Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: vK1j1odg0vQJ/tKES6SM79tG98qihB+D3bFzIrRLgy8=
Subject key identifier: 8F:A2:AC:DC:AE:F2:B7:2F:CD:48:38:3E:86:F6:D4:74:76:E7:A8:EE
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 01935B418FC55535A8A5B2DFA7163E04E866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 1376
Signing time: Sat 23 Nov 2024 23:00:43 +0000
Manifest this update: Sat 23 Nov 2024 23:00:43 +0000
Manifest next update: Sun 24 Nov 2024 23:00:43 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: fnIp9CECqESIJk1/o0W+kMvRtQCw0oE05SLkEApkkFU=)
2: JN3PG7EcRJa44sBeEU2c7qGp6Zk.roa (hash: aDO2L0T1EVWkwdSO1I9X8RqjLoRNoy3ZIBJqrt6J9bc=)
3: j7kWV8Av6gEKXca5gUotNbA2WZc.roa (hash: xjgZc9LC2dqH6AZGUGd2RmrYdVX/JJgu8rZefJ+oXdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5b:41:8f:c5:55:35:a8:a5:b2:df:a7:16:3e:04:e8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Nov 23 23:00:43 2024 GMT
Not After : Nov 24 23:00:43 2024 GMT
Subject: CN=8fa2acdcaef2b72fcd48383e86f6d47476e7a8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:08:e4:7c:75:30:26:09:23:20:4b:08:44:
b1:29:32:2c:d9:c3:4d:95:01:17:76:76:6f:6c:ea:
46:5e:6d:bc:e0:44:fa:4b:e5:ca:1d:d4:23:11:21:
df:b7:58:b5:ad:20:be:56:4f:83:b5:0c:80:4a:0c:
05:dc:c6:08:a0:ff:24:0f:ed:f4:14:3d:aa:e8:c0:
1c:16:27:b4:b4:d0:76:16:97:88:1f:5f:a9:95:88:
f8:d1:c1:d0:2c:a0:a0:c0:8a:77:39:09:4a:11:47:
6f:ab:df:a8:b5:8b:fb:b9:44:28:83:3a:7c:cd:75:
89:d3:24:e0:a2:c7:f0:f1:7b:16:c7:4f:6f:0f:15:
09:45:e5:a6:29:f9:10:76:8a:4c:52:bc:86:90:08:
ce:2c:3e:8c:e2:2c:05:9b:ba:ff:0e:c9:63:e2:e0:
2b:b9:1d:36:e9:64:5e:40:ac:3c:31:61:d1:b6:36:
59:84:d7:06:48:03:4f:48:87:43:39:27:f1:23:03:
40:1d:49:cd:5e:1c:f8:97:11:1a:dd:f6:c8:27:b1:
01:4e:95:c6:79:2f:d1:ee:cd:bb:43:f5:ec:81:ce:
51:9d:a6:a4:0d:08:6f:66:0a:ed:32:6c:8f:d4:ee:
8a:7a:da:28:c3:45:83:49:b8:60:36:7f:ec:83:d5:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A2:AC:DC:AE:F2:B7:2F:CD:48:38:3E:86:F6:D4:74:76:E7:A8:EE
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:de:76:e7:d8:55:f3:a7:0a:97:40:b8:ea:28:84:c7:01:75:
96:21:14:db:fc:9c:a6:f2:7e:f0:10:f8:3a:37:e6:00:cd:48:
11:fa:72:b8:d8:87:ea:98:3a:6c:f9:8a:56:92:8d:69:9c:3f:
19:5b:ca:18:8b:b0:cd:f0:16:f4:4a:38:84:5b:39:50:eb:b9:
94:d7:93:6a:5b:b6:25:e1:8c:f0:95:3a:20:ec:66:af:3b:62:
ec:8c:2a:cd:7f:b2:1e:53:83:52:ae:24:4b:99:10:69:3f:dc:
f0:16:62:e8:70:cb:ea:d4:e3:da:0e:14:a9:37:ef:e0:49:9b:
3f:f4:b0:11:e9:23:48:08:72:12:cd:15:1a:df:21:11:65:e3:
ba:3b:1a:bc:d8:1e:ae:c3:c5:ba:8b:d7:2a:66:48:f5:d4:29:
8f:e3:eb:3e:e1:79:28:57:e9:8f:92:1c:75:d1:fe:45:15:d0:
85:12:e9:22:d2:d2:ae:be:76:f0:78:41:b3:ec:17:43:8c:37:
2d:ef:d0:d6:92:0a:0d:cc:55:a1:71:d9:22:36:86:02:12:e1:
c0:03:e6:67:e5:eb:2b:33:3b:9a:d6:71:bc:61:7b:8a:37:de:
cc:77:90:51:de:f6:5e:f1:e1:73:bf:6b:52:5d:d1:2a:cc:8c:
8e:c0:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 05:29:59 2024 by rpki-client on console-fra.rpki-client.org