Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: gYPfbskPK05Fpes1Q/yBA3xrpJuxWs8DKUQiBPeU560=
Subject key identifier: A3:28:0D:66:F4:C5:03:DC:6A:6A:67:77:E0:45:33:CF:B3:E5:61:BD
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 01936BC9698AD6AF8F9A429C3AD27DCA839E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 124D
Signing time: Wed 27 Nov 2024 04:03:02 +0000
Manifest this update: Wed 27 Nov 2024 04:03:02 +0000
Manifest next update: Thu 28 Nov 2024 04:03:02 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: zbhqcUymLDYrhl3Lu5kY6SasAOnx7CXOD3Ue8RrzYCE=)
2: O_e41DfXLM8jw6ki6l91Lh5aEjQ.roa (hash: Ylv5msPxDQm7kXVVs64nW8tOpW3Hk+8uSgx1CohB8aw=)
3: i3TjIYokjvGX0x6ta88QFWB1IJ4.roa (hash: KlCSUGoWUxV4ONqBuuQQ+5jrCCfgbAXaWKYsOHmBVoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:c9:69:8a:d6:af:8f:9a:42:9c:3a:d2:7d:ca:83:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Nov 27 04:03:02 2024 GMT
Not After : Nov 28 04:03:02 2024 GMT
Subject: CN=a3280d66f4c503dc6a6a6777e04533cfb3e561bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:82:4b:c5:9f:b9:4a:e9:f2:4c:25:bd:b4:
62:fd:be:e3:41:ba:fa:44:cf:24:35:b9:e4:af:8c:
43:17:0a:76:11:3f:31:db:97:6e:60:6f:80:8c:f3:
83:86:08:34:1e:65:ed:77:ee:09:cd:4c:91:a0:46:
54:88:ac:f9:cb:06:56:57:18:dc:b3:f4:ee:da:7a:
32:5d:a0:bf:f1:9a:65:fe:ef:bd:de:1a:d4:c6:d5:
76:e8:73:51:8c:12:d3:74:2b:db:fe:27:8d:f9:09:
af:dd:a9:88:f1:5f:9f:62:61:34:d5:26:9d:d8:3f:
f3:fc:be:e6:fa:a7:5c:76:11:da:47:d9:a6:6c:48:
f9:ae:0b:1e:6f:39:b8:91:4c:28:b5:d3:5f:7d:de:
d7:79:c5:2d:b5:a1:85:d3:3f:1e:8a:f7:cc:ea:67:
a4:95:b8:95:3f:f7:d7:76:33:07:4a:ab:a8:2f:ef:
69:15:9d:3e:ab:0e:50:d3:77:20:7f:7b:20:1b:2a:
c7:2f:52:e8:df:cf:40:39:1c:c4:8d:8b:8e:b0:cd:
4a:9d:66:f1:7e:75:c3:62:e4:e4:ea:79:b9:54:29:
f7:b2:eb:11:c3:a8:00:1d:7d:9f:74:15:7f:b9:89:
70:41:a6:29:29:36:d1:8e:39:ba:bd:c8:96:be:6c:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:28:0D:66:F4:C5:03:DC:6A:6A:67:77:E0:45:33:CF:B3:E5:61:BD
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:55:a0:3c:c5:a3:1f:96:7f:14:52:f7:e6:21:59:50:31:4d:
b8:ea:72:c6:a8:c7:fb:bf:e0:d6:ac:56:24:66:65:4f:5a:8a:
e2:fa:87:e3:ef:c6:36:49:68:b4:06:4d:f4:10:f7:78:be:7a:
8f:a9:b9:15:b3:8d:ed:e9:36:92:a4:9e:27:e9:7d:57:f4:7b:
0e:a7:06:80:79:68:48:e3:a0:82:49:ab:eb:5a:c0:8f:57:0a:
38:96:10:c2:19:10:ed:3b:62:04:4e:a3:ea:df:0b:ca:34:c4:
71:71:54:92:fc:98:26:8e:f7:37:30:0d:4a:c8:5f:e5:b9:9d:
a6:d2:b4:1b:ab:0d:d1:45:c0:95:c0:4c:1e:4c:50:e9:45:af:
76:39:76:5d:c4:3d:b7:30:5e:bf:d1:f6:f0:58:bc:d8:a8:f5:
93:d5:a3:33:c9:91:a8:5e:87:8e:a9:77:de:cd:ba:e3:71:fb:
99:aa:31:84:28:61:17:47:14:6e:9a:a8:85:b3:40:e2:0a:5c:
57:e9:fc:a3:3c:d7:f9:36:43:45:b8:8b:bc:d8:af:79:1c:cb:
db:8b:d5:9c:e1:53:fc:9e:22:2d:ac:98:ce:1b:d0:fc:dd:14:
df:8d:4a:34:a8:27:47:c0:69:d9:aa:f4:6a:47:34:1c:30:50:
d8:01:c1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:05:38 2024 by rpki-client on console-fra.rpki-client.org