Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
File: L9lxonxvwsZi8GXdi_qLihMsHq4.mft (raw, json)
Hash identifier: 0l4rSk35GpA0i6iY8dhWvEv+oZ8KP1acdyeUplld6jQ=
Subject key identifier: 63:A4:F7:34:0E:A3:B3:3B:BD:FA:D7:39:E7:9F:C6:2C:C4:45:C7:DC
Authority key identifier: 2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
Certificate issuer: /CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Certificate serial: 019235497B938C399459F9D8243D95F1B709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
Manifest number: 0ACF
Signing time: Fri 27 Sep 2024 21:01:01 +0000
Manifest this update: Fri 27 Sep 2024 21:01:01 +0000
Manifest next update: Sat 28 Sep 2024 21:01:01 +0000
Files and hashes: 1: BjgxXw5dB_wuQ0ZRzXS45sCbI2M.roa (hash: nSybFFrjmEruKoTvku3jHfun9w/b6/3srwb2Ve09tHs=)
2: Gi9vxsbGv7TXvWaOEgekBanjuT0.roa (hash: JOBhjIfBMZGvIblLBW8vH46rmW/4zCUevGoOsbzZB0A=)
3: L9lxonxvwsZi8GXdi_qLihMsHq4.crl (hash: /lhWJt95S7OK3/QTR9R00ydhXbZmUGPyq/Pvt9bsFPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:35:49:7b:93:8c:39:94:59:f9:d8:24:3d:95:f1:b7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Validity
Not Before: Sep 27 21:01:01 2024 GMT
Not After : Sep 28 21:01:01 2024 GMT
Subject: CN=63a4f7340ea3b33bbdfad739e79fc62cc445c7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:0d:5d:23:fe:c5:cd:14:7b:b2:6b:44:dd:
91:fc:87:85:67:e4:18:61:16:85:9c:08:0c:20:c2:
18:2e:3b:af:f8:0c:9d:23:89:09:30:19:43:3c:73:
95:b1:12:fe:e4:4e:66:90:08:69:40:46:c3:11:4b:
b7:41:6d:62:99:52:f0:2a:25:70:3d:e6:e3:a3:2e:
36:86:e6:2b:de:2e:d9:f6:55:de:6d:6b:1a:fc:10:
3e:8b:f8:50:e6:f0:e0:31:e0:09:20:eb:57:e5:68:
56:9d:a5:08:d4:6c:84:58:67:97:2f:8d:10:98:bd:
89:83:67:e7:40:36:21:49:e1:50:40:02:bb:79:0c:
f1:63:3f:75:03:80:ef:6f:6e:56:f7:ca:75:04:21:
7d:09:07:3e:58:0a:83:c2:bc:05:8a:c3:12:42:de:
cb:19:39:00:ac:ea:4a:57:fe:b8:16:b2:e0:29:2c:
98:b2:5d:09:37:a0:c4:96:f7:e8:d3:18:d4:09:c5:
98:df:ea:23:0a:0a:1a:68:5a:b4:5a:6d:67:55:32:
33:1c:34:3c:7a:c9:f2:05:23:64:2a:94:be:f8:b9:
5f:52:71:94:67:3d:6d:39:ec:b0:58:03:b8:33:02:
37:cc:0b:e2:30:20:c9:36:a3:a4:e8:5d:ae:69:e4:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A4:F7:34:0E:A3:B3:3B:BD:FA:D7:39:E7:9F:C6:2C:C4:45:C7:DC
X509v3 Authority Key Identifier:
keyid:2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f9:7b:7a:5a:20:5f:93:0f:c5:89:2f:08:60:93:9c:c2:ed:
83:0c:56:d9:e9:e2:2b:64:b6:61:ef:93:23:4a:6f:c2:b9:39:
2b:de:47:cd:09:f9:97:31:2a:af:11:93:56:67:bd:96:37:47:
19:d0:38:60:fb:79:28:e6:82:37:19:d9:d2:8b:45:1b:86:6c:
cd:2e:1b:01:f0:e8:0e:73:f0:df:b4:e9:87:a1:82:e7:9e:d0:
60:b3:ec:e3:eb:d8:97:e7:cc:35:c6:ed:08:f6:fd:90:d9:61:
bc:d2:ee:47:fa:09:af:ce:03:2c:a6:3f:03:c8:31:0e:20:97:
4f:20:19:59:0e:da:d1:df:90:53:9e:49:ee:53:56:23:9e:29:
b8:4b:54:e8:d0:cb:f6:8d:eb:d4:b6:11:6b:ab:ed:d5:ce:b5:
fc:dc:f0:ae:b3:1f:84:c2:95:8e:ae:4a:02:b8:52:c6:35:5e:
ed:4f:71:ea:f6:de:14:c0:c8:98:b7:61:a7:3e:85:71:9a:11:
1b:c0:bd:1b:7d:97:64:9c:4c:8d:11:14:4e:ad:2b:39:f4:51:
ff:e6:a5:52:5a:09:e5:34:e1:a5:d5:c3:ff:d8:0d:26:ee:53:
90:15:f2:3e:a7:8f:12:c2:6c:90:d8:71:bf:a5:c3:a1:36:4e:
be:41:70:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:52:03 2024 by rpki-client on console-ams.rpki-client.org