Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: GNE37DSgXeFWCyK0XhCmnsOrCniTZewS1QTjixf3FNw=
Subject key identifier: D7:7F:DD:49:8A:11:AA:84:38:39:36:C4:53:D2:04:AF:77:72:94:E0
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 01935575FC41DAF91DAA0E79946C17A8B256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 0153
Signing time: Fri 22 Nov 2024 20:00:15 +0000
Manifest this update: Fri 22 Nov 2024 20:00:15 +0000
Manifest next update: Sat 23 Nov 2024 20:00:15 +0000
Files and hashes: 1: Io2xZuglxcp9WF9u9gMmK6ov_6s.roa (hash: Gm+8lHnN3DZlLdEt1lx6SX7Uf8nQmWK4ldqebzAYqmU=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: w8S2EcPdeoN+hBhgBHzPRxnWUVzO5kIfGlQpjyUArEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:75:fc:41:da:f9:1d:aa:0e:79:94:6c:17:a8:b2:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Nov 22 20:00:15 2024 GMT
Not After : Nov 23 20:00:15 2024 GMT
Subject: CN=d77fdd498a11aa84383936c453d204af777294e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:14:18:49:57:07:96:ca:06:ba:56:a5:81:
19:e9:9c:ab:02:0f:1c:82:0a:58:15:e8:9a:d2:fb:
8f:60:f8:ec:24:b3:9f:59:f9:dd:65:b9:8f:d0:44:
e4:b1:1d:96:23:58:19:00:a7:35:ac:2b:ef:b2:54:
69:76:45:f9:f2:ec:a7:3d:88:9c:ef:4a:a3:b7:f2:
01:ee:fe:15:94:a9:c3:70:25:19:7e:d7:38:24:a3:
4b:0f:41:67:55:7f:60:14:b0:69:7a:bb:ed:34:26:
88:11:ee:f3:66:0d:ed:57:47:13:79:dd:5b:e5:f5:
0c:42:65:0e:4c:5d:6c:34:22:71:6f:d9:db:5d:58:
99:4e:02:14:d1:25:7e:9c:1c:10:e1:17:49:a9:24:
20:db:d7:23:65:d8:d4:50:26:7e:c8:c6:2c:77:24:
30:96:aa:3c:23:ed:49:1e:9d:d0:04:e4:fe:a6:59:
6c:30:53:76:44:4d:be:e8:5b:44:38:fe:6f:63:49:
43:93:4f:8b:b0:79:5f:17:d6:9b:dc:25:a0:11:a4:
08:28:02:b4:b4:06:98:46:26:80:ab:21:76:54:ff:
99:c6:2e:c5:02:c4:12:26:05:f7:1f:00:d0:f6:b4:
83:32:94:c6:2d:45:4a:0b:e7:f4:68:ec:89:a6:1b:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7F:DD:49:8A:11:AA:84:38:39:36:C4:53:D2:04:AF:77:72:94:E0
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3d:cd:97:f2:4e:d5:76:fa:55:55:a9:94:34:59:6f:f4:75:
5e:d5:e8:66:b6:f2:3d:23:b9:60:9e:ac:a6:7d:ab:fc:cd:3c:
b3:cb:4d:79:61:dd:c2:f7:c6:3c:12:d7:4d:52:c3:9a:26:7a:
0b:7a:b0:76:cb:56:24:3e:5b:1d:10:15:59:06:4b:76:5b:32:
37:81:54:8a:be:fb:90:02:c6:a0:e3:48:c0:5e:b7:37:3a:42:
10:0c:05:86:cf:f8:be:6c:2b:60:86:71:8d:7d:e2:29:f7:1c:
76:27:62:ce:94:0b:60:62:13:cd:16:a3:b9:db:ad:59:9f:0b:
ad:72:c4:f7:34:c5:6b:a3:25:bd:9b:d1:3e:57:8c:e7:01:b7:
b9:17:f6:c4:6e:d6:1b:e0:ca:e4:35:e6:9b:b9:9f:26:0a:8e:
65:2c:e4:2b:99:c0:98:23:a2:51:44:f9:f9:23:ad:cb:d1:53:
e5:cf:cd:74:34:fd:96:79:3a:01:24:e9:ab:7e:5a:35:29:89:
26:45:c6:72:6c:a7:59:10:41:8d:c0:c4:37:3d:cf:b0:65:34:
01:b9:78:ee:99:3f:b6:a7:0d:3b:f4:a2:fb:9d:90:2d:3d:04:
46:4d:da:37:1c:b3:41:48:f9:10:e6:a2:b4:15:52:1a:0b:28:
6e:86:3b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:25 2024 by rpki-client on console-ams.rpki-client.org