Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: e7+gMMY1SHNUXYdvUhO6/RVhUZk9BDtYksp1zJEEAFY=
Subject key identifier: A0:11:C9:59:10:C7:A6:93:37:58:19:C1:C6:CB:C8:7A:C3:C3:13:D6
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01933245D944729C843A0C99997902D1DF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 0AA2
Signing time: Sat 16 Nov 2024 00:00:58 +0000
Manifest this update: Sat 16 Nov 2024 00:00:58 +0000
Manifest next update: Sun 17 Nov 2024 00:00:58 +0000
Files and hashes: 1: 6to8-rJKMGdwbJNcgECuCE7KVWU.roa (hash: d6OFCpb6lyht9RjtikIWE4bVfP//2nAdpLItiVvYHJ8=)
2: 8wNbyvzagsXQX3xUAQhdQywDbzo.roa (hash: qbTbUhKxLl+7tz2eMk36RsEHquR0mC/xUzHI9ZFov8w=)
3: ZGFDPpoXHmUdR7LDhL45S3ojs3s.roa (hash: U6aeKAX7h4jvimhg4ramgZh0VVsI9HiYjleS8tZfiyQ=)
4: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: cMBcm+sUPEjIBkow6cfVJ1EEkinITbLyYL43e7PvxBE=)
5: ib1xhJyzsB-yVVuxZ6E5DP3CUfc.roa (hash: eb4GRVuyGWDSeJnQnkyK6xTSGWJkFzpj15Q8PR8uY88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:32:45:d9:44:72:9c:84:3a:0c:99:99:79:02:d1:df:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Nov 16 00:00:58 2024 GMT
Not After : Nov 17 00:00:58 2024 GMT
Subject: CN=a011c95910c7a693375819c1c6cbc87ac3c313d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:d8:e3:32:3d:04:2e:69:5a:93:72:44:44:
35:d9:d6:5c:38:e2:a8:4c:19:c7:20:2e:7a:34:34:
2a:ff:10:5a:ea:30:a9:f2:fb:5c:62:80:db:f0:01:
b2:9b:9a:ff:f1:57:3e:47:55:f7:4c:73:10:db:d4:
a0:60:3d:67:f5:fb:60:c6:30:f2:92:db:9c:e4:c0:
29:cb:79:1d:63:0a:ae:8d:25:d7:ee:c7:e0:67:ae:
c0:ee:cc:1a:c1:d0:17:05:d6:95:00:b4:4a:ba:eb:
3b:dc:22:00:32:fc:c9:63:9b:f7:9c:11:8c:95:fd:
dc:16:44:4f:26:13:68:b1:1c:48:26:9f:3c:b8:58:
ba:dc:04:b6:22:7d:2d:43:56:83:0f:3f:32:18:30:
92:95:f3:f1:21:a3:c5:0c:c6:65:d6:25:f9:74:33:
af:96:3c:bd:3f:a3:3e:41:10:c3:c9:c0:6d:4e:5c:
ab:7c:03:3c:f7:65:96:0d:25:e5:ca:61:e8:33:37:
51:db:36:2c:07:00:29:0d:f0:e5:df:45:07:da:83:
fa:51:03:37:ff:2e:37:81:1a:7e:b6:ad:f7:8b:69:
a9:d3:b9:2f:41:a9:63:8e:e2:65:b5:71:75:00:c7:
75:fd:e9:75:e9:77:ed:84:72:76:49:5f:02:c4:e2:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:11:C9:59:10:C7:A6:93:37:58:19:C1:C6:CB:C8:7A:C3:C3:13:D6
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b1:40:60:4a:86:1b:36:ec:12:7f:49:68:36:0d:65:06:5b:
c3:a2:4b:59:29:5f:aa:8a:a4:18:4c:08:e3:71:d8:a7:ec:df:
6e:5c:00:e1:45:5f:60:5e:fc:4c:22:a4:c2:0e:33:b7:da:fd:
b1:51:b6:0d:96:22:25:f8:59:36:77:85:10:5c:c9:ec:4d:f0:
e1:b6:59:3c:7b:88:2c:e5:3a:65:29:e8:ea:60:36:66:99:50:
f3:34:d0:9f:9c:03:2a:af:cb:04:2e:b5:3a:c2:a6:be:93:ea:
84:e7:a7:03:7b:23:95:17:56:93:64:06:08:cd:a4:fc:09:d8:
c9:60:90:7d:c7:f7:00:af:4b:9c:37:d6:d7:03:1b:98:4f:19:
1e:43:2d:d4:95:0e:72:f5:45:8e:28:c4:4f:49:ab:74:d0:83:
71:ad:46:bb:49:92:04:43:ab:91:f0:47:5b:36:61:56:0e:26:
96:90:ee:f2:6c:51:70:a6:53:15:31:f1:b5:ab:4a:43:6b:37:
23:25:49:06:46:f6:90:b2:a5:da:ec:2c:6f:cb:d7:8b:14:d1:
b7:00:ac:fd:2d:0c:de:01:e0:50:73:8b:64:b3:dc:3a:e0:47:
e0:b2:ab:e7:72:c4:bc:c9:5d:46:e5:21:c8:8b:f8:b9:34:80:
f5:9d:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 01:32:17 2024 by rpki-client on console-ams.rpki-client.org