Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: NjxQMjjTh/TcdzWWMapD59/bv4mH9N1l6ho2RO4vQMg=
Subject key identifier: 12:B2:CF:BF:5B:AC:8B:E8:46:87:63:65:67:70:8A:82:9D:DB:B8:28
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 019357648BCEF39B700C853C15BD72BD345F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 09F0
Signing time: Sat 23 Nov 2024 05:00:26 +0000
Manifest this update: Sat 23 Nov 2024 05:00:26 +0000
Manifest next update: Sun 24 Nov 2024 05:00:26 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: VA3MKYBMYVbd0YhmvtLNucfCJLkfDAO122yfpd6XMZ4=)
2: Bb-UKNOnYn4MC6yhjm0JWEjUZ7c.roa (hash: 8Ad1iWG5xsVM4XDAHCZc1oGqihzHUaQCQxye39KV8ew=)
3: FnfsUrj9jCD0wazsa-jPrFT5Obc.roa (hash: gKc045wynWQwTcJeMAUKrQB0fRtUIE8NZ/2+TWh7mpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:8b:ce:f3:9b:70:0c:85:3c:15:bd:72:bd:34:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Nov 23 05:00:26 2024 GMT
Not After : Nov 24 05:00:26 2024 GMT
Subject: CN=12b2cfbf5bac8be84687636567708a829ddbb828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:d9:bc:46:fb:7b:df:b0:aa:1f:55:04:15:
46:1c:ec:0e:4d:da:f2:c4:04:e9:da:86:e3:7e:e4:
89:04:e7:2e:76:69:ff:9f:df:2b:32:76:f9:e9:2d:
a3:a4:b8:4e:71:1e:fd:46:04:5b:0e:58:95:96:6a:
fb:e3:6c:be:50:52:bb:27:ad:a3:e8:f5:3d:ec:1c:
8b:b3:2f:b4:33:c3:e3:80:93:dd:1c:df:5d:46:fe:
1a:d9:f8:f8:2b:ba:ee:c9:9e:b3:de:71:16:07:37:
e7:cb:d7:2b:1f:ca:4a:a8:a4:74:24:b0:18:b7:89:
45:64:67:2c:ee:91:0d:10:aa:a9:67:56:a6:e9:89:
df:08:8e:06:94:1d:2d:05:a5:35:11:56:27:73:2f:
c4:e7:e8:55:02:80:2e:24:fb:67:bd:49:d7:ce:7f:
d5:84:01:78:fa:ca:17:2b:4b:e6:29:c2:6b:6a:85:
84:ff:48:ab:05:8c:f9:9f:35:04:d1:8a:09:e3:eb:
b8:b9:1d:4f:69:f9:c7:70:b6:9c:ac:68:08:16:be:
5d:1d:60:ee:86:40:9b:d1:52:33:80:ad:ac:0e:f3:
53:4a:aa:a1:da:64:10:54:89:8f:8f:d1:6f:a0:46:
e4:be:4d:cf:1f:6d:e7:24:e7:9d:78:60:8d:c8:fe:
91:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B2:CF:BF:5B:AC:8B:E8:46:87:63:65:67:70:8A:82:9D:DB:B8:28
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:87:fd:2f:9b:5e:0d:ad:3b:00:1c:c2:1a:85:7b:16:3d:ff:
04:7e:4c:20:1e:91:f9:ca:a4:77:10:20:91:42:04:06:54:b6:
26:8e:72:d4:c1:2c:79:ff:09:fb:dc:59:03:be:fa:b1:ba:d4:
64:94:02:19:85:ef:4b:a1:e3:c4:9d:8b:d5:4f:8e:6d:d1:85:
e3:5d:0d:18:e8:df:18:bb:4d:67:c1:ca:a0:6a:36:de:57:69:
6b:c4:a9:8e:3b:66:01:97:c2:1e:73:63:06:60:5e:d2:8d:15:
60:6b:d6:08:b6:cc:fa:cf:26:a7:2f:a7:0f:78:e3:41:ec:24:
2e:a4:8c:d4:09:92:e5:46:fc:1f:2a:a3:c2:c7:08:36:72:fd:
d5:ae:4b:08:5f:8a:c3:f1:c0:9c:fb:c5:ae:c6:b3:e1:bc:d7:
23:7f:ea:c2:2b:9c:60:27:de:7d:f5:69:fe:e6:5d:01:93:79:
dd:2e:7e:dc:31:11:6b:ed:a5:17:ad:37:6d:f3:b9:67:49:a0:
d0:9f:6f:57:36:5f:6a:7f:2b:cb:0e:41:03:d3:1e:60:57:02:
ec:ae:77:8b:e6:6e:8a:a6:b9:c7:82:50:86:83:c5:9f:17:69:
36:50:d4:34:b8:3b:ad:f7:9a:5d:78:64:74:b2:38:c1:b0:74:
7e:fd:d2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:04 2024 by rpki-client on console-ams.rpki-client.org