Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
File: 2JX6cOP33zYRUdVTedTZuF2t_T0.mft (raw, json)
Hash identifier: XN7NcZQECkcUvrhsaGcLZ/qispXJkq017FMCcKJ/8+4=
Subject key identifier: 9E:12:52:BA:3E:1A:D3:9C:C0:FA:49:03:6E:61:E8:3F:4A:23:43:88
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 0193512BCC947A44CB237BB546CA8EBE9302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 00:00:45 +0000
Manifest this update: Fri 22 Nov 2024 00:00:45 +0000
Manifest next update: Sat 23 Nov 2024 00:00:45 +0000
Files and hashes: 1: 2JX6cOP33zYRUdVTedTZuF2t_T0.crl (hash: ZttHnwlzrjzQ8rfq7wBaCfPKMhQxWoKrO/DMficd9Ls=)
2: 9VeimpxrnQ9OUfpfVXDzk9jlRm0.roa (hash: e0A95T35+R6FGfrNJwHeLrdSZ9yWzfJlKjqi+Zg8B/Y=)
3: wgJ7T8AQs2H25r46HMkqeo3d_74.roa (hash: XCTHlnY4cJd2CEBJ6FdccipBHcBm3QzvnHmgWXUepDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:cc:94:7a:44:cb:23:7b:b5:46:ca:8e:be:93:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Nov 22 00:00:45 2024 GMT
Not After : Nov 23 00:00:45 2024 GMT
Subject: CN=9e1252ba3e1ad39cc0fa49036e61e83f4a234388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8f:85:0c:85:45:b2:9b:6f:8d:d5:8e:ae:c1:
6f:98:35:a7:89:c7:87:47:a5:6d:a4:9b:f4:76:69:
55:77:27:25:10:64:d8:fe:34:60:82:14:8b:f6:69:
a1:b4:75:8a:db:20:d6:b6:ac:83:96:6a:c4:5a:87:
f9:c1:a7:39:e2:e4:3d:64:3e:68:01:c0:9f:1b:fd:
c2:eb:7a:f4:d5:76:33:69:16:6e:13:c3:c7:6d:a9:
c9:55:15:b8:a0:b6:5e:37:99:98:71:44:0b:35:30:
46:41:63:4f:9a:51:15:76:2f:1a:5f:cc:5c:cc:00:
7a:51:67:50:ad:d7:91:23:d6:f5:bc:69:6a:95:6b:
4e:ab:69:3f:ff:67:79:c7:5e:59:a0:1b:2d:7b:fa:
6e:6d:8d:54:fa:1c:ed:ab:6f:66:a1:75:b9:2c:9a:
d5:68:46:1c:0a:29:1f:63:f2:1a:51:c6:a1:22:db:
a4:89:d5:c5:6d:e4:2b:96:0c:41:5c:ad:4f:73:30:
a2:8f:88:bb:f6:c7:50:ac:96:ce:35:4b:88:1b:7d:
06:73:8a:28:08:d5:45:b6:4a:96:22:f3:f8:4d:58:
2f:8b:db:8b:a1:3a:42:5d:21:d7:a9:06:23:cb:77:
90:4c:dc:a5:b4:02:9e:43:a2:54:94:b2:5f:f3:71:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:12:52:BA:3E:1A:D3:9C:C0:FA:49:03:6E:61:E8:3F:4A:23:43:88
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:dd:28:5f:77:38:1f:95:3e:84:e3:7a:ad:f2:54:53:cc:7a:
76:d7:ef:e8:15:17:5a:30:20:78:5a:e0:4e:ff:7a:e1:41:bd:
97:ea:e3:78:eb:19:c9:5a:6a:03:f3:80:3e:c8:69:02:7f:c6:
ce:e3:1c:de:9a:d5:05:35:21:da:ed:e5:ad:71:b0:92:e3:00:
8c:45:59:d1:67:2f:a8:7e:04:6e:06:30:b1:80:52:05:15:cf:
af:05:e2:49:49:3d:b8:da:13:2d:70:45:2e:93:19:97:02:3d:
72:92:47:7f:fa:a1:8f:e0:a8:8e:93:65:8e:9b:d1:cb:2e:de:
97:41:05:8c:b1:bd:bc:93:6f:a0:3b:45:9c:92:0d:a9:f8:ed:
a3:44:c2:b9:db:4b:93:ca:51:c3:d4:40:6a:fd:62:97:2b:d1:
60:7f:a8:73:ed:61:7e:b6:2a:61:ff:7a:f3:a4:43:84:15:c6:
f1:f4:a7:5c:a4:48:2f:db:e3:f9:2a:e4:d3:cc:47:9f:a5:b4:
9e:9a:b8:8f:6b:4f:65:38:55:66:5d:68:b1:23:26:51:d9:ea:
af:ae:79:17:f0:b8:5d:4d:a9:47:71:9a:6d:62:c5:c7:fb:75:
5c:0b:c1:85:d5:06:1c:64:8e:25:7a:47:2d:4a:b3:60:3a:a6:
27:cc:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:12 2024 by rpki-client on console-fra.rpki-client.org