Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: 3MgySFDpwqvGNKQn9mi3YT6niM2VyVZsd5V4arI+AFk=
Subject key identifier: 9C:97:37:AB:92:33:95:91:FA:37:21:12:33:31:1A:49:01:E8:4C:98
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 019352E2D08DC6696ED1FDB823C54DA716DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 08:00:16 +0000
Manifest this update: Fri 22 Nov 2024 08:00:16 +0000
Manifest next update: Sat 23 Nov 2024 08:00:16 +0000
Files and hashes: 1: PmfDqWKKF4BBYfyh_aESKFVyhqk.roa (hash: yFWSjOpuZ3BTOVeDuoKN1SDBIhDJUoHoFoMlkmbGC5E=)
2: sZ7ydOc1rMUiIqv7uTSK9Jbz0ws.roa (hash: iTSBTC5qUSDXYP5KMhU/XTzQw5KXGCcxDbx4YHTg6W4=)
3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: JvhgoBdoMPdV10uB4HXuz+Vo9RYE6W2fttQ11zscz5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:d0:8d:c6:69:6e:d1:fd:b8:23:c5:4d:a7:16:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Nov 22 08:00:16 2024 GMT
Not After : Nov 23 08:00:16 2024 GMT
Subject: CN=9c9737ab92339591fa37211233311a4901e84c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:d8:e0:bd:22:80:1c:c7:32:e4:ca:a7:11:
dd:d9:ce:7c:f9:a0:68:42:bb:63:2a:70:7f:22:9b:
24:3c:21:6f:f1:a5:4b:0f:86:0d:93:bd:94:9d:8c:
25:c5:ba:a6:cd:c1:98:09:d2:54:40:b3:3c:b1:c9:
0d:5a:96:9a:9c:d3:a8:52:70:6b:4c:93:4a:bc:8a:
9a:02:8a:53:f5:86:f5:58:2b:e3:a2:13:10:fb:0d:
82:b9:9c:5e:a7:39:16:6e:e8:39:f8:63:c0:e2:d1:
ec:9a:74:ff:f8:93:82:0c:86:6e:31:36:54:8b:91:
ae:5d:75:d5:54:8c:56:c6:99:2c:bd:00:86:92:75:
99:5e:9c:61:d5:e6:60:11:ae:36:62:3c:34:7e:e2:
3f:5e:75:17:f9:cc:2b:0a:5b:1d:5e:5f:d7:cf:70:
fe:3b:7e:58:83:7f:25:d8:24:db:11:c8:41:93:fd:
65:b5:d0:d6:d6:ee:69:94:26:2d:ae:3f:b1:8b:d0:
77:46:0c:e7:53:b0:0d:67:6a:ec:8f:e3:33:9e:e0:
77:f5:67:41:25:21:6a:5d:16:dd:0d:be:c7:2b:27:
41:e6:06:20:6f:68:ab:a6:5a:f6:16:88:67:91:1c:
03:4f:8d:af:e3:2e:54:27:ba:a8:cc:bb:f2:8d:23:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:97:37:AB:92:33:95:91:FA:37:21:12:33:31:1A:49:01:E8:4C:98
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9c:6f:e7:bf:a8:e1:c6:95:1e:66:98:68:f1:ca:0b:9e:2c:
c7:d9:c4:8a:e3:c4:93:8e:4f:ea:32:db:80:a3:ba:6b:8e:7c:
13:c2:85:b9:77:df:d3:9b:13:4d:04:fd:e8:5f:71:d6:90:2a:
67:4a:cb:a3:2d:67:31:e6:b9:b9:32:b2:bf:fe:22:e1:24:32:
b0:36:57:c3:ef:8e:92:24:e1:44:53:de:78:97:aa:e0:b4:46:
4d:f6:e8:c2:5a:cb:d5:fd:48:b6:f1:1a:0d:6b:38:b5:65:97:
5a:cc:5e:19:05:21:30:e8:b7:f3:f5:8a:33:e9:9e:a4:a8:be:
e0:11:dc:b6:21:10:dc:88:39:ba:92:ba:fd:00:67:54:3a:a8:
a7:39:6f:a1:59:a9:13:c8:40:ab:4b:d6:6b:dd:a6:30:9c:43:
4d:5d:fd:46:27:b1:7f:04:36:d5:a1:42:5c:59:39:e0:1d:19:
af:b3:2d:61:73:b1:6c:eb:9d:ab:ba:4d:56:e2:2a:0b:f4:6f:
07:cf:f1:6f:b0:c3:86:af:66:77:06:d9:ee:77:d6:8f:b9:d6:
3d:43:58:d3:82:fa:a6:49:d1:d4:03:ac:38:9d:29:49:29:f1:
14:ee:de:d9:0c:e3:98:68:6d:eb:f1:0a:1b:28:c5:8d:bf:4b:
62:57:44:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:26 2024 by rpki-client on console-ams.rpki-client.org