Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
File: S11Foqu5YNK851js5zOxJtyn5xs.mft (raw, json)
Hash identifier: M4pXkoHvBmJKfAhjV2sb/PLUK0DNIZnNZ6edpVlOTYE=
Subject key identifier: 33:7D:F7:7C:2F:6A:CE:A3:CD:AB:95:76:A3:C1:99:84:C9:A9:F1:B1
Authority key identifier: 4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
Certificate issuer: /CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Certificate serial: 019357D2290B3A80CC6DDB787ED57AB0A0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
Manifest number: 123B
Signing time: Sat 23 Nov 2024 07:00:10 +0000
Manifest this update: Sat 23 Nov 2024 07:00:10 +0000
Manifest next update: Sun 24 Nov 2024 07:00:10 +0000
Files and hashes: 1: GkXZBllQ4GO0CiGlTFqYJlhIxcU.roa (hash: 4jKsz0aaQLkIhRXwDr/RrS3nLa4pQgYKzO7xgrFTUTs=)
2: S11Foqu5YNK851js5zOxJtyn5xs.crl (hash: XbqAXG0CbRVMFwtJb8y1KH+QJfW6aHGaymRmc9GjlBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:29:0b:3a:80:cc:6d:db:78:7e:d5:7a:b0:a0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5d45a2abb960d2bce758ece733b126dca7e71b
Validity
Not Before: Nov 23 07:00:10 2024 GMT
Not After : Nov 24 07:00:10 2024 GMT
Subject: CN=337df77c2f6acea3cdab9576a3c19984c9a9f1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:2a:05:2e:85:0e:7f:e2:9e:ef:b0:ec:62:
da:36:23:9b:a1:48:23:77:40:82:48:fc:c6:86:37:
11:db:cc:07:bc:ad:5c:4a:0f:06:c8:8a:8a:e2:6b:
29:ac:c8:10:54:a8:e0:54:1a:12:49:e0:b1:7e:01:
b1:6f:e0:c6:0a:53:53:7c:15:71:3e:f8:05:c5:55:
70:5c:7f:d5:fe:4a:44:1f:1c:ea:e4:54:1e:09:73:
dc:bf:f1:8c:b5:2d:06:fd:92:d5:a1:fd:aa:2c:81:
60:6f:fc:89:1d:28:91:1c:43:fc:94:ad:1b:f2:19:
19:91:53:93:00:92:83:f9:9a:83:9e:c2:4f:d7:62:
56:ad:7f:9e:18:d9:00:2b:a9:b8:8e:c2:69:ad:71:
63:b1:b6:0c:08:77:05:8a:c0:8d:47:89:73:48:59:
8c:22:cf:71:b5:4d:b4:67:9d:6a:df:82:c6:79:05:
f7:45:45:91:80:0b:b2:3d:cf:f2:97:7c:31:5b:cf:
e9:fe:f6:50:70:10:c3:6f:8f:7b:6f:e5:49:32:55:
60:3d:c1:61:91:3b:ce:bc:52:a2:3c:2d:8d:aa:63:
8b:a5:de:50:4a:50:d8:5b:e9:d6:31:fc:ff:cc:40:
34:0a:9a:e2:5e:4a:05:6d:26:0b:fe:69:2e:a1:ec:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:F7:7C:2F:6A:CE:A3:CD:AB:95:76:A3:C1:99:84:C9:A9:F1:B1
X509v3 Authority Key Identifier:
keyid:4B:5D:45:A2:AB:B9:60:D2:BC:E7:58:EC:E7:33:B1:26:DC:A7:E7:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S11Foqu5YNK851js5zOxJtyn5xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a905e9-f93b-4d60-8108-810b9f5cc415/1/S11Foqu5YNK851js5zOxJtyn5xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:42:2c:1e:ef:96:12:b6:cc:4b:d1:1c:d7:b5:71:66:87:f3:
b5:29:60:2f:26:34:49:4e:a0:86:85:1e:ac:e7:0f:93:54:b4:
6c:4d:14:51:f8:b4:9f:ba:7f:b0:74:c2:db:f2:a7:8e:d2:96:
87:a3:3f:f5:89:ef:ba:6e:18:4a:bf:0f:2e:e6:f6:58:a7:27:
9e:2f:95:41:b6:fb:56:48:66:fb:74:01:d1:8b:bf:de:cc:a3:
f7:7d:e0:bc:f4:81:5c:1b:4f:a1:49:be:7e:22:a2:c8:62:d3:
3d:91:25:16:68:34:53:54:98:05:ff:80:f8:f2:cc:ff:0f:98:
d5:39:a2:32:7e:9f:92:a6:5f:f9:3b:ad:67:5f:f3:c5:67:fc:
15:9a:a5:e8:a5:d0:75:72:94:f1:f0:58:1b:f7:fc:69:5d:90:
7d:5e:9a:a3:48:07:9c:64:fb:9b:ec:28:b8:8b:1a:a1:40:1e:
39:b2:13:ae:27:e5:97:3b:88:b6:51:17:32:15:fc:80:c5:d9:
4e:06:08:03:3c:63:25:d8:4f:f7:39:55:38:19:10:1f:62:4d:
5a:b7:d5:ef:30:5e:88:83:8b:cd:cf:62:4b:e3:68:fb:9d:71:
a3:ac:bf:6d:24:dd:e8:b6:cc:93:5e:b0:69:17:e2:d4:e8:fa:
6d:ed:d8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:18 2024 by rpki-client on console-ams.rpki-client.org