Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: EYzKSAkcGWATsZu8psRJyAiNrWV8Wyf99CZ0EQhLQoA=
Subject key identifier: D9:CF:70:96:73:58:38:DD:6F:59:33:34:6C:59:87:9A:1B:BB:76:01
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 0193549AA47B780366D4C752E720467C4B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 16:00:40 +0000
Manifest this update: Fri 22 Nov 2024 16:00:40 +0000
Manifest next update: Sat 23 Nov 2024 16:00:40 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: oEVWVPLCWXE/+DubA6Pp/SYLsOz1YAq4HIv/GrWA9eg=)
2: WNmdgqrjN3zQJoQIg_-stTBmzsY.roa (hash: 5+v1J0ulVIfXD/4RLcmmgma4YByGjIM/EMrqUbhUxlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:a4:7b:78:03:66:d4:c7:52:e7:20:46:7c:4b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Nov 22 16:00:40 2024 GMT
Not After : Nov 23 16:00:40 2024 GMT
Subject: CN=d9cf7096735838dd6f5933346c59879a1bbb7601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:fb:87:d1:b6:57:a8:3e:22:4b:61:25:f5:
ca:24:37:d5:c2:f9:00:f6:3d:f4:79:2f:58:fc:23:
1a:1a:09:04:24:a2:6c:cd:41:db:2c:b4:fc:05:3e:
e4:91:98:26:db:ee:53:45:8d:24:01:e7:68:a3:24:
fc:a7:c7:a9:d6:6b:64:fe:88:7c:3d:3c:71:e3:7a:
c6:8e:9c:ca:50:42:13:34:55:80:c6:a9:c3:a8:01:
ac:02:fa:b6:e4:47:15:3e:6c:1d:0e:df:46:80:13:
d5:ac:d1:d7:54:d6:4d:85:36:2c:14:dc:36:e1:c5:
6c:3e:0c:23:ba:cc:2d:55:8c:68:59:2d:00:ed:5b:
0c:f2:b4:6e:ba:7c:f8:3a:4e:98:e7:65:90:8a:e4:
57:b1:21:76:71:0d:7c:bd:0a:8d:87:a3:1e:8e:9d:
ec:a5:93:57:dc:eb:9a:32:5b:4e:14:bc:ab:bc:8a:
4e:84:33:98:a4:58:bc:a2:8c:11:af:d6:69:f7:2c:
0a:4f:8a:8d:45:4c:d0:65:2d:45:8e:74:1e:1a:58:
29:5f:1c:16:fb:f7:27:e4:3e:38:1c:64:2d:98:51:
4c:da:07:bc:b0:1a:ba:6b:72:ce:8e:8a:b7:cb:89:
aa:6b:53:52:0b:d8:9c:fa:7f:60:b1:5e:27:9f:99:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:70:96:73:58:38:DD:6F:59:33:34:6C:59:87:9A:1B:BB:76:01
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:23:b9:7c:6e:1e:bf:10:ac:60:5b:ad:0f:3b:5a:b4:d1:be:
b7:b5:33:dc:cf:df:74:ed:78:3b:14:4a:25:09:d1:d6:23:3d:
1f:27:78:32:dd:2f:18:98:c1:ec:da:29:c1:57:27:05:90:ce:
ae:08:21:da:b0:a1:82:79:2a:bf:fc:b9:23:43:37:d7:6c:3b:
6d:5e:64:1c:9c:df:55:cc:ab:c1:4b:25:85:dc:02:8f:92:ad:
c9:fe:a6:95:c7:05:74:cc:29:86:a8:97:4b:dd:ed:e4:ee:93:
61:e0:82:45:f1:c9:f4:8e:c2:de:ed:a5:90:71:5e:40:e4:c1:
53:34:3f:42:77:52:10:2a:a7:57:91:50:b8:c1:d8:c3:f9:23:
55:28:7a:06:97:0a:de:2b:b8:f9:fe:02:f8:83:63:53:b4:6c:
24:5f:fa:bf:35:fa:b2:d0:b1:6a:0d:6f:ee:69:73:84:bd:aa:
a8:85:4b:57:1d:1f:13:ed:f7:82:30:28:4a:13:1f:1e:f6:b0:
b7:ba:bf:a3:bf:a1:0f:61:b9:21:b2:2b:a1:95:47:25:3b:ac:
0a:50:9f:71:42:22:4e:c3:13:a1:0d:14:91:b0:20:3e:e5:b1:
71:fd:c8:ed:d0:4f:e7:fb:eb:db:71:3b:d5:6d:b6:e3:c3:28:
57:2a:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:55 2024 by rpki-client on console-ams.rpki-client.org