Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json)
Hash identifier: xoKVnPT78anY+vRNtjPKtS0hiokgVdbxUojh/9tLodU=
Subject key identifier: 29:A9:1D:E4:3E:54:40:84:01:56:ED:61:3E:EA:26:99:DE:F4:CC:9E
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 0191FA7E1EA7A0AC032EFDF782D5C43D7871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
Manifest number: 0115
Signing time: Mon 16 Sep 2024 11:00:54 +0000
Manifest this update: Mon 16 Sep 2024 11:00:54 +0000
Manifest next update: Tue 17 Sep 2024 11:00:54 +0000
Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: uwr1T25qjgTHWYAoP6sDOmObwbCFN1GjOjG/8Lflu+o=)
2: cV9Aw8by33MUy3Ti93WiYGc8GPI.roa (hash: KM/7AbIZi0XIqpXF4lg7Ig7+LUD7UneGG7mrfQyaIhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:7e:1e:a7:a0:ac:03:2e:fd:f7:82:d5:c4:3d:78:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Sep 16 11:00:54 2024 GMT
Not After : Sep 17 11:00:54 2024 GMT
Subject: CN=29a91de43e5440840156ed613eea2699def4cc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:73:ea:b2:5b:75:fc:ab:34:76:ff:c6:bf:
5e:1c:31:f2:fd:ca:46:99:33:d0:fb:b9:ec:82:6b:
ae:06:55:d6:27:c2:36:51:aa:bf:5d:c1:df:ac:68:
99:49:19:8a:17:5f:e8:fa:03:4b:6f:70:d2:c8:92:
e1:24:5e:9f:e3:3f:47:4f:81:54:5e:a5:f3:5e:35:
1d:bd:70:58:f2:5b:a2:98:9f:31:87:02:8c:b2:13:
6c:8d:c2:3d:98:f5:0d:4e:68:a1:77:8a:60:df:19:
23:4d:db:ee:ae:08:92:19:be:36:0f:21:81:47:a0:
82:5b:9f:64:f2:ce:ea:0a:00:c5:b9:11:28:17:7a:
fe:43:7c:c8:17:23:36:46:7a:11:4d:54:ae:19:d7:
1b:3b:b9:32:5f:bb:48:cf:49:05:5b:fc:fd:a3:83:
4f:ae:91:2b:53:5e:eb:c1:05:5a:81:82:a1:fc:a1:
ee:bd:1e:38:ce:3d:e1:b0:75:9c:78:40:09:e1:71:
6b:c5:eb:e6:b6:ad:c3:9e:c7:eb:65:43:09:89:57:
51:03:94:c3:b5:50:52:b2:8f:be:a9:9a:e8:3c:5f:
93:55:b9:b6:15:d1:8a:e8:66:94:e9:0f:c9:31:91:
c0:d2:6d:d5:e2:25:23:b6:70:a5:c9:52:88:3b:ce:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A9:1D:E4:3E:54:40:84:01:56:ED:61:3E:EA:26:99:DE:F4:CC:9E
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ff:27:2f:e6:ca:8a:d2:14:4f:1d:51:e4:e0:93:9f:ab:4e:
76:a7:11:72:49:d5:6f:c3:ed:63:5e:de:35:bf:a5:f0:87:05:
1b:8c:c6:da:50:b5:eb:3c:c8:a4:4a:e6:9e:88:e4:3d:1b:fc:
d6:9e:4f:f9:f1:1d:2c:56:aa:76:f6:64:9c:a8:c7:d6:ec:bc:
23:a4:35:5c:b6:e8:60:b1:f4:ff:53:69:62:43:2a:a5:7f:bd:
e4:43:aa:74:25:59:e4:f9:6b:52:54:3c:e4:c6:2d:1d:3f:bb:
d4:80:f5:18:f6:4c:73:0a:66:d5:6b:a5:04:4f:ef:7c:f8:c4:
fb:e1:28:f9:d0:21:6b:17:15:f1:eb:75:b8:ee:b7:c3:58:9d:
4c:48:65:ef:f2:49:de:dc:07:fc:2c:8d:6b:8f:06:6d:b2:ff:
ba:33:f2:85:c2:01:a7:7a:91:16:b8:6e:2a:4e:1e:89:f0:48:
ee:78:6e:af:65:30:27:55:30:70:89:8d:e4:e9:3b:f4:17:e9:
d8:91:1b:4e:85:36:05:8b:b2:14:ad:45:df:27:2c:f4:e6:5b:
54:5b:f4:ec:97:08:69:91:6e:e9:ef:22:4a:f0:9d:bb:95:8d:
5b:a8:d6:24:58:ff:9d:cb:f2:e7:50:2d:19:ca:d4:36:9b:78:
91:57:cb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:33:24 2024 by rpki-client on console-fra.rpki-client.org