Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: 81uZYhbkFPmf5w51KD+PTm8cEeeGBORxeZj+buQ60uc=
Subject key identifier: 7C:DF:78:EF:07:F4:66:7A:71:E9:E2:95:FC:F0:09:88:55:8A:E2:26
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019357D2D28E68A2E2E993715B24525D3984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 138B
Signing time: Sat 23 Nov 2024 07:00:54 +0000
Manifest this update: Sat 23 Nov 2024 07:00:54 +0000
Manifest next update: Sun 24 Nov 2024 07:00:54 +0000
Files and hashes: 1: 1bXQyvsRNbmrrr44-2jNb7ldHj0.roa (hash: JTjNv+ceMoDmo+YhOd+ava87RJxuWwj/bcI+ShCgIhU=)
2: ZPZGNE6QPIULeHcuT6THhw5DvDk.roa (hash: 2uGp2Aaz7irmTliU9AJ2qIu534Q43k2yqE8NOYR4HNE=)
3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: +UW4gFj9eRQNZirLMHNc4Fy0YVZrKQLdyQZkob13STA=)
4: nwPeNLo1IA8DkU9FQsEL_ZUcdC8.roa (hash: F0+oqu0uTUKLz4z8oU7/CmMvG+kmgsKrOYE/RLvfQ5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:d2:8e:68:a2:e2:e9:93:71:5b:24:52:5d:39:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Nov 23 07:00:54 2024 GMT
Not After : Nov 24 07:00:54 2024 GMT
Subject: CN=7cdf78ef07f4667a71e9e295fcf00988558ae226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:49:92:7d:32:41:cc:a0:e0:4b:a3:9b:9f:
11:c8:eb:17:20:76:ac:85:a1:00:6d:6b:f2:83:33:
d4:fc:af:a5:9c:6a:38:21:3b:2d:e6:b3:fd:58:96:
42:67:65:52:1e:81:79:1d:3c:0b:d1:30:e0:a4:48:
b2:e9:8c:ac:55:28:97:a7:bc:1e:37:e1:91:a0:da:
79:5f:e2:30:b1:9b:56:29:7d:1a:14:27:60:25:4f:
a8:c6:bc:72:05:50:59:0e:41:e5:6b:aa:6e:3c:09:
10:5a:2d:48:68:98:27:4d:8c:14:ff:0d:12:a9:3a:
93:17:ae:ac:b8:4e:93:a8:e0:6b:e8:cb:a6:6c:25:
95:f6:11:48:8d:01:5a:af:3e:6e:0a:69:c9:7e:ef:
3a:fb:5e:2b:01:5e:c8:cc:59:ed:a6:1c:5b:aa:53:
e9:17:93:10:b0:e1:29:7e:22:d3:01:09:66:28:43:
aa:49:15:fe:d3:94:52:3c:f2:77:58:d2:13:7b:83:
6a:69:f8:d9:0f:97:da:01:4c:75:7e:7b:ef:26:91:
73:e0:8f:51:a8:49:a3:11:0a:9a:15:22:fe:6d:49:
e3:50:24:ea:69:4e:c5:96:ad:99:ca:da:cb:67:61:
d7:6c:55:ba:ec:98:e9:aa:c8:2e:6e:d1:aa:98:bc:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DF:78:EF:07:F4:66:7A:71:E9:E2:95:FC:F0:09:88:55:8A:E2:26
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1f:68:f6:0b:ce:44:79:41:d6:30:6f:b5:4b:52:76:0d:2f:
29:bf:8b:49:a6:22:a1:81:eb:27:a8:97:4d:20:52:6c:93:1d:
24:14:fe:d9:89:d8:07:0a:5a:1f:19:e9:12:88:93:f3:7f:f6:
c1:8b:e3:f7:d7:80:b7:0f:29:90:ba:36:a3:32:71:0e:b5:28:
c3:ad:19:50:8e:9f:96:1d:1b:4c:9b:c8:6c:fc:4d:fc:c6:b0:
44:5e:7c:be:f4:8d:a4:4b:e4:21:1c:f2:5b:eb:84:98:5d:53:
4b:c0:89:95:49:31:74:ac:cc:bb:a9:2a:85:41:c9:06:f1:81:
fd:2b:96:07:7c:b5:02:b8:17:29:79:e9:20:b6:f9:3a:b3:e9:
85:ce:ee:0a:bb:e3:87:d3:3b:ae:05:46:b6:75:aa:6c:0e:f4:
bb:ec:8e:95:ea:3b:9b:e4:66:4d:d3:de:b4:6c:98:f4:74:45:
db:35:ac:22:d4:71:b4:04:50:4f:2d:8a:f6:1e:db:cf:e4:d4:
a3:12:1f:a1:24:f2:ac:5e:3a:ad:49:36:70:12:68:a0:f3:25:
f5:a0:c5:7e:20:bf:df:ee:89:f7:60:8c:e0:cf:b5:03:9d:15:
88:d7:af:04:47:a1:7d:26:e9:a3:10:2b:51:5a:48:a0:c0:33:
9c:99:15:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:56 2024 by rpki-client on console-ams.rpki-client.org