Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: Qk9mt3danCNqqxoQRX3ttZZZixJQxi0dKozi04tQB8Y=
Subject key identifier: 20:F5:D7:A7:0F:9E:24:26:F9:3C:11:B6:A2:1E:97:72:8B:08:FC:43
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 0193647B4FBD04628B040F7B2D0A3AF71A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0B46
Signing time: Mon 25 Nov 2024 18:00:23 +0000
Manifest this update: Mon 25 Nov 2024 18:00:23 +0000
Manifest next update: Tue 26 Nov 2024 18:00:23 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: GmaJGzu4FR82ft6CIkh/9pqWogfwpwmlyqB0a4JE0HY=)
2: EF2IXjK_XVsfZ3OXlWrCnsBGxaY.roa (hash: Qpl+/1V4a6gNt3VwT95hYhw/IQ8/deqeeRbNGAGrWQk=)
3: jy6wMDngWvyo3joBv2w1KmgpPhQ.roa (hash: Qr54PkrGAblFe2uvyP8N3zoEPD9xJvyzknMwo9DS33Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:7b:4f:bd:04:62:8b:04:0f:7b:2d:0a:3a:f7:1a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Nov 25 18:00:23 2024 GMT
Not After : Nov 26 18:00:23 2024 GMT
Subject: CN=20f5d7a70f9e2426f93c11b6a21e97728b08fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9a:29:07:2f:55:35:09:7b:41:94:d0:4e:c3:
52:86:29:7e:a2:7c:7a:85:f1:9c:75:c5:a8:f0:2a:
18:e1:a6:3f:97:4d:d2:0d:34:cc:7b:9d:2d:c2:16:
c4:2c:9e:f8:ae:c8:91:e5:cd:a0:3e:e4:75:95:de:
b7:0c:83:48:99:75:27:34:b2:c4:74:3b:93:9c:db:
ac:30:a9:d6:ce:84:75:f0:a2:2d:e7:d6:bf:e2:be:
a4:cc:d2:40:f7:3c:95:48:c3:a1:7d:a1:18:04:0c:
fc:a5:05:c7:40:96:0c:8d:be:4e:6f:8f:1f:25:de:
ed:04:d4:24:ad:11:c5:d3:b6:2a:a7:25:cd:eb:e9:
80:92:bc:8f:b8:7e:51:e2:ba:1d:d2:c0:6f:c7:ce:
2c:eb:c2:c4:06:20:c9:1a:88:b3:fa:b0:4e:70:b1:
77:2c:13:d5:e8:ef:b7:26:7f:45:a7:b4:c4:39:e4:
b1:e6:e5:e7:f4:26:f1:ab:64:2c:68:3b:10:d2:e8:
3a:f6:95:3f:1c:9b:da:d9:6d:10:06:8a:bc:51:bd:
6b:8c:0e:ae:bc:f2:c0:10:b8:ad:ca:dc:4a:11:d2:
87:3c:5a:28:61:32:ed:62:aa:62:12:ce:3d:2b:b7:
5d:cf:1d:5c:23:0f:38:1d:c2:8d:bf:b4:69:3a:26:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F5:D7:A7:0F:9E:24:26:F9:3C:11:B6:A2:1E:97:72:8B:08:FC:43
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9d:ea:91:af:c8:9c:16:4c:18:17:1b:78:e5:8d:b1:58:e7:
cc:2b:97:e8:0d:6e:b5:30:80:4a:42:09:df:ee:5e:05:17:91:
ec:f7:c3:d5:ea:56:0d:66:bd:b0:38:a7:ca:b8:0d:c8:2d:2c:
bd:61:8a:60:26:ee:2a:d3:2b:bf:30:42:69:26:91:31:68:b0:
b6:44:87:de:85:6f:86:61:8b:95:cd:d1:ff:96:2f:fa:18:26:
8d:30:4d:d5:61:96:ef:9f:ee:3b:47:c7:29:a6:55:69:46:16:
29:82:03:44:f7:66:d5:d9:aa:dc:30:e9:10:74:04:fc:4d:93:
25:ca:f6:23:2c:e5:c3:38:8d:1e:e7:b4:28:18:8e:2a:dc:f2:
b3:22:25:39:56:5a:75:f7:17:07:78:f6:14:56:23:90:4b:cb:
3b:20:87:25:dc:d7:cc:f8:2c:4f:45:82:ec:7f:40:72:2d:bc:
66:ad:7d:99:15:d4:84:89:96:d5:b7:ef:c0:ed:2a:9d:5b:22:
8d:eb:2a:c3:7a:ff:f1:8a:7e:d9:7f:a7:a4:e6:5e:c4:4d:28:
a5:4f:52:c3:d7:34:3c:d5:ce:4d:a2:38:a8:4c:02:a2:38:96:
9b:f4:37:e6:b7:fa:77:c6:fb:cc:e3:98:43:1e:f1:62:fe:32:
3c:3e:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:02 2024 by rpki-client on console-fra.rpki-client.org