Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
File: e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft (raw, json)
Hash identifier: 36TIbOGXc7ua5eSYkob+3vBAYnnnAjV7F3WSPn9wOxQ=
Subject key identifier: 8F:FE:2B:0A:25:71:EB:7B:AD:BE:00:8B:C2:62:84:CE:AF:13:FE:9B
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 01935162AE8CE8550754F3CA5510B0055DF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
Manifest number: 0228
Signing time: Fri 22 Nov 2024 01:00:41 +0000
Manifest this update: Fri 22 Nov 2024 01:00:41 +0000
Manifest next update: Sat 23 Nov 2024 01:00:41 +0000
Files and hashes: 1: OHIVfyYGDx1hn5LgfA6mLomn8b8.roa (hash: mFm7Y28dIq97Gq7fhwe2Hd/4gVYdVYHXZNQGAGKQla0=)
2: e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl (hash: Sgj0eQSJvE20xkKoTSdxZEtmplvwm9F3bpy9VyLTG0s=)
3: xL8fGSJTzJymvlcUdhZ1YiG9A40.roa (hash: kOUYyitJsr3ZsMmEiPy69JC2/9LlwKqLgC54a4JnJDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:ae:8c:e8:55:07:54:f3:ca:55:10:b0:05:5d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Nov 22 01:00:41 2024 GMT
Not After : Nov 23 01:00:41 2024 GMT
Subject: CN=8ffe2b0a2571eb7badbe008bc26284ceaf13fe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:58:08:d4:51:52:07:d5:53:f4:4a:67:b6:
0f:0e:df:d9:9a:6c:e1:d0:3f:78:ff:ea:91:b7:7b:
95:65:84:8f:ab:da:a5:e0:53:7d:f4:f6:15:03:10:
6c:0c:0c:25:6a:12:49:56:4c:b3:82:04:92:56:97:
15:75:d8:f4:90:20:6d:14:e0:96:a3:77:62:48:16:
7c:04:90:43:72:92:7a:69:0c:5a:1b:7a:81:c9:06:
8f:11:7d:40:2e:df:65:34:99:4b:af:ce:fe:33:6c:
b6:1e:bc:1f:d4:83:31:4c:ee:68:41:51:54:eb:86:
c9:f9:c1:c9:b8:72:2b:34:87:13:38:b5:b8:69:3f:
5d:b8:37:64:4c:83:0e:19:98:2a:b1:aa:3f:77:b7:
9e:ab:67:e7:19:90:ad:20:28:dd:d1:6b:bb:2d:92:
b9:c3:72:98:71:01:7d:8b:bd:00:b3:38:20:43:c7:
2e:8d:96:8f:f6:4d:28:05:d1:39:78:73:48:33:e5:
08:9e:b1:4f:c4:25:8a:41:a4:48:39:5b:c7:41:14:
1a:6d:7f:1a:73:93:00:bf:4d:11:a8:4d:8a:05:82:
66:ce:ec:4c:c8:c7:a7:fb:bf:a4:f0:d8:98:87:48:
2b:c8:52:2f:e1:a0:53:f2:a1:68:ea:7f:f6:51:70:
d9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FE:2B:0A:25:71:EB:7B:AD:BE:00:8B:C2:62:84:CE:AF:13:FE:9B
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e9:c9:05:96:0c:94:5f:55:aa:f9:b0:ef:50:a6:65:2b:71:
64:8d:cf:d6:97:ef:1a:2b:94:72:3e:9f:cc:14:cb:6f:b1:7f:
04:f0:62:03:a9:a3:1b:f3:8a:ce:9e:91:43:f2:48:5d:b5:99:
20:04:bd:9a:2e:bc:80:c5:29:8c:90:d4:b1:57:bc:73:b5:ef:
30:d8:42:5d:cc:f7:aa:0f:80:ef:f2:d3:1f:50:48:7e:66:0c:
1e:df:d4:bc:01:9a:33:61:5f:60:e2:57:16:99:27:93:1a:57:
92:09:95:e9:e8:17:b9:a8:ac:24:ab:e4:52:e1:fe:2b:a4:b0:
2a:eb:eb:41:8c:74:1e:85:83:68:86:91:f8:a9:0d:24:b8:0a:
d5:28:be:a9:00:49:06:f5:50:b5:57:03:96:cb:c4:21:53:f2:
76:0e:d1:12:a1:8d:69:79:7d:8d:59:91:24:65:33:66:83:7e:
20:f6:b1:a5:68:a0:8f:ad:7f:36:0c:f3:5d:cd:4f:37:5f:cd:
96:6b:08:1e:1e:69:63:23:64:a9:38:08:b9:5b:48:45:41:85:
a8:f0:6c:b0:c9:8f:ce:8c:dd:26:8c:e8:f9:61:a9:bf:11:48:
70:8d:df:f9:2d:9b:21:ac:33:07:32:3d:48:ce:b6:bf:88:03:
f7:35:b8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:20 2024 by rpki-client on console-fra.rpki-client.org