Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: goo6X3dB2xjejT3AYVo0LZ2qRQVdeGDILBHZI5GUMZI=
Subject key identifier: 8F:68:32:14:09:AE:DB:23:0D:7D:48:F7:5C:65:A6:2D:9E:77:A6:9B
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019352070448D44266715F3D228B135FD889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 1373
Signing time: Fri 22 Nov 2024 04:00:11 +0000
Manifest this update: Fri 22 Nov 2024 04:00:11 +0000
Manifest next update: Sat 23 Nov 2024 04:00:11 +0000
Files and hashes: 1: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: f/np1BcixIDmRkWpUELMZ2qQkEO/xkDaHe24oO/o5K0=)
2: YOfk2nW9IP6LRJtgQHChEL_a0iY.roa (hash: hayBcN62R8Im0LxiNF89oMD5POu1dWWjhL/IbJc8X18=)
3: YOgTQbPxDKik_ykSfpOCKy8lR4s.roa (hash: PZA5b69DTKTF2UiEA7rdeb4ibzPiF/swOT4jbWML7eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:04:48:d4:42:66:71:5f:3d:22:8b:13:5f:d8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Nov 22 04:00:11 2024 GMT
Not After : Nov 23 04:00:11 2024 GMT
Subject: CN=8f68321409aedb230d7d48f75c65a62d9e77a69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4b:31:ee:01:fd:7a:af:eb:d2:7e:85:1d:97:
7b:7c:72:ec:cd:e6:40:4a:2e:29:13:b7:5e:06:11:
3e:75:84:31:e4:9e:e5:15:cd:3f:76:d8:f4:2f:80:
61:6d:1c:bd:1f:ca:c7:b8:92:b5:c9:f0:d8:65:a7:
61:8a:ab:ce:6e:d4:52:57:0a:0d:a8:6d:f9:d4:7c:
ee:72:5f:8b:a2:6d:69:82:e4:7c:f9:d0:b3:d2:2e:
65:68:f5:b0:fa:7c:99:c2:5d:5b:06:23:0f:4e:4d:
0a:09:38:3a:db:b3:e8:db:f0:f4:d4:c8:82:78:cd:
8a:5a:e4:03:8e:5b:73:70:e1:a5:83:4b:90:45:09:
47:98:6d:c0:59:96:7d:f7:2c:8d:93:5c:87:50:87:
e3:e0:79:e1:9c:61:9f:09:cb:b9:3f:79:7e:0b:90:
76:a2:db:35:5f:dc:6b:40:c9:55:10:7d:07:5c:33:
79:8d:3b:79:a6:c7:42:c6:0b:51:23:ed:16:40:e9:
0d:23:10:74:09:2a:92:ca:d9:cd:29:65:07:ce:10:
44:c3:a3:c8:a9:c9:86:d0:e7:83:37:6b:77:44:fe:
d8:35:cc:fd:56:4e:d5:4c:b8:0e:88:f7:b4:9a:01:
b5:76:36:da:78:57:ae:a8:41:89:58:cc:34:73:1b:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:68:32:14:09:AE:DB:23:0D:7D:48:F7:5C:65:A6:2D:9E:77:A6:9B
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d7:a3:b5:d5:2d:91:62:8b:78:65:49:63:d1:20:79:0e:84:
a8:30:9b:2b:ce:d7:7b:86:5e:56:0b:62:50:e2:b3:60:03:3d:
ba:56:7b:60:0f:3f:dd:be:83:d6:8c:f1:a4:23:9a:4b:fd:82:
53:bc:c4:fc:01:16:b5:71:01:a0:cd:04:31:72:91:9d:1c:8a:
c8:53:aa:1a:05:d2:db:fc:59:e7:b1:18:0b:9a:17:20:61:70:
f6:0b:99:9c:73:f3:5b:5a:62:d1:e9:1c:ec:e4:d8:9f:56:e5:
21:a8:fa:60:7c:dc:3a:dc:dc:5c:7e:14:b8:a8:df:06:be:ba:
6e:6c:d7:48:b0:d7:47:f2:30:11:72:a7:b1:fd:4d:43:00:13:
ae:49:bc:21:4d:65:01:e4:89:fa:f4:11:1c:f2:aa:84:6b:e2:
a2:6d:17:c0:de:2f:93:2c:bc:01:aa:65:10:2a:7c:b0:5b:03:
e4:bb:4c:e2:0c:7e:aa:f6:c8:9b:5c:68:ad:3f:b7:93:d6:81:
a8:e2:4f:09:8e:14:15:80:b3:f1:96:bf:e0:ea:92:6c:60:73:
57:04:7c:6c:84:35:89:46:b3:ae:bc:bf:6f:0a:b1:e5:67:e2:
2a:7f:75:19:88:68:8e:a1:5f:3a:56:1e:58:75:38:a7:b1:45:
2b:92:f5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:34:35 2024 by rpki-client on console-fra.rpki-client.org