Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft
File: 4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft (raw, json)
Hash identifier: pgt2IvX+sOSJh6LJBntfAIMzhUkvgMsRkTIGiA6gveE=
Subject key identifier: 15:2B:9C:59:07:35:B8:80:F7:7D:03:E8:9E:32:BC:E6:9E:A5:6F:60
Authority key identifier: E1:75:24:C2:A6:F2:4D:7E:67:94:B0:0C:09:63:4D:CA:D2:31:04:34
Certificate issuer: /CN=e17524c2a6f24d7e6794b00c09634dcad2310434
Certificate serial: 0193568A63C09671837807E354253E0780C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XUkwqbyTX5nlLAMCWNNytIxBDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft
Manifest number: 0F19
Signing time: Sat 23 Nov 2024 01:02:10 +0000
Manifest this update: Sat 23 Nov 2024 01:02:10 +0000
Manifest next update: Sun 24 Nov 2024 01:02:10 +0000
Files and hashes: 1: 4XUkwqbyTX5nlLAMCWNNytIxBDQ.crl (hash: OXG6C5q1r7HWIutciIoL+XG8WSliYGVhoYuMJcq1X8U=)
2: wG_toJzQcsLfnCCECsN6GO00t1k.roa (hash: EJ8D7AOAOxEr6g7iVAABRTKQ41iq0rT+KZMrYp1UHyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XUkwqbyTX5nlLAMCWNNytIxBDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:63:c0:96:71:83:78:07:e3:54:25:3e:07:80:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17524c2a6f24d7e6794b00c09634dcad2310434
Validity
Not Before: Nov 23 01:02:10 2024 GMT
Not After : Nov 24 01:02:10 2024 GMT
Subject: CN=152b9c590735b880f77d03e89e32bce69ea56f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:57:88:ac:53:b5:3e:74:d7:ba:18:da:5d:
62:de:31:bd:32:18:9e:1d:94:96:a7:0d:92:86:61:
4b:38:81:71:d9:e8:21:3e:6b:2c:ec:64:5f:cd:4d:
3c:aa:30:47:de:af:1d:ad:4c:8f:7b:d5:5a:3a:a3:
57:58:bf:bc:0c:f9:c5:bc:bb:d1:09:72:41:21:29:
00:c1:49:53:b6:91:54:fd:27:3c:54:30:73:78:a8:
b8:b4:53:1b:e9:4b:48:49:92:c5:e0:35:0a:f6:05:
ab:4c:83:d6:c1:48:93:16:fd:7f:eb:c3:a4:db:de:
60:81:fd:44:23:87:46:9c:57:ae:10:6b:53:5d:e2:
7a:5f:9a:88:fb:26:56:fd:1f:bf:ec:2b:5c:3b:02:
e9:ba:37:40:cd:f2:04:bf:e3:bd:da:96:26:32:dc:
8d:67:4a:57:ec:35:8d:78:af:e2:c7:99:a7:51:30:
7c:b8:11:e1:e8:70:84:21:c4:28:74:79:bf:20:3b:
56:78:9d:04:9d:77:c0:ae:70:ea:db:a0:32:3e:68:
99:f5:39:f0:b2:83:52:47:31:05:1e:b4:c7:f5:0f:
51:de:d4:a4:d0:c6:4d:7d:56:72:01:37:88:52:f1:
ca:9d:2a:5f:d5:e4:c3:a6:cb:cc:da:39:7c:93:d5:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2B:9C:59:07:35:B8:80:F7:7D:03:E8:9E:32:BC:E6:9E:A5:6F:60
X509v3 Authority Key Identifier:
keyid:E1:75:24:C2:A6:F2:4D:7E:67:94:B0:0C:09:63:4D:CA:D2:31:04:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XUkwqbyTX5nlLAMCWNNytIxBDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:7f:82:96:b3:33:99:16:19:ad:f5:79:8b:1c:0e:31:3f:
d6:11:f7:eb:df:a8:5b:28:64:00:f3:bd:ca:10:14:a1:cc:07:
cc:dc:de:a9:15:2f:23:e3:de:1f:4c:75:b2:2e:91:e4:8d:6a:
c8:fd:7b:3c:77:40:6b:bc:16:44:0a:ec:42:da:d3:dd:3b:52:
ce:05:df:b4:19:e1:21:aa:6b:54:69:5e:58:d3:98:d9:15:60:
e2:3b:c6:6d:f9:a3:ed:c8:1d:79:04:9e:39:2e:35:9c:49:b4:
16:0f:41:92:a8:f9:34:48:d5:08:ab:af:6c:a2:dd:6b:98:c8:
02:7e:ec:31:f1:9e:36:b0:a2:0b:6e:1f:74:e7:ea:96:4f:a9:
72:1f:f8:1c:bb:ca:ff:c7:02:53:67:06:f7:70:64:01:73:25:
f5:72:32:1c:28:6d:39:70:a0:b2:9b:d9:c0:54:ce:2d:e5:9e:
cf:97:8d:67:b0:05:81:da:02:44:d4:e1:62:8a:6e:cb:83:99:
4b:b7:c8:ac:f1:87:6f:17:e5:1a:1a:f7:61:4b:8b:0d:ed:64:
74:35:e0:44:09:d5:12:de:f0:09:68:72:26:c8:a0:c2:7f:17:
5f:4e:73:4a:82:fa:9a:e6:2a:6f:af:07:36:87:df:0a:e4:01:
62:62:00:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:47:52 2024 by rpki-client on console-ams.rpki-client.org