Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier: DmVrVLvn71xF0lzRKr4xTCKqnuYX1NN9R5zwgRcGh+g=
Subject key identifier: B3:A9:77:FE:07:E6:C2:AD:3E:25:7E:3E:1C:4F:7E:38:DC:B0:E6:AD
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial: 019352AC50AB38A9D4F3C9FAC468B0F26017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number: 1374
Signing time: Fri 22 Nov 2024 07:00:44 +0000
Manifest this update: Fri 22 Nov 2024 07:00:44 +0000
Manifest next update: Sat 23 Nov 2024 07:00:44 +0000
Files and hashes: 1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: xC4nxec+t9jLpGYHJJChYGy89kaljxbdSFGsUdmqKmI=)
2: g5gob-GT4Scoc9jXH4CLk2xcBig.roa (hash: Y38G95r9ReVTpQMPh3dZTCJje64crraX1WflluZVSyg=)
3: tAOU5FJpvXMrEJZ20LWy3cwOMgU.roa (hash: C8eawnSxOB9exaVY219CP+3wN1SbC4Mdovd8Wt4cvtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:50:ab:38:a9:d4:f3:c9:fa:c4:68:b0:f2:60:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
Validity
Not Before: Nov 22 07:00:44 2024 GMT
Not After : Nov 23 07:00:44 2024 GMT
Subject: CN=b3a977fe07e6c2ad3e257e3e1c4f7e38dcb0e6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:3f:50:0e:00:0e:c1:b6:42:f5:0d:f2:5e:
8a:8f:3c:c4:f5:92:20:30:ef:e3:36:a5:bb:72:b6:
36:e2:9a:0a:04:69:37:f1:33:e1:f5:e9:44:bd:9b:
50:88:22:4e:6b:a3:d7:3d:3f:a9:ca:00:50:4a:0b:
72:f2:30:7f:34:a2:80:41:88:4f:c4:d6:49:56:f9:
40:82:98:84:7c:bf:2c:e8:c7:21:01:c6:b7:ba:99:
1d:93:60:26:37:85:03:b2:25:ab:8c:a0:85:a9:05:
d0:c5:7d:21:cb:f7:11:ad:86:22:a7:af:34:bb:e0:
7b:db:c5:c1:ef:ee:51:4c:a8:8f:07:b7:f7:ee:92:
4e:79:6d:4e:cc:1a:34:01:2d:e4:1e:15:e9:03:85:
35:84:46:35:f9:a6:c8:10:52:b0:1d:51:2a:76:79:
72:dc:4f:4f:34:07:9d:b8:d3:d9:81:f3:09:72:66:
eb:fc:38:25:48:8b:bc:e4:88:23:70:80:a8:7b:2e:
de:b1:45:8f:45:5b:80:f3:74:99:66:ad:37:69:f4:
28:f6:29:93:d2:03:22:5f:d7:10:d3:23:df:c0:3e:
c0:5e:8f:7a:37:8c:0e:7e:a3:b5:ae:45:f8:21:e4:
74:f1:82:6c:51:bc:62:b1:a2:23:83:81:da:7b:67:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A9:77:FE:07:E6:C2:AD:3E:25:7E:3E:1C:4F:7E:38:DC:B0:E6:AD
X509v3 Authority Key Identifier:
keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e7:33:66:87:5a:5a:ac:b4:57:04:62:4e:8e:31:b7:00:4c:
f5:4a:2d:21:a6:1e:98:45:9a:3d:fc:83:64:6d:ab:15:56:1c:
aa:2e:62:de:24:e0:6f:59:a9:04:2d:51:f2:36:e0:85:09:bf:
8f:18:ad:da:06:33:58:ef:3a:96:f5:ba:79:f1:86:e4:35:57:
1a:25:bc:e8:3d:f1:c2:4c:6b:1b:33:4f:28:d4:c7:29:d2:d4:
0d:bb:03:e4:2d:f8:43:ee:a8:c3:3e:92:69:c4:cc:25:e0:1f:
32:be:3d:70:4d:05:28:59:97:da:f7:14:e6:08:02:db:e1:d4:
23:11:4c:ae:d9:3a:69:02:c1:a7:d7:bb:33:1b:d5:84:ff:8a:
95:08:bd:6d:10:cd:d6:bd:e4:2d:6e:92:ff:21:bc:36:f2:f7:
6e:2e:d4:13:c1:29:65:5f:de:c3:dd:39:1d:69:01:b6:a1:a8:
ef:bf:88:95:6e:85:ad:16:fd:7a:ac:55:29:ae:f0:38:0d:f5:
e2:ec:19:3c:c0:6a:a5:8c:45:93:04:dd:ec:bc:6d:fd:a2:bf:
d8:e7:ba:52:53:a5:f6:cf:59:3f:37:a0:6d:93:22:ae:ae:6a:
c3:8d:87:1f:64:80:4c:d8:b8:d9:fc:0a:db:e3:7a:77:a5:a3:
39:82:0e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:21:34 2024 by rpki-client on console-fra.rpki-client.org