Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File: ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier: LeWZDnnsBQzj2+PJEi8MYfnRBKxwdY6vtxa3tJ1IHD8=
Subject key identifier: AE:9B:1A:02:5E:33:3E:9C:AF:52:1E:C2:D7:11:3E:72:0D:E1:98:A3
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer: /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial: 019365FC093375BB2391D091216B17B00057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number: 123A
Signing time: Tue 26 Nov 2024 01:00:36 +0000
Manifest this update: Tue 26 Nov 2024 01:00:36 +0000
Manifest next update: Wed 27 Nov 2024 01:00:36 +0000
Files and hashes: 1: ITudsTKzE8Ch01CdscC119vlVSQ.roa (hash: j+fNxXztUqjZvxzntn6KSLSoRnZOFPOjo6b3CVJ6x1c=)
2: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: G+522jMcZkoiSrDP2FGSpfI4ZltDwHH6iJkoba3XR7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fc:09:33:75:bb:23:91:d0:91:21:6b:17:b0:00:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Validity
Not Before: Nov 26 01:00:36 2024 GMT
Not After : Nov 27 01:00:36 2024 GMT
Subject: CN=ae9b1a025e333e9caf521ec2d7113e720de198a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:a8:e9:a1:77:ad:22:bc:4d:9d:66:d8:28:
9d:3d:92:4a:1a:df:77:29:63:6a:71:92:51:91:77:
36:0d:2c:4c:8c:15:2c:8d:83:ca:a4:5f:3e:72:d5:
4d:84:68:90:18:90:33:d5:6b:62:6b:fd:7f:81:a8:
f9:9b:23:9f:fe:14:8c:2a:65:be:15:56:19:9f:76:
1f:4e:fa:f1:69:9e:f5:23:90:39:f2:93:b5:ed:a9:
55:00:5d:6d:b1:4b:df:7c:1c:67:cd:92:ed:b9:da:
4d:6d:c1:1d:38:cb:2e:94:d2:f5:cf:f0:28:5d:16:
65:a4:36:88:56:a3:30:89:d8:e9:cf:94:82:3e:39:
70:66:48:6a:2c:3d:8b:01:ce:c9:30:e8:93:cb:50:
5d:4a:66:3e:3e:b1:5c:7f:95:f1:a4:06:57:99:90:
a5:bf:5e:58:2f:cd:95:c3:5a:78:17:22:3f:7b:7c:
c2:5d:fa:0c:f9:08:7f:91:21:84:8f:33:61:06:4f:
8a:59:18:e1:6e:d9:75:fa:9d:fe:0b:6f:4e:4e:9f:
8b:f9:c8:cd:54:d7:9c:41:9b:54:53:1a:99:d8:c6:
b5:78:5f:1f:fd:97:48:30:5e:1b:e8:7c:12:01:a4:
57:59:f6:08:d7:b4:24:12:c7:9c:00:e5:6d:62:99:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9B:1A:02:5E:33:3E:9C:AF:52:1E:C2:D7:11:3E:72:0D:E1:98:A3
X509v3 Authority Key Identifier:
keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a5:4d:c9:9e:5b:24:0a:ad:fe:23:0c:ff:c2:da:90:e3:aa:
d9:e0:d6:af:f4:81:2a:cd:59:c8:78:9a:62:ce:9e:26:95:56:
b1:03:ab:33:16:10:d3:c2:ad:62:ed:e1:bd:be:fa:a1:57:7c:
28:ec:ff:0a:6d:9f:07:29:b1:b1:40:e2:4a:86:be:ad:db:4f:
03:60:36:13:d2:29:dd:d8:96:57:3a:72:16:51:b2:0a:38:fc:
5f:70:f8:83:52:37:44:32:7e:11:00:3e:ac:b1:03:a3:3c:ca:
2d:2b:24:53:8a:95:d9:df:f4:81:4c:e7:a9:fe:39:47:31:9d:
37:68:b9:1b:72:ea:be:83:1c:03:b6:6c:d6:4e:39:2b:6f:f5:
db:30:90:01:20:3e:d9:85:aa:40:1d:8c:7d:48:1b:84:19:15:
3e:87:c4:66:2f:b2:b5:03:d1:28:b7:ae:7b:41:43:06:ce:cf:
5a:95:6c:0c:c7:dc:e7:ba:95:3f:08:83:7b:6e:0a:a7:57:f2:
37:67:86:cf:fd:30:39:f8:2e:f3:b2:61:1b:4f:0a:82:2e:d7:
cf:36:9a:b3:e5:85:75:f5:12:5b:b4:f5:3e:a7:e2:c4:d1:8b:
49:67:2f:44:96:f7:b7:c7:03:d5:31:a8:71:d6:2e:78:6f:77:
59:2f:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:51:47 2024 by rpki-client on console-fra.rpki-client.org