Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft
File: kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft (raw, json)
Hash identifier: 7z1TMpZTGZQeE3h/Ndnmkktyzxim7R3vhJYDPGAZwTU=
Subject key identifier: 34:67:FB:26:DA:46:95:13:4F:38:0A:1D:9C:78:0F:4C:83:7A:1A:6F
Authority key identifier: 90:6D:4F:BF:6D:DC:6F:5C:B7:45:A6:8C:C6:81:8A:94:2E:AE:E2:0E
Certificate issuer: /CN=906d4fbf6ddc6f5cb745a68cc6818a942eaee20e
Certificate serial: 019350BE3D6D2349F3452D0553816B784E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kG1Pv23cb1y3RaaMxoGKlC6u4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft
Manifest number: 0786
Signing time: Thu 21 Nov 2024 22:01:05 +0000
Manifest this update: Thu 21 Nov 2024 22:01:05 +0000
Manifest next update: Fri 22 Nov 2024 22:01:05 +0000
Files and hashes: 1: RF9QRv_nthb6879WFhGPsdQ9MmI.roa (hash: GCFhg+T7Rw3ZTCDXjmbchktvqH5/hdoMYfM1UAi+19o=)
2: cpUzrFftGrfPIn9ahbAU4PTZMeo.roa (hash: 9n55AsvD5FA6Z1UN5fmc/o54vvWCfnS/crH5y8Y8X5Q=)
3: eIHZIm2NQhGi6jjKdapLXAB8-hA.roa (hash: Y4q1lYuGbB+acMdi5WiqB8wpAZTT48XyS8csgL6j/1o=)
4: kG1Pv23cb1y3RaaMxoGKlC6u4g4.crl (hash: +8Igy1P3o899hXedRhLtnGoeHLOi0fWHPCcqPDp0wcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kG1Pv23cb1y3RaaMxoGKlC6u4g4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:be:3d:6d:23:49:f3:45:2d:05:53:81:6b:78:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906d4fbf6ddc6f5cb745a68cc6818a942eaee20e
Validity
Not Before: Nov 21 22:01:05 2024 GMT
Not After : Nov 22 22:01:05 2024 GMT
Subject: CN=3467fb26da4695134f380a1d9c780f4c837a1a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:ca:68:c2:4a:b7:a1:45:c4:e4:97:a5:7b:
b1:62:ba:e5:30:98:e3:82:ca:ea:b7:20:6c:13:09:
8a:49:2a:73:a3:46:e0:04:f8:93:28:9d:20:bb:fc:
3c:9f:2b:82:c6:7c:0b:3d:71:e2:b6:fb:33:14:8f:
3d:77:f5:04:eb:9d:a4:c1:12:c1:e3:1c:e8:c0:d2:
5d:00:38:a6:16:4b:cd:fd:6d:a4:85:29:3d:00:39:
fe:10:96:d1:2e:df:26:c9:28:f2:91:07:69:ce:c8:
f3:94:25:f3:9f:7f:0f:50:80:37:7e:bc:44:6d:0d:
50:02:81:88:9c:24:24:d7:3e:7a:15:74:7d:98:36:
05:c5:ea:e7:0d:80:2c:93:73:85:4a:75:7b:11:35:
37:76:a9:8c:b1:72:c1:a8:ea:e2:8f:10:0b:31:bf:
57:bb:e3:ee:e1:c4:56:ba:35:db:5d:b3:a0:90:c9:
5e:81:a1:12:d5:e8:e3:0d:52:96:19:c7:78:d3:f2:
ba:63:b6:61:58:93:d6:ac:8e:5f:2a:68:e8:b2:92:
e8:b8:17:9e:77:4a:13:7f:8e:f1:2b:2c:dd:9d:7c:
b2:73:5c:ea:63:f1:67:10:df:a2:29:88:5d:ef:3d:
36:7f:66:e3:09:40:85:a3:d6:f4:a4:a5:42:3f:7a:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:67:FB:26:DA:46:95:13:4F:38:0A:1D:9C:78:0F:4C:83:7A:1A:6F
X509v3 Authority Key Identifier:
keyid:90:6D:4F:BF:6D:DC:6F:5C:B7:45:A6:8C:C6:81:8A:94:2E:AE:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kG1Pv23cb1y3RaaMxoGKlC6u4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/30c84e-e0b0-491c-971b-f1d4629ccd77/1/kG1Pv23cb1y3RaaMxoGKlC6u4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4d:e7:07:ee:6e:26:81:f7:ea:35:fc:31:3c:5b:eb:56:e5:
67:01:fc:b5:a4:8d:ed:01:eb:74:b5:d9:29:84:3e:06:e8:24:
ee:93:bf:5c:47:df:7e:6f:cf:20:c2:53:a6:ce:87:e9:6e:42:
e6:08:2f:d3:02:5b:70:96:44:90:ad:9a:88:77:10:99:fb:2c:
b5:44:f2:c2:20:72:9f:f7:06:9d:20:2f:83:13:47:60:e9:b1:
9b:71:cd:c4:d4:46:de:d7:65:c3:50:ea:cf:d9:de:a5:29:00:
ad:58:89:69:92:7d:38:b8:65:eb:7b:af:95:37:f0:a9:3b:9d:
d0:2c:40:3c:ca:e6:0c:0f:c7:5a:a4:92:aa:6e:22:01:fe:4f:
8d:6b:e2:63:99:7f:ce:ce:16:f4:36:11:08:c1:89:da:a9:99:
e9:ef:b7:26:19:a2:e3:ee:ee:08:5c:95:43:32:49:59:d1:90:
95:17:75:06:a5:9c:49:2a:c9:8d:e8:f1:70:ac:82:08:bf:c0:
5a:3f:13:2d:90:02:ef:0f:42:7e:92:b3:b5:b1:3e:75:cd:66:
32:5d:fc:7a:8b:ef:27:2c:c3:b2:a7:06:ff:95:36:89:e8:75:
72:a1:71:04:95:c4:59:91:48:0d:8a:23:ff:55:f9:ec:d1:89:
9a:39:3d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:52:46 2024 by rpki-client on console-fra.rpki-client.org