Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: RiWd0aWmU9vwAZkBH3dGPC1JcXPUTN2MyGa+mp/NIfE=
Subject key identifier: 91:9F:97:B7:52:AD:73:60:B6:C5:5E:26:E9:1A:18:34:CF:E0:4C:A1
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 0193579BF3956839F8F9C40BBF0D613534A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 124A
Signing time: Sat 23 Nov 2024 06:00:58 +0000
Manifest this update: Sat 23 Nov 2024 06:00:58 +0000
Manifest next update: Sun 24 Nov 2024 06:00:58 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: xgMpwW3tmBFWEgGO/g6VVOsX0xSe2fTvMQ4sgTRKmZ8=)
2: 8Bbbk7mqUKOyDjctWtQInxT3q7U.roa (hash: WbfOR2Vs5NXGSNVHfSzVC1SkI421MCGjTdhhSeytoJY=)
3: ZxtXtElSlqOUE5YnXgAdnCYaboM.roa (hash: +5Pb6OOUPOb5qveOZKaL5RMvDT4yUUMv0Lcv1SVIqZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:f3:95:68:39:f8:f9:c4:0b:bf:0d:61:35:34:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Nov 23 06:00:58 2024 GMT
Not After : Nov 24 06:00:58 2024 GMT
Subject: CN=919f97b752ad7360b6c55e26e91a1834cfe04ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:3d:04:bb:21:d6:28:18:88:60:f7:e8:0d:
a1:08:8d:6d:d6:59:e8:70:1f:4b:68:fa:f3:9e:a2:
7c:50:d0:96:b9:67:52:98:a1:9d:c0:70:7c:ac:43:
33:b0:50:c4:1f:2a:27:f9:ea:fd:d6:5c:9d:ea:a0:
cf:39:13:6d:b1:87:87:68:c1:72:33:d2:06:b3:f6:
88:84:bb:63:93:07:62:99:e4:fb:47:41:cf:99:70:
3e:a1:da:b6:42:71:a0:f5:5e:c2:1a:b2:3b:c5:04:
55:4d:96:dc:e3:e7:a0:af:64:af:cf:55:58:0f:c3:
96:28:e7:2f:9f:92:a8:ea:03:3d:27:31:e9:bf:d3:
7a:d5:19:57:a0:73:ca:07:fe:7a:a1:bf:62:48:cb:
1e:82:e4:a4:92:83:f1:d6:49:6d:4d:38:53:09:44:
10:57:b7:70:cd:52:7c:73:ed:c0:40:59:46:4d:c7:
69:7e:c8:fc:11:d2:da:3c:98:17:81:e6:57:cc:82:
15:74:82:85:72:52:cb:65:be:e4:fe:14:7e:3f:1a:
35:95:bb:b8:b2:9c:65:96:64:32:2e:6a:a4:0e:bf:
c8:42:c7:74:56:55:50:a6:06:f3:ed:92:41:49:24:
cc:b3:ce:3f:e2:1d:54:7a:2e:eb:59:70:96:d7:02:
2b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:97:B7:52:AD:73:60:B6:C5:5E:26:E9:1A:18:34:CF:E0:4C:A1
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:60:04:ed:bc:c5:39:3b:e6:d5:44:f7:a6:35:de:75:4a:6b:
83:31:d2:0e:d0:30:85:04:90:ed:3a:39:76:5a:b3:1a:cd:33:
7a:fb:da:eb:f7:f8:be:3b:99:17:30:af:9e:b7:e1:48:6c:62:
9d:82:75:8d:6a:f7:ef:a6:4b:35:d5:86:ea:4e:eb:b9:c7:ae:
61:19:15:72:cf:17:7e:b1:6a:24:a9:df:1b:46:ac:28:55:cb:
40:30:56:2f:99:0f:43:ad:0f:c0:44:e7:06:65:03:af:93:92:
66:7b:44:4c:ce:0f:58:7d:44:27:5c:33:c2:9e:a9:8b:6b:fb:
1c:19:2a:70:e6:cf:21:04:89:b5:2c:92:e3:e2:a2:0e:f6:46:
13:65:04:a8:6f:16:06:0c:99:ca:46:68:2d:49:6a:4b:3c:82:
48:6d:85:06:41:83:93:f8:60:8f:c9:99:de:eb:f5:ef:a0:15:
8d:e0:df:6e:48:c1:5b:f9:34:6c:67:ec:09:74:92:a5:c2:7a:
71:41:62:4b:2d:8e:6f:6c:d5:a6:9e:28:b6:9d:b9:71:15:f8:
14:b2:85:c0:0c:fe:12:62:63:61:e8:7e:72:06:b9:ad:bc:30:
1f:46:2c:6c:6b:76:e2:1d:9b:3e:22:f9:81:fa:88:37:7a:93:
73:fd:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:19 2024 by rpki-client on console-fra.rpki-client.org