Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: NJgZYcPnpOGpwhFbnyNBW4Xpw0hrfJ95yVGp2/nxf1U=
Subject key identifier: EE:80:2F:E5:14:81:10:FA:D7:6A:D7:A0:14:20:ED:9D:AF:00:56:E6
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 01936CD9BA681F521717633F92DB81C0FE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 137D
Signing time: Wed 27 Nov 2024 09:00:28 +0000
Manifest this update: Wed 27 Nov 2024 09:00:28 +0000
Manifest next update: Thu 28 Nov 2024 09:00:28 +0000
Files and hashes: 1: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: euiXlLPm7Ap2wzQ343PsSIidc+9jt4vUEZxL7OJNHzQ=)
2: EXljFEm0HoEN5NRaghbz2v7ET6k.roa (hash: EQPbj93LwBk3BiGy/R9oEn4r1z8lD7CnSh09frEjdOc=)
3: tRiqCeK-RCIxImDOlIWwN4gpe8g.roa (hash: NNB+iCtMzfiVoHrc1iIyUvyK1eZPjOSEc2JH614Z7mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:d9:ba:68:1f:52:17:17:63:3f:92:db:81:c0:fe:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Nov 27 09:00:28 2024 GMT
Not After : Nov 28 09:00:28 2024 GMT
Subject: CN=ee802fe5148110fad76ad7a01420ed9daf0056e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:6d:bf:46:5c:b5:85:73:4e:66:c3:97:4d:
5c:63:b4:4c:94:32:27:00:eb:d4:cb:95:ea:e3:25:
70:9d:c9:fd:af:ae:12:4e:69:32:cd:bd:d4:fc:69:
46:32:70:14:b7:49:aa:53:a5:83:f9:54:cc:3c:75:
6d:23:64:26:d4:b0:b5:59:19:19:3c:74:f8:af:59:
d9:69:54:a4:ab:c0:b5:fc:a5:df:d8:88:9b:db:46:
f4:ee:f0:bf:23:e6:18:10:12:77:08:cd:04:ec:2d:
cb:2b:72:ce:d6:68:84:79:c0:85:59:71:94:54:88:
0c:f5:bf:fa:1a:0f:1e:2c:19:d0:08:e5:f3:00:7d:
a7:e1:79:fe:49:48:b3:7a:7c:38:f3:c8:3b:f8:9a:
71:49:d5:a3:78:c9:ad:d2:87:23:b7:98:ae:92:c9:
a9:f5:c4:24:8b:69:35:f5:38:72:0a:22:62:e7:40:
6d:24:06:53:c2:76:c8:94:80:75:ca:30:b9:f4:e1:
06:20:54:78:38:ea:fd:3b:5f:1b:86:e3:13:70:67:
b1:69:1b:40:eb:8e:0c:36:92:4f:6a:24:53:26:ad:
51:c5:9c:6e:cf:26:8d:2b:6b:e4:9e:77:31:16:04:
53:cc:45:b7:cf:be:85:8d:6e:06:a7:a1:e2:9f:ce:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:80:2F:E5:14:81:10:FA:D7:6A:D7:A0:14:20:ED:9D:AF:00:56:E6
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:dd:c0:70:1f:74:84:ae:78:2c:31:a9:d6:f0:5b:ec:30:ad:
06:52:a6:0d:15:e5:53:c3:32:5e:33:82:95:09:2f:0a:7b:21:
d6:77:f3:19:77:4a:92:57:32:50:3d:47:92:2b:e2:c1:09:ab:
53:1d:2b:56:13:cc:e4:66:90:cc:1d:b0:9e:44:24:44:ad:9c:
e6:f7:21:4e:c0:03:f2:5a:82:eb:eb:b4:79:9e:d4:1b:17:48:
44:f2:74:1d:13:86:55:69:fa:e6:e2:62:bb:0a:47:68:fe:03:
4b:be:c1:8c:d4:c1:67:68:7d:0e:a9:42:69:5f:1b:00:c4:ac:
df:26:47:11:f0:1c:fd:ad:ee:67:23:e5:53:c9:6f:70:37:c6:
7c:68:5e:f0:e8:af:91:56:4a:cc:70:b7:46:7a:6a:73:7b:28:
33:43:d3:dc:f4:9a:77:65:df:6c:1c:1c:ba:89:6e:b0:38:bc:
d5:9c:eb:d8:1c:0c:b2:11:e2:89:a3:9a:29:5e:74:46:6e:d0:
f9:4d:c6:c0:a6:16:e7:18:9c:d0:64:7b:a5:68:90:76:cb:16:
b7:6d:ec:3c:51:63:23:e3:51:0c:65:0d:d0:b3:d8:e3:25:41:
1d:48:a9:e4:7e:9e:bc:4f:87:90:4e:a0:d3:06:b1:25:76:72:
e5:81:60:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 10:45:56 2024 by rpki-client on console-fra.rpki-client.org