Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: cNp6acEWqkWQObINHtooKhDoTrtnpNHk/yU6drepCMM=
Subject key identifier: 07:4B:88:81:59:04:FD:A7:50:21:9A:19:E8:09:30:98:C3:8C:97:69
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 019356F6C8CC639F91F15A55BF22913414E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 03:00:34 +0000
Manifest this update: Sat 23 Nov 2024 03:00:34 +0000
Manifest next update: Sun 24 Nov 2024 03:00:34 +0000
Files and hashes: 1: 8LofYwzOnDiA0y7Z7CmVnR50mIY.roa (hash: hmXZ2bTl0BK/47F8+saWfaSWl9ePupsFOT0CPW0OeqA=)
2: XUO1gC6rEuOk2IKlJcyFrEvIJnA.roa (hash: EBhKDbQpZjLpkyNZTKwL3Nsjwaa+YvH3y7qW+qpSDHE=)
3: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: Sn8uASplijUPznts0CtyPLHF7SEw8ZbhWQPhSEcVf1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:c8:cc:63:9f:91:f1:5a:55:bf:22:91:34:14:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Nov 23 03:00:34 2024 GMT
Not After : Nov 24 03:00:34 2024 GMT
Subject: CN=074b88815904fda750219a19e8093098c38c9769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:d8:c0:e9:3c:8d:97:f0:c4:a1:f2:3d:9e:
56:8e:35:5c:98:6d:83:60:5b:8c:62:67:f2:02:7c:
ec:61:bf:8f:db:57:e6:07:1f:9a:89:90:bb:9a:ca:
71:17:a5:2b:5b:1a:bd:e7:be:ff:1b:22:0c:6f:35:
7b:ad:90:ed:0b:30:8f:13:8e:21:92:14:eb:59:f4:
fe:e6:75:46:d0:9c:d9:23:00:a8:a5:82:3f:b8:79:
44:6a:93:1b:4e:87:f8:1c:71:c1:e1:7a:66:7a:c0:
08:8d:c4:10:c5:9c:74:eb:ec:83:4e:7a:6a:34:d4:
fe:78:6a:ac:01:a8:1c:dc:50:fb:48:4f:11:6c:2b:
97:10:b8:eb:36:4d:f4:b8:c2:d7:b1:11:37:35:d9:
c9:6b:7e:81:3c:fd:11:11:3a:d1:01:09:f1:f4:0e:
22:cf:eb:4b:f0:70:89:dd:cc:01:a4:a9:0a:49:77:
07:21:53:57:92:98:cb:6c:f8:97:8e:ff:75:92:18:
e6:50:d2:5f:6d:e0:32:d0:cf:a4:e6:a6:50:ee:09:
45:a3:f2:1b:11:eb:d7:32:34:e3:bb:39:f8:b8:aa:
ec:c4:38:cc:d2:6b:f8:98:db:9a:35:1e:39:d0:9d:
42:f5:66:d5:f8:53:1f:89:39:e0:3b:a2:05:9f:62:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4B:88:81:59:04:FD:A7:50:21:9A:19:E8:09:30:98:C3:8C:97:69
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3d:fe:82:69:6f:7d:5c:60:e8:4e:8f:d7:0e:ef:82:18:a9:
a2:82:b5:ab:8f:34:3b:83:95:84:93:6a:89:87:10:b6:97:a1:
97:c9:d6:fa:96:6a:ec:92:02:0d:67:6c:28:bc:bc:94:48:8f:
95:6f:76:4c:5d:8f:32:74:8a:b7:46:9d:75:10:92:e0:e0:43:
19:44:1e:41:6c:61:35:b8:8b:58:52:09:28:a4:aa:32:7d:8b:
c3:7a:4e:9f:25:45:dc:20:b2:05:10:07:e6:ef:de:06:71:7d:
69:cc:43:67:fe:33:a2:a9:96:c4:52:96:ee:35:e5:41:ed:19:
02:9b:ac:20:84:de:ef:72:cb:6d:80:49:f7:b1:a6:42:0c:d0:
f1:1a:4d:17:f0:f5:5a:30:07:f0:b9:e3:9b:45:8e:69:78:0b:
ea:b4:ac:61:1c:a9:41:06:83:b7:1b:bd:3f:9c:17:38:a3:cd:
82:9c:a0:3d:e3:ad:20:f4:67:dc:34:91:64:67:e0:15:db:16:
8b:40:0b:48:a3:7a:fc:db:af:1b:a9:72:c0:10:50:bd:30:b4:
1e:f3:3a:dc:b6:9f:aa:28:5c:1a:cc:34:19:38:d8:fe:49:26:
e2:89:e0:ea:b4:f6:20:a5:9a:ce:f8:a1:66:05:4a:80:8f:30:
f1:f2:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:36 2024 by rpki-client on console-ams.rpki-client.org