Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: YQauqLUa9qFqK5AZhDsx47mPzR7KFtqrd78eLc7AFJo=
Subject key identifier: 2F:39:D6:89:86:FC:FD:6E:5F:A6:25:0E:F9:BA:4F:A2:42:7A:03:07
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 019352AC0941B5EF87E3C648B7DC1EDFEC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 07:00:26 +0000
Manifest this update: Fri 22 Nov 2024 07:00:26 +0000
Manifest next update: Sat 23 Nov 2024 07:00:26 +0000
Files and hashes: 1: mxJMyiIAkC_3hJgiUt4NWhajtZk.roa (hash: iRsQUOw1dfNkXkguNsLcICe3PhGTtp2119LsKxqCm9A=)
2: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: buHZOqusNHEYoP5RIro98JuWDdLFVX2McPcYGN46cQQ=)
3: qwsyEaNMjcz8YmlkY5ldCSOix9g.roa (hash: +O9G9pgG5yJmzlke6ioyUm8dNmN/TDh6WqxpGFZE4vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:09:41:b5:ef:87:e3:c6:48:b7:dc:1e:df:ec:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Nov 22 07:00:26 2024 GMT
Not After : Nov 23 07:00:26 2024 GMT
Subject: CN=2f39d68986fcfd6e5fa6250ef9ba4fa2427a0307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:93:a6:4a:63:d3:43:d1:70:96:41:16:7c:
e6:1f:17:51:9f:76:6b:bf:8c:14:60:92:b0:20:9e:
8f:c5:db:6c:11:74:89:c3:b7:c5:73:34:21:ed:54:
26:9d:d3:3a:0b:ef:0e:24:0d:13:c8:f5:bb:2b:2f:
ef:f1:c6:d8:d7:09:b3:1f:ef:3b:ff:68:91:15:ca:
da:2c:d8:af:aa:6a:1c:26:32:94:a2:61:60:00:a5:
49:71:a0:03:43:43:e5:46:7b:cc:46:35:f9:b3:80:
c5:56:15:ab:55:b3:9f:14:b2:c5:84:40:d1:f8:45:
35:bc:7d:a9:12:fe:26:be:c2:48:90:d4:7b:94:0e:
6c:70:32:21:88:5e:e4:1b:3f:4f:1b:42:39:19:df:
f6:48:f1:36:13:46:be:e8:87:04:69:ac:9c:40:e0:
2c:39:24:f8:c2:be:c9:e0:38:98:7e:3b:8a:b5:47:
c5:ab:b2:56:f0:e5:a6:15:79:68:a6:03:9e:f0:8d:
57:e3:4d:f5:5b:4c:2f:b0:9a:77:40:2a:eb:d0:13:
cc:97:00:af:81:54:24:bc:9d:05:6f:59:5e:7e:c8:
a4:bc:c9:71:cb:03:f3:f9:b0:19:fa:27:f2:38:47:
66:53:55:89:c4:5a:30:31:d7:69:b7:fe:00:71:24:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:39:D6:89:86:FC:FD:6E:5F:A6:25:0E:F9:BA:4F:A2:42:7A:03:07
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:01:25:04:00:f6:f2:8d:ad:42:ad:17:f0:36:aa:6b:0a:
92:66:8d:2d:c0:c5:df:a8:ca:d2:a8:ce:11:da:2b:f1:65:13:
5f:ab:1f:37:05:c4:d5:ab:78:10:99:c6:50:a5:2a:4e:75:33:
e3:87:a5:a9:25:8b:d9:f9:af:47:d6:80:69:5c:fa:eb:4e:39:
96:48:2d:09:06:62:cf:0c:60:2c:cd:b7:9f:cc:bd:aa:16:a1:
af:0c:93:20:2f:90:06:8e:9c:ec:5a:86:5b:1a:1e:d1:7f:b4:
22:59:1a:5b:19:c5:ff:64:72:b7:86:10:5d:c9:3b:95:1d:76:
95:a2:cb:05:b0:c8:5f:e5:ef:7c:70:99:eb:24:fa:c8:4a:01:
91:75:2f:6e:31:5f:73:ef:bf:bb:26:e3:ec:02:b4:57:6e:f5:
f1:88:50:56:59:0e:2f:b2:bb:91:ca:12:c4:8c:de:13:fa:c7:
20:7c:a0:f9:01:65:61:89:34:4b:76:27:eb:12:73:f6:d6:df:
86:42:6d:dc:dd:d8:59:79:c3:fe:c2:b4:1a:86:f6:ed:0f:99:
d6:0f:9d:05:66:9e:eb:1e:43:ce:e8:73:d8:0f:dd:75:73:d7:
27:6f:29:43:e2:1a:54:2b:23:de:d5:31:ee:ca:de:c3:64:57:
ab:b1:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:59 2024 by rpki-client on console-ams.rpki-client.org