Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
File: Ss70X7sPJpMK64M895_EHiLKkjU.mft (raw, json)
Hash identifier: OKhueK86HgYdwaCtsMDt86nugA3txC8hhPMYv6K/i9w=
Subject key identifier: 20:43:54:FD:60:05:EF:EA:DB:D3:0E:95:85:AE:63:BD:28:74:90:2F
Authority key identifier: 4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
Certificate issuer: /CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Certificate serial: 0193580913AF9EF830CD5A4FA6B72A6AEB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
Manifest number: 12BB
Signing time: Sat 23 Nov 2024 08:00:10 +0000
Manifest this update: Sat 23 Nov 2024 08:00:10 +0000
Manifest next update: Sun 24 Nov 2024 08:00:10 +0000
Files and hashes: 1: Ss70X7sPJpMK64M895_EHiLKkjU.crl (hash: tHzoXVp1JzNdtDS6DWBJHN9tPI1L2Cq2FkDR298BpzE=)
2: a9TCEibu_xG03bDR86QjG3m9Hfo.roa (hash: 23dKojigYJOGcirtTpMO1twBsjeyMrHdylRzUb3fu+s=)
3: xACC0mpwH-tO0JoEc4LghPkqqZk.roa (hash: 17AdF5s5qqzPval8OEZaqiVYN8RTjsPgwtvKhT9fxwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:13:af:9e:f8:30:cd:5a:4f:a6:b7:2a:6a:eb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acef45fbb0f26930aeb833cf79fc41e22ca9235
Validity
Not Before: Nov 23 08:00:10 2024 GMT
Not After : Nov 24 08:00:10 2024 GMT
Subject: CN=204354fd6005efeadbd30e9585ae63bd2874902f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:b5:d8:fd:a1:4c:26:53:69:60:33:d7:8c:
cd:23:e9:a0:46:68:cd:1c:38:26:93:04:0f:2b:83:
c0:dc:95:1d:63:20:69:ff:bd:4f:ab:18:40:39:fb:
2b:08:85:94:06:9b:f5:dd:d1:7c:09:a7:7f:12:5f:
14:d6:b1:fb:e9:5e:2e:89:e5:3b:56:88:51:80:32:
f4:26:e3:3a:07:bc:96:68:2b:73:74:b2:72:54:a2:
b7:ea:74:a1:c4:c5:b8:5e:15:92:ff:67:6a:0b:20:
93:79:f3:3f:87:de:54:5e:13:7d:7d:39:cb:0c:3c:
07:cf:75:dd:a2:96:3a:2e:70:a1:eb:79:02:d7:b4:
4a:ab:29:2f:3f:0b:93:03:ef:aa:5f:ae:2b:d4:9b:
c4:5d:f8:60:2b:4d:b3:d8:6a:83:c4:aa:8c:f1:ad:
66:fa:3e:e2:bf:3d:8e:0d:68:3f:05:1e:e9:1d:92:
ce:51:6f:ef:d5:d9:c4:e2:13:e9:13:65:02:6c:79:
57:db:8c:01:88:a6:f6:4e:1b:4d:1d:d4:3f:d2:e0:
49:02:41:3d:30:ae:c6:36:d5:b4:ae:58:67:3b:3b:
02:cb:b0:57:ba:29:5d:71:b3:47:0b:06:c2:14:ad:
44:1c:32:18:6b:f6:61:70:d5:21:d1:c0:5e:cb:58:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:54:FD:60:05:EF:EA:DB:D3:0E:95:85:AE:63:BD:28:74:90:2F
X509v3 Authority Key Identifier:
keyid:4A:CE:F4:5F:BB:0F:26:93:0A:EB:83:3C:F7:9F:C4:1E:22:CA:92:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss70X7sPJpMK64M895_EHiLKkjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/97fb36-ea9b-43f4-aad5-06f7290dc44a/1/Ss70X7sPJpMK64M895_EHiLKkjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4b:44:ce:35:93:ef:4f:b5:cf:52:4d:1a:61:c6:a0:39:08:
e3:56:fe:50:10:ce:b4:6d:37:60:78:2d:61:3e:cc:bf:62:5c:
dc:8c:c3:66:bc:4c:4b:61:37:71:59:31:7d:e8:b4:45:f9:2b:
3c:13:d2:19:6e:af:5a:17:41:80:7e:3c:66:70:3f:39:da:4f:
43:68:97:e5:4d:a2:c1:f7:dc:a6:83:0d:02:bb:e2:bb:58:81:
12:70:af:88:a2:01:c8:99:5e:ff:fe:3e:51:84:b4:a9:f5:70:
5e:6e:78:6c:d9:c6:29:20:82:20:df:34:2a:a2:33:4b:81:db:
65:d2:5c:d3:83:1b:5f:c1:fc:3e:88:c8:bc:55:39:84:1d:ae:
ff:3c:ad:14:a3:3c:ef:71:e3:d9:b0:dc:4c:62:99:f1:e5:60:
f8:e1:36:4f:9a:d9:24:b4:60:4e:41:01:5b:9c:a6:21:14:6e:
a5:a6:1b:cd:14:1d:d4:24:9c:ed:a3:90:d8:a3:0a:a2:26:d3:
21:7f:29:2f:95:61:da:f6:b9:0a:1f:55:a3:d9:1c:01:cc:ce:
67:bc:79:59:ad:72:e0:1d:45:36:0a:49:65:75:34:19:32:00:
f6:d8:d1:c8:e8:0b:34:1f:dd:9f:01:30:66:f9:5e:79:0d:f9:
ce:09:71:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:19:17 2024 by rpki-client on console-fra.rpki-client.org