Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
File: 6g8I1O4flPmESTtGe9isoq36KGY.mft (raw, json)
Hash identifier: cz0F/UpSQRp4IeVd2hkos8z4QJ9EJE/m55SNrmdlnaQ=
Subject key identifier: 09:66:A2:00:B0:E4:26:36:96:9F:27:09:F4:FA:15:77:E4:62:60:D4
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 01935989F43B8C2352BE68552E22F2B203E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 15:00:33 +0000
Manifest this update: Sat 23 Nov 2024 15:00:33 +0000
Manifest next update: Sun 24 Nov 2024 15:00:33 +0000
Files and hashes: 1: 6g8I1O4flPmESTtGe9isoq36KGY.crl (hash: 5zc4E7Fe6u4WGyVRIFSdbcay8LYJrTNlm2juTDJjiBY=)
2: lIQeK-SbHXSpZYYjlCvFF6fPDqU.roa (hash: c8h6/eLfYLAQPs+1s8qkelwZiRb7y7lnNNRDSGbRheQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:89:f4:3b:8c:23:52:be:68:55:2e:22:f2:b2:03:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Nov 23 15:00:33 2024 GMT
Not After : Nov 24 15:00:33 2024 GMT
Subject: CN=0966a200b0e42636969f2709f4fa1577e46260d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:7d:a4:78:14:eb:f8:b4:7e:04:e2:33:30:
51:cf:c7:07:87:c5:f7:f8:d5:4b:d0:2d:f5:a0:21:
8f:e1:0e:1a:6b:2d:94:63:c8:1b:6b:72:05:f8:95:
d5:8a:ca:92:4a:12:7e:2b:d5:94:89:32:90:10:50:
93:b9:3b:1d:9a:74:a9:01:55:3b:33:f0:72:66:ea:
34:ba:75:02:1d:aa:23:d5:b4:6c:d4:17:82:73:eb:
7c:b4:1e:c6:3e:4f:1f:f1:84:e8:bc:f4:57:9a:65:
75:ef:62:16:9b:8b:a4:72:3f:c0:6e:22:ba:50:28:
0f:a3:93:d5:21:93:93:fe:1d:09:41:5a:ae:b4:a9:
54:06:46:27:ef:1a:6e:92:04:ca:95:6d:1d:5f:a9:
d9:28:20:45:7f:a8:59:2b:1b:67:e8:6e:55:08:a6:
bb:9d:1f:7a:af:c0:23:59:83:31:54:8d:4c:20:35:
ed:4b:49:d1:9a:0a:28:91:68:17:74:40:15:f9:14:
6d:a6:15:8c:29:f2:e9:c1:b9:6e:48:cd:81:6d:40:
18:4d:10:f6:fe:f9:e8:c5:8c:bb:05:e9:52:fc:46:
19:d1:37:32:e9:51:f8:8b:af:d3:81:f6:1c:07:04:
62:5c:25:3b:50:53:ff:b3:bc:48:00:1c:94:15:78:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:66:A2:00:B0:E4:26:36:96:9F:27:09:F4:FA:15:77:E4:62:60:D4
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b1:cd:19:db:1f:c7:f9:39:cf:65:0d:74:5a:ca:b7:8d:1e:
96:6d:1e:bb:7d:b7:00:cb:40:09:db:b4:a7:17:c6:5a:af:17:
87:9d:f3:28:07:fb:0d:07:79:a5:79:30:fb:5e:37:0a:1a:90:
19:2f:b9:f6:09:bd:ce:3f:7a:80:1e:87:7e:3a:bb:3b:21:e2:
d9:32:72:8a:f3:f9:46:27:9b:13:b7:b8:1d:41:51:6f:66:10:
4d:f0:53:30:d9:bc:2a:95:73:a4:56:8c:c8:a3:5b:66:85:7a:
69:56:0e:cf:1b:5f:a0:ec:ae:67:23:fd:1c:50:ec:31:6d:2e:
f8:9d:11:a5:30:a0:58:31:b8:31:16:26:d3:db:9d:b9:21:9a:
84:cc:9c:f7:08:ec:61:e1:41:8f:7c:4f:6e:63:0a:d8:dc:7e:
68:5a:81:f7:d0:fe:93:9e:5b:d6:67:6c:18:ee:af:30:1e:54:
d5:0e:31:10:3d:2d:66:ad:f1:d4:30:9d:b0:c6:42:d6:b0:1d:
c9:00:00:17:3a:72:7b:30:17:b2:24:51:ea:63:61:5d:bb:59:
4a:16:92:ff:a3:10:36:65:2f:67:59:76:e9:6f:dd:5f:40:f0:
c4:0a:9b:ae:19:35:de:5c:69:8e:fb:7c:33:89:6d:82:c6:40:
ad:a2:3c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:36:55 2024 by rpki-client on console-fra.rpki-client.org