Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: vIUQiUtDLmV0LRoCdKW7DqhuSfJOPsDFBSep4sQ38oI=
Subject key identifier: AE:29:52:C9:42:0C:BB:40:8D:86:FD:F9:3E:B9:FC:33:E3:1C:75:4D
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 0193531A6CFC1DBE898682D2ABC4651BBB71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 09:01:00 +0000
Manifest this update: Fri 22 Nov 2024 09:01:00 +0000
Manifest next update: Sat 23 Nov 2024 09:01:00 +0000
Files and hashes: 1: CAFpmW0uI01Js_guQ-mjLEpk5io.roa (hash: kKekuTByKIKBPU7q4nEIGluwd3HDybZkIil4DweoGDk=)
2: EbF0lyPE8kt-9kmU0Q2sC3Oidqo.roa (hash: A9aqCFcME5hLjJ+/snXlgtqlNzt/FiVcszUscGMTt50=)
3: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: uDnp8ocFqy38WBZjndjDi6JAVeS9EbU4+JatTdlVURk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:1a:6c:fc:1d:be:89:86:82:d2:ab:c4:65:1b:bb:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Nov 22 09:01:00 2024 GMT
Not After : Nov 23 09:01:00 2024 GMT
Subject: CN=ae2952c9420cbb408d86fdf93eb9fc33e31c754d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cc:a6:c3:4a:e7:67:bf:47:da:68:0d:cd:1b:
21:d9:e1:7b:49:77:d1:32:1e:fb:2d:0b:23:35:d0:
d0:5a:e7:ae:76:87:d9:af:48:1d:5a:eb:a8:b2:75:
34:73:d0:b0:66:3d:0f:94:b4:45:81:9b:72:64:49:
4a:4b:20:49:9f:e2:0c:71:74:1c:fe:58:46:5a:ae:
24:94:9d:d0:c5:3b:66:c4:54:7b:93:d3:85:cc:03:
48:a6:6d:95:ef:b6:68:ce:eb:05:49:79:61:93:52:
0e:e1:92:fa:20:de:48:08:d7:07:03:29:a3:b9:37:
82:e3:75:e3:90:de:5e:97:46:f9:ec:20:9b:b7:77:
19:8f:4d:f9:06:74:ab:9d:52:49:b1:4d:7b:70:dc:
60:03:95:61:3a:92:a4:a2:93:9e:50:a8:21:5b:2e:
cc:91:c6:4b:1b:9a:f2:85:f5:f9:90:0e:20:02:27:
32:c2:93:10:e9:b2:64:ae:ec:aa:01:a2:3f:64:b8:
a7:42:ae:b3:15:85:57:01:87:74:5f:56:3d:a6:22:
05:d5:bc:e6:f2:48:fa:2a:fb:e7:05:5d:36:43:87:
37:d9:5e:4a:8a:72:a3:fa:fd:4e:b2:97:e2:bd:25:
e6:0e:6c:ba:73:4f:fb:9f:1d:d1:76:28:b0:01:b1:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:29:52:C9:42:0C:BB:40:8D:86:FD:F9:3E:B9:FC:33:E3:1C:75:4D
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c6:38:33:0c:a4:35:09:db:53:2e:c2:a3:6d:07:18:6f:35:
c5:78:ce:bc:56:78:59:b2:0c:de:f3:1e:90:03:72:12:b3:0d:
fe:24:3c:e4:46:af:d5:ed:87:b8:aa:9c:ca:dd:d3:cf:b5:93:
24:cb:bf:0e:53:53:91:95:5d:0f:5d:10:04:ef:93:8c:d2:f5:
a5:4b:ec:f7:8e:70:c2:38:41:14:f0:04:20:24:45:a7:3e:63:
6c:f1:3d:a3:d2:cc:74:ad:92:6b:35:68:42:59:7c:e8:7d:d3:
a8:86:3f:48:f5:40:23:77:3a:14:50:d5:6f:34:e4:e1:e7:88:
02:4a:38:2f:4f:1c:cb:a4:56:53:66:4c:2d:70:6d:ac:51:f4:
8f:66:b3:9f:4d:66:d4:ce:5a:ab:6c:4a:d3:b0:ef:d3:9f:66:
26:3d:4c:8f:62:7b:6b:a5:ad:df:bd:0e:6c:b0:a2:2f:22:30:
25:b6:c2:ce:c8:0f:6e:2d:d8:44:18:c6:d0:a7:f4:15:f7:44:
0c:d8:2e:96:e0:36:b9:01:d3:6e:5f:11:ed:1c:5e:cd:d5:77:
a9:6e:d2:c9:96:2f:6c:83:ca:f3:1d:c0:d0:ab:c8:51:da:79:
96:78:4a:74:1e:fe:9e:cf:3e:94:98:5b:9f:59:1b:47:6f:69:
35:88:9f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:01:25 2024 by rpki-client on console-ams.rpki-client.org