Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
File: s5HsSXtk1hEkn95Zel7ofpM31e4.mft (raw, json)
Hash identifier: BxaPvQ57eeMYkEBw8M9N2bJOMevg3QOdBMyqQRqNAwk=
Subject key identifier: 8A:94:B0:68:6C:EC:17:F1:28:AA:F4:B4:6B:04:1A:95:92:E3:4B:61
Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Certificate serial: 0193549A9254965DC13EDAF7C1D46562EC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
Manifest number: 0311
Signing time: Fri 22 Nov 2024 16:00:36 +0000
Manifest this update: Fri 22 Nov 2024 16:00:36 +0000
Manifest next update: Sat 23 Nov 2024 16:00:36 +0000
Files and hashes: 1: onRSN487Z3F6FKkX0v711AYiJMk.roa (hash: RsEWfE6I4p5GpwQB8eX07jCz2vkomr/rb35BWNwr+zQ=)
2: s5HsSXtk1hEkn95Zel7ofpM31e4.crl (hash: SnM8tWJuSGDulyaKp7DmjFLR72xq2CFU/BjtC8KdlNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:92:54:96:5d:c1:3e:da:f7:c1:d4:65:62:ec:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee
Validity
Not Before: Nov 22 16:00:36 2024 GMT
Not After : Nov 23 16:00:36 2024 GMT
Subject: CN=8a94b0686cec17f128aaf4b46b041a9592e34b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:fc:df:65:ab:d1:2f:95:e9:ce:8e:70:a3:
ce:00:40:32:dc:b5:56:cb:2f:39:98:17:25:8f:7d:
7c:a6:12:85:71:b4:05:35:46:16:0e:bb:ea:19:f1:
e9:ed:9f:ef:31:a9:ce:d9:82:93:7b:27:b6:f1:17:
27:16:8f:e6:a6:be:1d:92:ef:21:a4:d8:b7:40:58:
33:6e:77:f4:99:b6:b0:ab:10:75:3b:32:01:51:97:
54:5c:c1:5e:a9:60:df:67:ac:25:61:c6:ed:ab:5b:
68:c7:54:69:49:76:c1:d4:45:19:66:a9:3e:45:3d:
29:2a:b9:ae:fd:60:56:ea:ad:76:ff:17:75:d6:12:
74:a0:d1:48:95:8d:d8:76:f2:6f:75:bf:62:5c:2a:
18:f5:eb:3f:ff:db:ad:06:2b:cd:3e:0d:97:f5:e9:
24:f1:45:a7:0d:a5:d1:a8:9f:57:09:f6:64:de:f8:
04:67:b6:3d:dc:e5:2f:d1:2f:da:bb:4f:b0:f6:03:
32:04:02:33:64:58:a5:db:6a:28:59:f3:aa:67:8e:
97:42:85:51:79:6d:9e:ae:7f:c8:e2:12:c5:3d:72:
4e:99:1c:f7:3f:3f:f8:be:c5:ec:d7:d0:df:71:36:
1b:c7:c6:78:ce:e1:87:cc:a6:37:f1:43:a2:61:ae:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:94:B0:68:6C:EC:17:F1:28:AA:F4:B4:6B:04:1A:95:92:E3:4B:61
X509v3 Authority Key Identifier:
keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:31:81:60:e9:1a:fd:14:d3:5a:28:e8:cb:21:58:0a:7e:f0:
15:bc:ff:d7:86:a0:e8:c3:4b:23:db:95:b8:fd:21:5e:14:6b:
69:0b:5c:5c:08:7f:f9:4b:96:36:ac:42:47:b4:16:ac:bd:07:
46:4e:9c:52:1c:9c:d8:41:a5:a7:58:c5:6b:c6:7c:e7:09:4a:
31:9f:ba:48:19:55:ab:1f:ce:f3:e3:cd:f3:0f:00:0c:bf:15:
d0:0a:f2:bb:70:53:dd:16:78:fb:83:0b:64:e1:ac:5f:b5:81:
29:4f:35:96:62:0d:ed:26:a4:8d:83:33:f3:dd:05:41:83:41:
c4:1f:3f:97:e6:a4:21:e4:1e:7a:9e:1c:7e:d1:b5:ce:b1:96:
92:93:91:28:03:b1:de:f1:f0:b6:34:de:47:bf:37:08:9e:49:
3a:92:65:25:1c:77:7a:a8:12:b4:93:d4:66:9e:15:8d:64:05:
18:de:3c:6d:05:18:59:44:1d:44:34:7b:3b:2a:a5:1e:6c:76:
f5:9e:2d:8f:e0:61:8a:65:75:a8:2e:46:fc:86:da:e6:1c:ba:
b4:44:4e:5b:e9:b8:c5:a6:fe:48:ca:91:62:d5:b3:53:28:7b:
57:a5:bf:79:06:a8:00:8b:b9:13:8c:b0:53:86:60:a1:bf:f3:
19:93:5b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:45 2024 by rpki-client on console-ams.rpki-client.org