Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json)
Hash identifier: zTCBtRuMpzAusPSEm0QMWeUzjeXjKPg3QN+TxtPnmTc=
Subject key identifier: 31:1B:9F:0E:82:BE:7F:9B:E8:77:C2:EE:6F:FE:3E:4D:03:0F:5F:F3
Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47
Certificate serial: 01935840688FDB78AAFF15D2BF507E8F66A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
Manifest number: 0147
Signing time: Sat 23 Nov 2024 09:00:36 +0000
Manifest this update: Sat 23 Nov 2024 09:00:36 +0000
Manifest next update: Sun 24 Nov 2024 09:00:36 +0000
Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: 77psxd2ddtknwxquh8BmWNB3QhaU9tl+sJHtLLFlevc=)
2: fP_HkdJBiY0FC5AeoXGsOvdkFPA.roa (hash: /Zsu+1iWoaxu+bki1hO8uZFbTcHH7mKmgPUXnKMNnoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:68:8f:db:78:aa:ff:15:d2:bf:50:7e:8f:66:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47
Validity
Not Before: Nov 23 09:00:36 2024 GMT
Not After : Nov 24 09:00:36 2024 GMT
Subject: CN=311b9f0e82be7f9be877c2ee6ffe3e4d030f5ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:e1:e4:33:af:c9:3c:b0:5c:85:58:81:6f:
79:fa:85:f3:85:f7:17:01:55:7c:21:b0:ff:df:7f:
9a:7c:a3:38:d4:34:02:c3:f6:f5:b9:78:6a:cf:6f:
4b:34:6a:95:0e:25:e7:dd:b3:f8:fa:7c:da:9e:40:
2f:d0:90:a7:1a:c6:d2:ed:63:b7:f7:d4:b8:93:18:
34:14:b1:c8:db:82:10:c6:0e:2b:54:63:c9:c1:e7:
53:cc:d5:39:b4:18:0a:f0:4a:b2:1c:4d:94:f1:d6:
7e:ac:1a:f1:c3:40:72:f0:5a:e7:84:b6:7c:90:e1:
07:80:0c:eb:09:86:71:48:29:16:21:f2:72:ab:a2:
cc:d3:26:5e:44:06:11:00:d7:a0:75:ea:01:a7:e6:
8a:28:76:82:28:51:19:5b:26:fa:1e:6d:15:8a:e9:
9d:b5:f7:6d:86:cd:2f:9f:18:34:c4:8f:74:da:02:
25:67:34:14:25:b9:6e:b8:17:ef:f8:99:8d:c7:ee:
6f:a2:40:b2:91:56:2c:7f:8b:b7:b6:83:3b:14:f7:
22:03:35:c6:90:40:25:fe:72:89:37:b8:30:f1:f2:
5f:ef:3d:7e:5f:ad:a2:92:5c:3f:86:12:aa:f8:d7:
43:84:7b:6d:1e:32:4e:80:f8:35:af:c0:26:cd:72:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:9F:0E:82:BE:7F:9B:E8:77:C2:EE:6F:FE:3E:4D:03:0F:5F:F3
X509v3 Authority Key Identifier:
keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:c0:5d:53:96:ef:b0:75:6a:ac:f3:0d:d4:b3:23:d2:9d:66:
ca:cb:13:16:e0:44:49:8c:77:9d:ca:d2:96:e4:e5:89:d2:f8:
17:76:f2:ff:0e:ed:e9:e5:93:f3:79:d1:4b:a9:62:b9:e2:0a:
f4:4e:c8:76:35:e9:6f:39:df:e9:41:1e:54:84:2a:fc:5e:25:
9e:92:c0:1d:a7:ed:f2:79:d0:0e:5d:55:7f:d6:8a:06:fe:49:
c7:da:06:68:c3:2b:40:f8:58:19:df:5b:ee:7e:5b:16:8f:4d:
3d:d4:f0:29:a1:5a:84:cb:d1:00:bd:78:4a:37:a1:ba:8f:f8:
83:c3:db:ff:90:3f:38:d3:eb:5a:c3:6b:b5:9d:1c:68:3e:e4:
fb:ec:69:bf:d5:7d:22:5b:af:13:38:0a:c5:80:6e:1d:7b:8c:
0f:7a:bb:0d:27:83:af:eb:90:05:11:80:31:9a:92:bc:0a:a2:
a3:7f:55:aa:99:18:95:b3:ce:fb:1d:c8:c6:11:14:98:00:92:
02:07:1f:1a:e6:7b:96:6a:bc:54:b3:2d:f5:84:47:cf:da:df:
50:13:7b:4a:4b:e8:ca:64:ae:bc:77:40:21:3e:5d:1e:b2:03:
2e:d6:a5:21:b6:b1:9b:79:79:8e:fc:34:19:19:86:36:b6:6d:
01:ac:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:39 2024 by rpki-client on console-fra.rpki-client.org