Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: OaovNmrZ+rE4iMr8b49Iw6IlLmFej+OrqlbDXkCJsCs=
Subject key identifier: 37:FA:5C:28:EA:24:D2:ED:AA:F0:30:36:06:61:D5:61:55:12:46:6F
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 019238BACF6681B9529F6366D923B5FF0BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 1A
Signing time: Sat 28 Sep 2024 13:03:39 +0000
Manifest this update: Sat 28 Sep 2024 13:03:39 +0000
Manifest next update: Sun 29 Sep 2024 13:03:39 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: YeZQmgxSx7YWcVug71oS5CYiG2kEaKQv6oJmnRQx7EA=)
2: MIERoqU1l9fdal5P1MqC5QWZMCE.roa (hash: F7SOWbbAEr/qmcXmEP2NjLScovNG2vUA8qrAAR9zTyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:ba:cf:66:81:b9:52:9f:63:66:d9:23:b5:ff:0b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Sep 28 13:03:39 2024 GMT
Not After : Sep 29 13:03:39 2024 GMT
Subject: CN=37fa5c28ea24d2edaaf030360661d5615512466f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:e9:af:c5:8a:f0:0b:8c:c7:90:b6:a5:e4:
2d:43:4b:24:6d:af:71:d6:ea:b3:56:f3:2f:0e:84:
50:95:59:b7:eb:8a:f7:d5:4f:1c:ae:66:a3:88:62:
71:ef:3c:e2:cc:5b:07:88:83:d8:cb:e0:1d:43:e4:
1f:ce:c2:c2:6d:01:34:73:ec:d0:66:94:47:cd:e4:
4e:c1:e8:31:9e:d7:8a:54:44:89:4f:b3:4f:57:01:
b0:41:2a:54:09:b3:84:08:14:1e:6b:60:45:b6:aa:
23:47:4b:c1:9e:66:d8:14:b7:1f:e0:90:67:ef:4a:
43:5e:64:1c:83:55:4d:2f:4f:89:90:e0:d9:c4:d6:
94:af:e5:a3:a1:48:64:7f:d2:7a:5a:fb:4d:88:e7:
7d:88:9f:5e:0b:e7:9e:fa:8a:a1:b7:d7:3d:fa:af:
b8:d6:4f:e5:b9:15:01:5c:bc:00:3a:5c:1d:50:ac:
b1:b4:21:c4:1f:b1:d8:41:ff:16:68:a9:e2:13:59:
19:4b:f8:13:eb:b2:56:7a:2a:09:d4:a6:d5:b3:e7:
43:fe:ee:02:21:66:70:aa:60:4d:92:01:d2:10:68:
28:f9:23:76:b9:b8:28:9a:d3:6c:ab:be:9f:d2:a1:
58:63:3d:da:49:a4:f5:00:7c:1c:ac:0a:a7:26:c8:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FA:5C:28:EA:24:D2:ED:AA:F0:30:36:06:61:D5:61:55:12:46:6F
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:28:5e:1e:c1:c9:ee:bc:c5:53:fd:70:f9:17:ab:a6:93:d0:
8c:88:d0:f0:09:91:92:a7:d1:3a:d9:8e:98:37:8a:94:bc:be:
a6:0a:72:d3:ea:44:ff:7c:ec:ab:28:f2:3d:12:c2:d9:ef:27:
09:39:1b:af:53:f5:73:06:15:2c:70:32:81:1b:95:ee:e5:f6:
68:b1:30:e2:2a:1f:02:01:8d:7f:40:63:f1:35:0c:27:04:a6:
d0:18:69:f8:c9:56:46:26:57:c9:a8:e2:0c:6b:da:d0:1f:bd:
1a:39:24:4a:e6:dd:f1:b7:32:dd:0f:4b:3c:0b:10:bf:69:2f:
73:88:69:1b:a6:28:06:e8:fc:22:15:f1:3c:19:71:b3:a3:84:
e8:df:f3:17:3a:98:2c:ac:7a:08:b1:e8:bf:59:8e:7c:ae:66:
ea:c7:b8:01:b2:5c:03:18:f1:eb:ce:28:6e:8a:28:21:44:2d:
b2:91:18:9b:b2:d9:18:18:bd:99:a1:de:15:18:81:19:c2:9c:
a2:c4:d3:fa:d8:8b:8e:db:61:6f:db:54:b2:b3:d8:d5:b1:8b:
59:59:de:5f:59:d1:89:a8:74:d0:38:c9:2f:48:37:d9:9e:8f:
49:35:27:e3:20:f3:fa:eb:3a:fe:84:2c:26:5a:4a:4a:bc:c7:
d0:7b:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:01:55 2024 by rpki-client on console-fra.rpki-client.org