:55:df:b7:82:a4:f7:
cf:03:9e:2c:2b:a5:af:ea:64:63:34:d1:91:ff:06:
78:a2:26:96:cd:54:69:d5:0e:25:f4:69:16:13:15:
d0:6a:3b:10:95:89:cd:b8:f5:17:b5:7c:33:d6:b6:
6d:6d:6c:62:b3:cd:83:93:49:92:05:1b:91:ea:fb:
ca:0c:01:04:dc:24:92:c9:2f:b3:ef:e2:18:12:e4:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:76:FA:AF:43:DF:4A:4C:DB:B0:84:07:BD:E1:29:7B:38:2E:A4:F8
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ae:b6:2e:39:4b:b9:5e:ac:e3:29:3f:09:b1:a2:c4:f0:04:
a8:39:d9:ad:ef:6f:8f:54:3d:dc:ad:aa:de:ff:e7:0a:a8:d1:
15:8f:b1:fb:03:af:58:c3:be:02:76:8a:b4:20:9d:74:0d:e1:
8d:17:2d:20:2e:93:35:6d:73:c9:86:6c:0e:43:7f:13:66:6f:
21:70:c7:58:ac:6a:c0:a1:45:71:2d:d6:37:d2:51:ff:f1:49:
25:39:e7:d7:28:bc:bf:8d:6b:bb:00:d7:ec:4b:57:49:ba:8e:
56:54:4c:e2:fe:61:d2:e6:48:9c:f5:45:d0:a1:bd:85:b8:a1:
97:1a:81:75:88:77:a2:95:43:ea:83:b4:28:65:0e:4c:ad:35:
2c:f4:91:d0:0c:04:ae:2e:3e:be:5b:af:3a:db:f3:06:37:7d:
75:21:5d:45:42:99:c3:28:ad:96:4c:3c:c3:b4:7b:d8:c1:03:
d0:c8:bc:22:80:9c:b7:84:ff:85:33:85:80:fd:cf:5d:ab:69:
7e:ad:d7:cf:dd:57:0e:c5:4f:b7:7f:13:83:79:eb:0e:ac:d2:
c2:8c:e9:ae:61:d3:50:b0:d5:09:43:d0:a1:f4:79:2a:ec:c6:
93:6b:2d:31:42:cb:ca:d1:40:e6:91:8b:03:f9:a1:88:58:27:
6b:51:1c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:20:47 2024 by rpki-client on console-fra.rpki-client.org