Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: /BFkqswIqT6Ak2v5uDn1EiW2JQ3hG0OC3iBLuUznP7Q=
Subject key identifier: 45:45:23:D7:E6:5D:DB:43:43:23:3D:30:D3:7D:9D:3F:F2:1D:F8:6A
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 0193568B194AA3CF285F277EDFAA4775005A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 137E
Signing time: Sat 23 Nov 2024 01:02:56 +0000
Manifest this update: Sat 23 Nov 2024 01:02:56 +0000
Manifest next update: Sun 24 Nov 2024 01:02:56 +0000
Files and hashes: 1: iYNqca58Jp0XGXOK5zQ5pXBUfPk.roa (hash: U8qJZdDgvF2JZ1PWKI3P/lUfSdBCcoPWNx2nJXlKNQc=)
2: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: gxESkXXB/jeBL2BML49hERdqE6rpRgbIawPwqxNlYz0=)
3: rdkC52OLN8IVYRwbMfiwzDkXG08.roa (hash: 8sfqJQm3CizAfyIKlIVdYP71YBwYmKUrZQExaX1DPXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8b:19:4a:a3:cf:28:5f:27:7e:df:aa:47:75:00:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Nov 23 01:02:56 2024 GMT
Not After : Nov 24 01:02:56 2024 GMT
Subject: CN=454523d7e65ddb4343233d30d37d9d3ff21df86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:27:77:cf:a4:9b:30:fb:3a:70:d3:a7:d0:
9f:d7:3d:32:7f:46:7b:d3:76:a3:54:3d:bf:82:e6:
52:8e:54:27:d9:da:1c:70:07:9d:20:e5:23:63:e9:
17:48:19:e9:c3:dc:4b:e3:32:6c:44:23:32:d6:0b:
c9:27:81:97:c2:10:6c:1c:d1:95:ab:43:35:fe:e2:
73:f1:19:14:5f:a4:a1:13:f1:90:9e:2a:f0:db:b0:
01:d1:ec:84:4e:40:df:cc:d1:04:7e:3b:ec:a0:9c:
88:40:21:38:e8:bd:6b:9b:1a:e6:17:1b:f0:85:7e:
66:36:b5:9e:43:05:6f:da:02:14:9f:21:a2:51:cf:
85:01:d0:2a:d6:c8:c4:d7:b4:84:1e:51:70:fa:47:
93:9a:89:b8:1c:b0:e5:7d:fe:76:e2:7e:4b:45:94:
e3:e6:c2:04:0e:9d:17:9a:1d:25:1f:01:f8:66:b5:
c8:ed:8f:5a:a9:60:54:f6:fe:2d:45:18:43:8d:50:
d0:4a:84:da:c0:45:de:c3:21:64:da:2a:b2:ce:98:
75:dd:98:e1:a4:a1:6c:2f:66:b1:b9:41:81:02:f9:
4b:16:9d:90:39:d2:f3:ca:d8:51:f6:a8:6b:4e:7d:
b2:27:9f:d7:9d:e7:ff:fa:32:d7:1d:9a:7e:8c:c8:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:45:23:D7:E6:5D:DB:43:43:23:3D:30:D3:7D:9D:3F:F2:1D:F8:6A
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:06:27:d2:3e:21:31:38:df:f8:9b:fe:03:cc:a0:8f:3f:a8:
6b:a9:3d:fc:b0:19:ae:c9:dd:87:9a:9d:a2:fd:04:28:6e:a1:
a3:8c:92:04:a1:e4:9e:91:d1:07:b0:c0:12:cf:15:66:66:0c:
40:c4:9d:2a:77:5a:e4:37:24:ac:fd:25:7f:73:cc:c4:15:25:
2b:92:49:83:8b:cc:f8:c6:52:e3:75:a1:32:b6:10:c3:b5:51:
f6:74:53:92:08:84:35:e8:62:dd:62:89:50:e5:19:44:f1:8a:
41:88:1f:bd:ea:01:c0:c5:02:27:3d:de:c7:7b:cc:00:48:06:
99:cc:d6:fa:a6:f2:64:1b:37:39:3d:b0:c4:40:e6:7b:87:1d:
7a:14:9c:c8:2a:c1:2b:42:f8:3c:bd:3a:47:97:b7:92:86:7e:
89:8c:82:c5:53:65:b1:03:77:b4:1a:fa:8e:97:95:f3:c0:57:
a5:6f:21:09:6b:b7:bc:90:74:48:e2:e5:bd:65:9e:d8:b2:6a:
28:15:15:67:04:54:ae:95:4e:e3:0e:fa:4b:78:6e:68:91:7b:
1d:d3:46:5d:17:50:8a:c6:34:43:84:fe:b6:e3:c0:71:a5:aa:
0b:eb:e1:df:db:c4:aa:38:b5:20:a2:7b:2d:34:86:09:19:92:
fc:ec:a3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:17 2024 by rpki-client on console-ams.rpki-client.org