Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
File: lcriw3yGYw5hr9-JA_4XTei5Rb4.mft (raw, json)
Hash identifier: euvqHpCM8x0e00sBsbPMp60ffx0iODFb43s85mJcJf4=
Subject key identifier: AB:BE:9F:BB:A1:84:49:FB:E1:1E:3B:27:10:FF:02:E9:91:3B:95:61
Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be
Certificate serial: 01935877450FE877C77BC7DC087ECD9D878A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 10:00:31 +0000
Manifest this update: Sat 23 Nov 2024 10:00:31 +0000
Manifest next update: Sun 24 Nov 2024 10:00:31 +0000
Files and hashes: 1: NSR71S8trzHcjsobMkAm171NiKo.roa (hash: 2nxjeRLlqNyhwQS6Tg5gRd/NTHZq+rEg65Wl0fLJ7z4=)
2: _Hdhw1I1M7c7Cmdzeo_VOnZMMg8.roa (hash: lW5g4/r/1ojwAQNfoz9Vbp51ypxzOeUXrV+63E1+Pj4=)
3: lcriw3yGYw5hr9-JA_4XTei5Rb4.crl (hash: KJzoEkoYBGkH1R/GD50At1ART5VtUG5c9dV1YKI/ZDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:45:0f:e8:77:c7:7b:c7:dc:08:7e:cd:9d:87:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be
Validity
Not Before: Nov 23 10:00:31 2024 GMT
Not After : Nov 24 10:00:31 2024 GMT
Subject: CN=abbe9fbba18449fbe11e3b2710ff02e9913b9561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:83:b0:fa:b0:71:88:31:63:4d:9d:7a:1d:
db:b5:1e:c6:8c:0c:0e:99:bf:80:68:57:81:56:88:
5b:4f:20:97:58:82:fa:c1:25:4b:b4:0d:15:43:37:
0c:ef:e1:36:9e:bc:ab:63:30:14:43:da:2b:92:47:
82:2f:25:5b:99:e8:72:5c:78:f0:40:5b:64:9e:90:
fb:ae:96:e3:1c:58:a4:36:76:02:3a:e8:b2:30:fd:
07:95:78:a0:24:1e:8d:8d:ce:3d:d2:f9:db:2a:f6:
42:66:d9:38:5e:4d:10:c9:68:af:5e:5b:86:a4:a2:
53:0b:c9:36:19:85:c7:03:2f:51:1d:a2:1e:03:eb:
74:01:b9:fb:2f:74:13:64:69:1d:2b:a6:bc:67:d1:
8a:85:82:5e:62:be:45:17:a9:df:41:bd:77:55:b2:
02:82:08:a2:f4:d2:71:8c:a5:1e:b6:27:0a:48:69:
5c:e0:bd:bd:a1:66:75:21:8a:da:26:7c:17:16:47:
93:e6:fd:57:c7:a6:b5:26:e5:2a:f1:b5:5d:ba:3f:
6f:35:91:72:33:51:0e:e3:fe:34:b7:0f:d0:74:84:
32:cd:8b:62:64:0a:32:ff:45:19:b1:28:fd:3e:5b:
d5:c7:3d:c5:0a:ca:bc:42:2a:0e:a6:db:42:c9:0e:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BE:9F:BB:A1:84:49:FB:E1:1E:3B:27:10:FF:02:E9:91:3B:95:61
X509v3 Authority Key Identifier:
keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:57:1f:f6:b6:e6:a1:b6:6f:a2:fc:9b:43:c8:91:a2:9b:5e:
c8:18:af:d6:d2:8e:fd:ef:5c:2d:30:7e:06:bc:68:d6:c7:9a:
91:ea:f7:6c:9e:04:7b:fc:fa:f1:57:24:ea:83:e5:7f:29:7e:
fc:61:1c:59:49:b4:55:86:24:0a:06:32:e9:5e:c0:88:d1:5c:
6e:f9:ac:e8:34:84:8e:97:97:e8:6f:7e:a9:a6:68:f3:62:03:
11:7e:84:22:b5:4f:9c:7f:49:99:c2:73:88:88:f7:67:e9:8a:
4e:fb:0e:8d:bc:e0:71:42:67:d2:49:9c:42:2a:ca:1d:8f:ae:
ba:87:1b:bf:b9:53:6a:12:4c:6d:51:f5:82:c1:f5:8d:54:e2:
fb:52:0d:9d:09:53:72:18:fc:bc:ce:74:b1:e2:f7:2b:b4:5e:
46:30:51:96:66:cb:01:d7:dd:56:12:f0:51:55:e5:80:a6:94:
87:5f:2e:7c:61:59:df:b7:e8:8c:36:1b:6c:28:dd:8e:34:98:
fe:c4:a6:1e:0f:0f:08:a9:f8:45:f9:ac:ac:d1:8c:9d:d8:3c:
41:2d:64:3d:79:7a:70:b3:4c:f7:b1:73:20:b5:79:32:60:b1:
8f:a2:38:c7:cf:62:97:c4:3c:cd:c7:16:ed:28:79:bb:f5:f2:
a3:a2:c2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:39 2024 by rpki-client on console-fra.rpki-client.org