Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: MGaEZ4IS1SNUnEslzBrK6t9qlx3cFHZbDNJ+7F1Eq10=
Subject key identifier: 59:CA:3D:D1:8C:1B:24:9B:76:B1:AE:05:1F:2D:1F:E4:E7:17:21:90
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 019352ACBB89A91E4D14B1FC2D3529D830D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 0B66
Signing time: Fri 22 Nov 2024 07:01:12 +0000
Manifest this update: Fri 22 Nov 2024 07:01:12 +0000
Manifest next update: Sat 23 Nov 2024 07:01:12 +0000
Files and hashes: 1: nh9gXYbuO-HTwmrL6SeiJz0yJcs.roa (hash: MU2G4TvgdF1Nnz/zc4ub1vium29qaASdcupxfjx7Xsk=)
2: op2sUyazCSN-YKWL8dDP_MQtFGk.roa (hash: Y4qRoeUau+z2DXwsk9MpkT69XhrUt1V5HJc5Poj56qE=)
3: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: 1Vv3No3fevE335vg+VF2llj7uBr2z3lBB+B78GHYLwQ=)
4: ynVbja92TngfepRaKnZKVom45Wo.roa (hash: xh1mauE1wQTy5vaIryae+0JxHaCRtxW5b7iK0liwH2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ac:bb:89:a9:1e:4d:14:b1:fc:2d:35:29:d8:30:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Nov 22 07:01:12 2024 GMT
Not After : Nov 23 07:01:12 2024 GMT
Subject: CN=59ca3dd18c1b249b76b1ae051f2d1fe4e7172190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:cf:3d:37:4f:a5:87:17:f1:a3:23:60:fe:
3b:a7:7e:41:46:a5:ff:83:0f:61:8b:72:d9:25:07:
60:a8:06:64:31:89:e9:82:31:91:84:40:a3:d0:04:
52:9d:2d:29:9b:b0:c6:c0:7e:a2:69:df:4a:f5:e8:
ce:40:a2:89:78:52:8e:65:e7:1a:19:df:05:b0:ec:
ba:39:d7:a2:6c:fc:05:9b:ea:36:2d:4c:cc:e9:3c:
c3:0f:9d:d8:68:16:3b:0f:0e:11:c6:68:0a:be:35:
6a:30:9a:1e:b7:5c:c9:b6:d4:79:10:cf:bc:24:64:
a7:49:a4:25:c4:a1:38:99:0a:49:74:91:d3:6e:8b:
66:4d:60:b3:46:c9:af:31:dd:0b:fe:ca:17:87:94:
4f:1f:7d:b0:9e:c5:10:cf:f3:24:20:b7:61:0f:f0:
eb:14:5a:50:81:37:12:de:fe:30:64:8f:a4:b8:fb:
3f:4a:4c:90:1d:06:1b:8c:ac:e6:83:62:de:d0:3d:
d6:22:39:d4:4e:20:0f:53:5b:9c:85:d9:40:ee:52:
dc:0d:b3:a3:60:c6:cd:f8:07:7a:a0:79:53:00:d0:
15:db:7e:34:55:2e:d0:1a:c8:7f:18:70:0f:c8:19:
26:5c:c6:a3:9b:29:16:b0:8c:96:87:a2:f8:b0:30:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CA:3D:D1:8C:1B:24:9B:76:B1:AE:05:1F:2D:1F:E4:E7:17:21:90
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:71:c3:83:79:d7:ba:78:ad:1f:41:46:1e:6f:e9:cb:30:b5:
4e:7a:23:e0:06:18:00:27:6c:37:8a:ec:1c:5f:b0:43:d2:02:
40:dc:bd:6c:0e:31:e8:8e:f9:a4:c2:81:d6:7d:30:aa:61:e9:
4d:54:d6:0f:ac:a5:b5:21:35:a9:d2:6a:3b:f5:b9:72:7a:50:
df:cd:e1:6b:77:6b:62:e6:29:56:67:36:e4:f4:4d:0f:2f:99:
6e:5b:02:a1:6a:cb:97:13:d0:69:69:4d:9a:5a:f7:1a:cf:d1:
2a:bd:b9:1c:f8:5e:f5:09:c7:8a:88:74:11:3d:79:90:4c:35:
14:a2:79:7f:6b:ec:32:a1:32:05:a6:37:f1:cc:1c:4b:31:1c:
ad:08:6d:72:f6:ee:fb:57:6e:82:5d:39:28:a4:c8:ca:99:f2:
68:07:7d:44:05:4d:49:37:e4:0e:b9:f0:ce:a9:a2:0a:fb:2a:
01:68:6d:50:76:9a:1f:6a:1a:df:f4:78:81:14:c5:25:25:13:
14:2a:3f:3c:0c:5e:ac:3c:00:d2:76:b0:ab:af:95:04:2c:71:
3a:62:93:2b:31:7e:18:29:94:b1:a1:b6:c7:14:dd:c3:7a:fe:
c6:1d:3a:7b:e5:cc:44:3d:bf:77:65:ea:b9:f7:2b:18:fa:56:
bf:49:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:52 2024 by rpki-client on console-ams.rpki-client.org