Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: A1O+ayz7/A++kn89PSAxxd6AjOx9zbwmt43Sj8MusA0=
Subject key identifier: E0:B2:40:E7:C6:2D:E9:E4:B2:A0:56:D2:8B:B3:96:8B:82:09:E8:7B
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 019355E48A9F22E6751756F7F8B4C47F98D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 0357
Signing time: Fri 22 Nov 2024 22:01:01 +0000
Manifest this update: Fri 22 Nov 2024 22:01:01 +0000
Manifest next update: Sat 23 Nov 2024 22:01:01 +0000
Files and hashes: 1: HjAjT39aXpYLw1z7v6rIupa-Ygk.roa (hash: XkaQZ5RK/xIryCN1D25OfDv6bzkrGzvh/7ttQ2ao2Mw=)
2: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: /rGXvuoBPd0tx+QVab8HMdqcdnXwevsDt/K5nqDW9rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:8a:9f:22:e6:75:17:56:f7:f8:b4:c4:7f:98:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Nov 22 22:01:01 2024 GMT
Not After : Nov 23 22:01:01 2024 GMT
Subject: CN=e0b240e7c62de9e4b2a056d28bb3968b8209e87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:a1:94:ea:aa:39:92:e0:79:b9:24:65:5e:
8d:1f:00:e1:00:17:10:b1:b9:0c:d5:37:7d:cd:02:
24:0e:8d:6b:83:10:fd:7c:7d:f9:df:66:28:88:31:
d1:7a:c3:d1:e7:89:03:2b:50:3f:00:22:6f:e0:6b:
a7:65:27:a2:fb:b0:3b:0e:ad:ac:bd:47:3c:dc:c6:
04:60:e4:54:ed:2e:53:27:cd:85:c5:f4:80:d0:d9:
11:cd:ba:35:a8:cf:80:ae:7a:5d:06:ff:93:a4:91:
4f:e8:48:85:54:3f:70:2d:9d:ca:8b:7f:6e:b6:6a:
55:07:f5:00:45:ba:e1:5c:6e:89:59:a9:89:ce:60:
73:1a:04:ea:fb:71:73:09:21:60:54:16:20:98:84:
22:d1:65:11:a7:96:8f:47:26:e3:6c:63:df:3b:8e:
36:30:82:ae:a8:cc:9e:2f:26:59:ae:12:b9:2d:5d:
15:3c:f3:4c:be:e5:be:7c:08:b7:dc:e9:62:77:98:
4b:6d:90:37:44:68:ec:38:b9:2a:c9:8e:ce:d4:a9:
74:0e:5b:60:c4:ea:e2:67:26:cc:50:ef:16:3b:b2:
20:96:c4:3d:61:2b:c6:ab:52:9f:fc:87:bb:aa:aa:
8e:72:00:b1:00:61:45:c8:1c:b0:89:14:1b:de:fe:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B2:40:E7:C6:2D:E9:E4:B2:A0:56:D2:8B:B3:96:8B:82:09:E8:7B
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0e:59:b5:af:55:35:c6:ee:63:85:11:f9:ef:8b:d0:9c:25:
b8:ba:a0:54:32:2b:1d:c0:16:2b:57:cd:b9:cc:ce:4b:37:e0:
1e:f2:85:ac:5b:ba:d9:e1:b4:29:fd:e0:5f:6c:17:50:15:e4:
e8:b8:2b:f8:f4:ba:5b:d1:1a:1c:1a:c6:78:3c:2f:a9:53:41:
d6:a0:91:8e:6a:f2:ae:ad:ff:02:66:2f:dd:56:03:bb:57:ef:
38:1e:74:f8:ef:b3:84:49:2a:e4:8f:bc:cf:11:a3:8f:8a:50:
f3:49:c2:a2:59:65:c8:72:3f:d9:4f:36:6b:08:41:88:55:17:
c9:7f:7c:b9:ee:35:57:80:57:8a:2e:c0:ee:81:f0:e7:d4:3b:
7e:7c:b1:2a:a4:c2:a5:7f:23:46:90:54:9d:b6:2b:c9:c4:d0:
c7:d4:1f:b8:b4:61:95:ed:78:ad:9a:08:c7:7b:40:a1:30:21:
74:a1:86:c8:e8:ae:f0:e9:3c:29:b2:a7:aa:d8:0f:4a:25:12:
e5:83:ef:90:c1:50:18:bb:d6:14:e3:45:d5:5e:d6:84:50:db:
0e:a6:79:d2:1e:4a:44:ba:5a:81:b2:0c:54:66:73:2b:b2:07:
ca:7c:b3:0c:92:9a:52:72:ef:a9:67:d5:91:d1:11:54:75:48:
a1:25:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:43:35 2024 by rpki-client on console-fra.rpki-client.org