Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: RN2I0seJk2waPivhXckuiwTl+dcbKIMhY110qL1K51c=
Subject key identifier: 4B:20:63:0D:8B:A5:4F:5F:26:5D:4A:63:BB:83:4C:55:C7:0F:90:22
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 0193591BD403C8D53F6E705E0554478A7BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 137A
Signing time: Sat 23 Nov 2024 13:00:16 +0000
Manifest this update: Sat 23 Nov 2024 13:00:16 +0000
Manifest next update: Sun 24 Nov 2024 13:00:16 +0000
Files and hashes: 1: RuZQMKKYpZhGelALbiWennECz6Y.roa (hash: ohLRgof0lswjjgiuEhrIe2IuV3f8T/MZ6nvYgxrLlcU=)
2: UqzqAlUXSYAcrXuagtcsIbe7HUw.roa (hash: ASkF4GXFVPbUuO8CJzUbELliS6loqDShkXuEYDgyOp0=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: xoXdopuZmO5pP6vRbnBL4ojtvJglfBimY72AM+Im74U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1b:d4:03:c8:d5:3f:6e:70:5e:05:54:47:8a:7b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Nov 23 13:00:16 2024 GMT
Not After : Nov 24 13:00:16 2024 GMT
Subject: CN=4b20630d8ba54f5f265d4a63bb834c55c70f9022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:a8:91:75:75:26:f5:eb:07:f3:7d:0a:19:
df:2b:45:ce:77:58:a4:d2:8e:dd:c6:ac:8c:4d:2a:
5a:83:90:1a:ef:fd:af:7b:5f:6a:57:ba:7b:e7:36:
4c:b9:09:37:97:8d:26:78:c7:ce:87:a3:e4:46:59:
26:5c:59:bb:92:b0:28:7b:bf:b7:28:e7:67:a6:0c:
d3:be:01:ef:dd:de:12:a8:ba:38:f7:bd:5d:c1:d2:
c9:39:4e:55:d2:0f:aa:86:db:bc:25:a8:9e:c4:81:
d4:d1:d8:10:da:91:91:7d:00:c5:c3:cd:f0:e4:6f:
a3:bf:79:a6:b1:37:d5:3e:41:2e:29:51:c0:ee:27:
b7:31:8e:98:b0:5a:f7:d8:80:dc:ce:a6:21:8b:b7:
7d:35:b7:84:59:cd:43:07:ec:9e:85:0e:b6:1b:c2:
d7:4c:e3:e8:a1:be:e5:32:33:7a:19:a3:38:b9:c2:
1f:fe:59:ba:8d:4b:fd:d1:ba:9d:27:0a:e5:35:fc:
43:c6:27:ed:79:6f:21:ff:8b:a8:68:67:67:7d:eb:
92:7a:26:24:e0:89:e1:97:0f:84:bf:ba:c5:7c:5c:
b9:32:68:58:8c:51:02:54:ab:02:5b:8c:10:14:77:
9a:14:38:ca:ef:32:7e:88:2f:e0:1e:a5:00:03:35:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:63:0D:8B:A5:4F:5F:26:5D:4A:63:BB:83:4C:55:C7:0F:90:22
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:97:ff:b8:44:dd:1b:df:bd:85:86:6d:62:58:2c:0b:8b:5a:
3a:ae:7e:7b:33:1d:28:26:48:0f:4b:e9:ae:ff:fa:27:ab:cd:
3c:b9:56:ef:8a:4d:49:b8:ff:75:06:05:e9:4d:78:35:4b:3c:
2f:47:f1:7c:5d:03:68:13:af:ac:91:f9:75:7e:ac:48:73:b4:
a4:cd:04:84:a5:50:5f:3b:ca:9a:57:e0:7b:f2:91:75:b5:98:
db:be:ef:da:25:ae:16:d5:4a:af:ab:5f:d4:40:7e:51:0f:e0:
47:d5:65:19:7d:15:b6:51:58:2a:d1:85:18:b4:80:67:a9:56:
3e:cb:d6:83:31:d6:8f:f3:fb:41:e0:96:1a:e2:ef:bc:7d:20:
64:32:af:e3:15:e3:20:ff:bf:8d:ca:9d:46:c7:16:9e:35:40:
dd:6e:b0:58:ef:31:39:10:a8:b0:a7:7b:b5:61:49:7a:28:07:
2c:2f:9e:bc:a7:25:3f:71:8e:68:fa:25:dd:c0:59:2a:a0:9f:
70:0d:c9:7b:96:28:6e:4c:ef:cf:6d:95:ab:81:11:56:35:d9:
eb:ea:a8:55:97:b8:fb:61:47:97:0b:e1:9f:c6:8f:2f:da:63:
68:64:06:15:67:ac:7a:53:1c:be:17:fb:75:df:b0:05:27:18:
49:9e:a1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:28:14 2024 by rpki-client on console-fra.rpki-client.org