Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: PxFO4OCsbdwarF2ihfIsk3acVTZNHPRm6SEng6NVPbA=
Subject key identifier: D3:67:80:41:DB:BC:EA:53:71:EC:E0:D8:6F:66:5D:6D:92:7C:2C:C5
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 019352ABEB257F4818C3A49FF05755BC13BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0751
Signing time: Fri 22 Nov 2024 07:00:18 +0000
Manifest this update: Fri 22 Nov 2024 07:00:18 +0000
Manifest next update: Sat 23 Nov 2024 07:00:18 +0000
Files and hashes: 1: 9cLJ1GZkThvmUJU5HlMFeNYv_lc.roa (hash: p+9vB0YV4X5fW43F8A+nvO8u/l+NrIiGnqDnOR/e1xg=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: GfVEdaGiT8ZmecfFhlSOQ2evBYuRIH3wa6Fyh3mSX9s=)
3: mqB1uWV4FRPivd-giPowINYBT_o.roa (hash: lYWj8PP9NeZEQD9cklGMg+6kBo6SonTUii41cQLDbqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ab:eb:25:7f:48:18:c3:a4:9f:f0:57:55:bc:13:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Nov 22 07:00:18 2024 GMT
Not After : Nov 23 07:00:18 2024 GMT
Subject: CN=d3678041dbbcea5371ece0d86f665d6d927c2cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:ae:32:3c:13:76:d3:d4:2f:c6:36:fd:07:
a2:04:f9:1c:03:ea:ad:25:6e:2c:b4:ec:b3:dc:aa:
52:40:f9:e9:1d:ae:64:2f:59:20:15:6d:80:b0:c6:
a1:4e:31:80:44:a6:dc:fc:39:f8:ba:41:dd:39:0b:
6d:8c:83:25:ca:f0:95:b3:84:a8:6b:34:66:6a:fd:
46:56:69:6f:76:7c:9e:10:be:7b:4e:b4:78:66:3f:
1b:2a:77:5e:90:17:e1:78:ca:40:3f:10:ac:e7:11:
9a:ca:e8:04:61:88:3b:1d:b9:5b:c3:e8:d6:6e:ce:
d4:3b:91:a3:d9:57:d3:75:6d:b6:cd:61:49:4d:2b:
59:f5:45:1d:7e:50:6c:45:b7:29:77:03:7a:0d:c6:
25:74:2a:75:c1:b4:06:27:12:e9:e6:62:02:53:c0:
ae:62:06:b2:24:8f:65:d6:40:d2:7f:43:41:7e:8f:
4d:24:2c:73:15:c6:19:e5:cf:4e:5f:9b:45:53:77:
37:5b:e1:34:57:1a:6d:6b:8f:3c:92:62:4f:54:35:
3d:c0:a9:60:39:ad:38:3c:d8:4d:f6:e2:78:ab:db:
dd:40:ff:d6:d0:79:fd:5b:92:97:4b:71:bc:f0:09:
74:7c:09:2a:43:c8:95:16:86:2b:35:42:e0:f3:9e:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:67:80:41:DB:BC:EA:53:71:EC:E0:D8:6F:66:5D:6D:92:7C:2C:C5
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dc:cf:56:8b:01:52:39:12:76:b7:47:83:c2:ed:e3:14:17:
e0:80:e6:67:50:f3:f2:c9:db:74:b0:09:a2:2f:bd:21:6b:0e:
5c:f6:84:64:e6:b4:cc:67:d6:26:09:71:18:02:22:99:5d:d7:
37:ac:ef:9f:bd:84:a1:c9:f4:cd:71:4f:21:62:05:24:74:c7:
8d:66:97:8c:aa:d4:09:59:94:50:b8:d1:62:97:94:71:7d:a0:
32:d0:3b:da:cf:96:8d:66:0e:40:51:b0:40:2a:9c:5c:c0:fc:
f3:67:51:b6:e3:12:56:81:62:22:fe:c7:b1:9e:63:9d:0c:aa:
14:23:96:37:21:6e:76:e4:73:52:0b:ae:8b:e1:f0:f8:73:24:
6d:c7:4f:ae:a5:6c:a1:e8:a5:8e:f4:52:59:5f:b0:c9:e9:bf:
c3:81:64:79:1b:09:df:e8:fc:1a:f7:bc:21:02:17:26:ff:e4:
90:fb:76:2b:f4:43:b2:91:45:a5:f3:b4:64:96:74:8b:3a:1e:
aa:09:b9:07:80:a3:2e:0c:86:88:f0:9c:75:04:9d:49:e7:6a:
0a:6d:5f:9e:3b:84:3f:22:c8:cf:2b:16:2d:96:e9:fa:33:d6:
c5:f3:3e:39:13:9b:17:a6:8b:2a:5e:4a:79:70:cc:40:b8:21:
32:04:5b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:33:37 2024 by rpki-client on console-fra.rpki-client.org