Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
File: L7goDGy32z4HOVDVNdbYxwXZC4c.mft (raw, json)
Hash identifier: E8kzcMuS2wMHr0qANVtHZlgn1E6DoHhLewMfC+vEGU4=
Subject key identifier: 0A:F4:67:BD:FA:52:21:A0:1B:D3:16:04:E6:99:80:BF:D6:57:04:2E
Authority key identifier: 2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
Certificate issuer: /CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Certificate serial: 0191F9A266A5FA8424D547A10187EF595EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
Manifest number: BC
Signing time: Mon 16 Sep 2024 07:00:55 +0000
Manifest this update: Mon 16 Sep 2024 07:00:55 +0000
Manifest next update: Tue 17 Sep 2024 07:00:55 +0000
Files and hashes: 1: 5pbhDWvXzmdxNrgkmY2rRlxxsHM.roa (hash: VT3QDkPFuDPAA7R9+pQL1f8dc/R9NHmOcpAp6TGcyeE=)
2: L7goDGy32z4HOVDVNdbYxwXZC4c.crl (hash: SjauYn9mZ/498OEYjbMrB+w/GQ34w3chbavIv1gIC/8=)
3: vMHATnzwQjutwctwwQWsq4wvPSw.roa (hash: E4ItVq6aAXrKYlmiZz2lvg0tkEDxuKzvGvuPach/Uq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:a2:66:a5:fa:84:24:d5:47:a1:01:87:ef:59:5e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb8280c6cb7db3e073950d535d6d8c705d90b87
Validity
Not Before: Sep 16 07:00:55 2024 GMT
Not After : Sep 17 07:00:55 2024 GMT
Subject: CN=0af467bdfa5221a01bd31604e69980bfd657042e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:f5:c9:e4:2d:56:01:8e:94:dc:c7:2c:a2:
7d:94:85:65:e7:62:65:d8:b8:d9:02:0e:18:ca:00:
e4:bf:da:b5:17:9d:26:3a:b3:3f:1a:7a:ae:0a:23:
95:9b:7f:66:7a:dc:ec:33:1f:85:0b:c3:e6:08:3b:
a7:0b:ac:f7:da:08:26:a3:bf:f6:7c:65:b3:5d:45:
d6:d4:32:01:26:c2:fa:d9:0b:f4:64:3f:7e:8e:ed:
85:1d:b9:2d:79:a8:48:46:32:03:a9:fd:ee:76:64:
9e:fb:a1:7e:88:62:95:c5:67:05:51:a7:c0:5c:88:
6b:0e:7e:27:fa:77:6c:4a:85:36:44:7d:c3:57:23:
e9:0e:3a:2b:1a:9e:5e:cc:0a:af:73:f6:25:28:8a:
ff:1d:08:18:c5:0b:a2:b2:34:5c:54:73:7d:22:a8:
73:e6:30:52:e0:9f:be:26:57:ed:7a:30:d5:1a:63:
aa:35:48:7b:7f:bf:69:55:b2:75:6a:b7:87:d1:77:
90:0c:5b:64:b6:ea:0b:4f:ff:8c:8a:c4:0c:44:f2:
ca:3d:01:e9:f9:fc:63:4b:6b:b3:b3:a0:8b:b1:06:
af:5d:5f:a0:f5:a8:c2:29:b2:4a:c1:48:42:4e:9c:
9a:fb:49:79:a7:0f:b3:8f:e3:ef:64:33:4a:db:15:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F4:67:BD:FA:52:21:A0:1B:D3:16:04:E6:99:80:BF:D6:57:04:2E
X509v3 Authority Key Identifier:
keyid:2F:B8:28:0C:6C:B7:DB:3E:07:39:50:D5:35:D6:D8:C7:05:D9:0B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7goDGy32z4HOVDVNdbYxwXZC4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aa764d-f5ac-4acf-b2bd-9fdb5c55ae50/1/L7goDGy32z4HOVDVNdbYxwXZC4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a0:52:31:5a:eb:18:80:45:34:93:8c:ba:7d:e0:5d:ff:b2:
c1:57:91:c6:85:a0:7e:54:82:57:e3:53:43:4e:1f:8e:8a:98:
0c:4a:cd:7d:32:9d:d8:54:48:85:ae:e3:17:3e:46:4c:82:d4:
9b:02:f6:07:59:10:eb:91:01:35:a2:3c:bc:31:82:7f:3f:fe:
87:76:d7:bc:66:1d:97:88:31:ea:a0:42:53:28:5a:6d:3e:80:
bd:b6:23:4e:e4:62:2c:9f:72:5c:1f:64:e4:ec:de:00:9d:f5:
45:dd:93:e7:ca:48:40:e8:0f:46:92:2f:45:44:7d:e7:2a:d0:
e7:7e:51:19:eb:a2:f1:4f:bb:1e:d6:49:d3:35:c6:c7:9e:a6:
a9:dd:31:23:fb:8d:5c:9d:e9:bc:2a:4c:f0:bf:5e:76:fa:38:
86:d0:65:0b:d1:4e:ee:c6:9a:20:23:40:9d:09:b0:39:e6:b8:
0f:84:f6:1c:18:14:77:80:d4:8e:12:8e:29:3b:96:0e:80:6c:
3b:2b:89:97:41:29:bd:30:ec:06:9a:25:91:17:8b:7e:39:f0:
bd:17:4c:fd:cf:28:8b:ae:bc:44:ff:15:84:04:d2:00:a3:19:
65:b1:85:ef:da:5d:b8:94:17:24:c8:fe:af:76:51:db:27:92:
c9:47:5c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:32:24 2024 by rpki-client on console-fra.rpki-client.org