Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: OEWFCsrM2zriucDLrpAgV7tMwa72SOK/+JWX/A7hpgI=
Subject key identifier: B4:91:7B:BF:5F:D0:2F:5F:99:D6:4F:D9:8D:8E:AB:D1:DB:5B:0E:52
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 019357D22F20319A36CAB1ECE5910B2F0799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 12CD
Signing time: Sat 23 Nov 2024 07:00:12 +0000
Manifest this update: Sat 23 Nov 2024 07:00:12 +0000
Manifest next update: Sun 24 Nov 2024 07:00:12 +0000
Files and hashes: 1: 5YR5HSWJecRq47NtC_Vf71ZRuRM.roa (hash: jrSx1MZNn7clX31lni/jOsDXl3gTl7+5V8tzmXD5qPE=)
2: 7kav7ynlT__54lgPeSQjuoj5MUs.roa (hash: b+2B3lVGn++CvNO41lq9DuB++/+YjIyJeGIWJ3rHVM0=)
3: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: PAABegRqbwH5K2RDd72zqZ/YUwo5eZb/NX+YVz99c/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:2f:20:31:9a:36:ca:b1:ec:e5:91:0b:2f:07:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Nov 23 07:00:12 2024 GMT
Not After : Nov 24 07:00:12 2024 GMT
Subject: CN=b4917bbf5fd02f5f99d64fd98d8eabd1db5b0e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:33:46:d5:c7:b7:4a:fa:03:2b:8d:a5:2a:
ad:dc:9d:eb:b2:d8:39:fa:7c:54:29:b0:98:7d:a6:
8b:ca:37:62:4f:d2:a3:3e:8f:c7:59:1c:b0:61:6f:
90:67:b7:88:7e:93:7e:de:a8:89:59:de:52:a5:78:
c9:95:46:58:ae:b9:a1:34:52:43:41:ca:08:26:0e:
85:07:3f:98:e6:db:d6:b4:e9:86:8c:1d:a6:37:60:
f9:28:34:6c:22:11:ba:c4:5c:e2:93:4f:84:1b:c0:
44:93:15:87:bd:73:db:c2:f2:e7:d3:2e:88:68:c1:
be:54:66:0f:bb:6e:87:66:7e:47:57:6c:81:f5:b3:
f7:1d:91:ab:7d:b8:54:ca:d2:3d:90:2f:3e:2c:08:
46:b8:7e:ba:94:7a:ee:50:59:26:82:39:7d:e4:08:
ce:cd:9e:5e:2c:75:a0:88:1b:6d:b0:a5:a1:b7:75:
d2:a6:09:53:aa:48:5c:e2:38:8c:d1:75:6d:c9:ec:
49:00:bd:89:d1:fb:08:d7:2d:51:79:51:72:b0:85:
8e:1c:58:96:76:94:5d:3c:8b:c9:fc:0e:12:e2:e9:
af:7a:9f:d1:f4:af:b3:77:d7:bb:44:86:8a:8c:f1:
66:f9:50:17:12:12:b5:f5:3c:e3:97:c4:04:70:4f:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:91:7B:BF:5F:D0:2F:5F:99:D6:4F:D9:8D:8E:AB:D1:DB:5B:0E:52
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:97:60:03:a1:a2:d2:2e:8c:e7:65:0f:42:67:d8:bb:16:cf:
3e:df:73:fe:34:98:e2:fe:f1:a4:9a:ad:68:a7:4c:08:fb:95:
02:77:d8:e6:d3:9b:a7:ea:2d:16:d5:36:85:98:ba:d2:50:21:
a7:7d:f4:06:ab:05:8a:46:d1:64:ac:70:0d:c3:5a:06:7e:0a:
ee:cd:5f:91:6a:a9:29:e3:ff:6e:fe:8e:56:0e:77:fd:05:ea:
ba:c2:22:d5:ea:66:84:83:73:0c:d7:f6:4c:70:49:1b:ab:ec:
96:fa:8a:9b:7d:c1:7e:f0:0a:07:6a:56:74:08:73:28:7a:28:
a8:3b:96:9e:68:5b:81:46:bf:c9:ff:cb:81:db:e0:b4:4c:c6:
2f:d3:80:e2:f9:f6:6c:ec:51:e6:f1:9c:d3:e7:26:09:5e:24:
e3:db:15:9c:79:8a:52:66:de:80:1a:8d:e7:e8:2e:50:00:80:
76:26:bd:34:99:a0:48:2f:eb:1c:cd:a1:d1:d2:68:7d:27:3f:
93:56:06:01:46:e1:13:22:56:1e:85:fd:04:f0:94:64:37:8a:
8f:f7:93:14:e1:32:77:e3:77:fc:61:c1:2f:e2:3a:50:4f:7c:
e8:8f:63:52:d6:da:01:bd:15:e3:4e:2e:16:85:d3:c5:f7:7e:
54:20:23:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:37 2024 by rpki-client on console-ams.rpki-client.org