Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
File: PrEhzwYygZ7s6r64qVVpxnUpiCE.mft (raw, json)
Hash identifier: EWlhi2BQsyGotix5G/a/OyuA2LWfJGxS0kFCgvQY6tY=
Subject key identifier: F3:A0:85:A9:C2:C7:38:E8:3C:00:B5:EB:1C:85:F6:13:0D:83:95:38
Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821
Certificate serial: 019369340704626F59921A117CE1B01C95ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
Manifest number: 0EFE
Signing time: Tue 26 Nov 2024 16:00:37 +0000
Manifest this update: Tue 26 Nov 2024 16:00:37 +0000
Manifest next update: Wed 27 Nov 2024 16:00:37 +0000
Files and hashes: 1: PrEhzwYygZ7s6r64qVVpxnUpiCE.crl (hash: UZjHI1Nt+gPwNb3uHHNcjth9BMCCyNGbGMvKifgCHyg=)
2: qDY7COzGCI6FKy2BRC_0A3sfUsU.roa (hash: u5ePAXrl3vQGoISm+8xqP12Dder+ASUT837B6IMub9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:34:07:04:62:6f:59:92:1a:11:7c:e1:b0:1c:95:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821
Validity
Not Before: Nov 26 16:00:37 2024 GMT
Not After : Nov 27 16:00:37 2024 GMT
Subject: CN=f3a085a9c2c738e83c00b5eb1c85f6130d839538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:9e:0b:a6:e2:29:43:74:25:b7:e5:9c:f0:
d1:1d:38:04:a6:19:06:0c:5d:39:85:e1:3d:e5:ec:
bb:87:9f:63:7b:b3:f9:c8:d2:59:1c:c9:ab:7f:ba:
a9:9c:8a:13:e8:a8:9e:6f:fc:3b:e6:61:3f:0d:fe:
6a:73:f0:21:03:91:94:ae:d7:25:71:f5:11:9d:31:
26:15:ab:68:c1:6c:bd:3b:72:dc:2c:40:6a:c5:02:
29:4a:a5:69:b9:d5:85:10:ff:7e:d2:fa:0f:ed:d2:
d3:55:69:f0:fb:21:95:68:56:42:50:25:27:9d:09:
0f:f5:6c:da:ae:4a:8b:b7:70:01:dc:9f:0e:2a:81:
fa:04:0f:a0:72:e7:f6:d8:e5:a5:a9:5f:32:f8:8d:
40:39:28:95:79:0f:29:4e:af:fe:13:bd:e9:46:bf:
ac:83:d7:e1:6f:bb:72:b5:6e:28:9a:9c:42:78:e1:
ba:a3:8a:6e:6b:15:a2:07:77:be:a2:bf:a2:53:98:
f7:8d:62:b7:e3:01:79:a9:2c:4e:b6:2c:88:04:cf:
22:1b:cb:32:23:b3:1c:d2:4a:b5:9b:12:89:8a:40:
ab:14:d6:21:c5:3f:dd:ec:29:8c:8a:37:98:db:3e:
7c:3e:76:9d:a9:93:c1:d6:3a:0a:cf:19:0c:97:e2:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A0:85:A9:C2:C7:38:E8:3C:00:B5:EB:1C:85:F6:13:0D:83:95:38
X509v3 Authority Key Identifier:
keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cc:93:ae:94:60:11:48:08:ce:38:da:86:a9:50:77:ff:b2:
81:83:3d:98:08:d3:c8:82:44:19:02:fc:fd:e6:64:e6:3f:39:
f6:ff:87:7a:b2:4d:52:55:36:00:f1:14:d0:7b:6f:01:07:75:
1f:b0:2a:70:e2:1a:5d:e0:14:90:54:41:29:aa:8f:77:27:cc:
43:75:58:7f:d2:8f:2e:8f:45:5e:c5:30:20:be:9d:14:bc:e4:
0b:46:70:0a:8e:ab:4a:c6:fb:ac:4e:71:6c:20:e1:85:86:b1:
ee:98:11:f8:af:8e:84:ba:bf:45:cd:2b:ac:fe:ee:b2:37:b3:
bb:77:39:3b:80:4a:6a:80:ab:c8:8e:31:1a:45:ff:38:04:6c:
d9:13:9c:cf:82:c7:a5:c8:c0:31:a8:42:44:4f:7b:61:e2:1f:
b7:e4:76:9d:cf:7f:63:95:1f:93:03:3a:54:b3:d4:3a:c4:69:
72:30:22:f6:91:7b:32:81:91:0d:90:9c:63:75:89:55:65:04:
92:ed:95:17:dc:55:82:1d:11:ac:a7:50:7a:80:27:11:62:6e:
72:ce:4d:ea:dd:37:f3:a6:f7:9c:73:9d:c5:ad:5a:66:a2:f3:
84:ba:93:1c:26:6d:fb:dc:fd:15:ba:f1:a3:21:25:de:f1:73:
f4:29:f1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:35:35 2024 by rpki-client on console-fra.rpki-client.org