Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: PHx+ZAoxAjQLK0VvkwZVUOkKOU/KdPwqzlacqJ4vhWg=
Subject key identifier: 57:A2:4D:A2:54:CF:31:E7:32:8C:77:AA:53:CC:BB:1A:84:52:C4:AC
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 0193568ABDCBBCAF7611003E3E33DE5165FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 09FC
Signing time: Sat 23 Nov 2024 01:02:33 +0000
Manifest this update: Sat 23 Nov 2024 01:02:33 +0000
Manifest next update: Sun 24 Nov 2024 01:02:33 +0000
Files and hashes: 1: ib7l-7Z3WARTzPtaCzY4VaHN2uA.roa (hash: LbAFm86FV/q5YHHlgYaJwHS2KZpaT2Hr8FssLFIas1o=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: AZ7TysaJ0k6eiYcTwsV+t/f4HNfbBQaSTOPK1ehI/vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:bd:cb:bc:af:76:11:00:3e:3e:33:de:51:65:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Nov 23 01:02:33 2024 GMT
Not After : Nov 24 01:02:33 2024 GMT
Subject: CN=57a24da254cf31e7328c77aa53ccbb1a8452c4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:fa:ce:67:82:07:42:a1:15:28:47:24:0b:
26:9e:65:97:8c:ca:bc:8b:bd:26:57:bd:36:09:8c:
95:f8:dc:05:47:fa:8f:f7:cc:67:a2:5f:86:90:19:
4c:a2:08:bf:67:55:07:98:d4:28:28:4a:ff:a4:87:
ec:f5:36:26:4e:04:26:06:c6:5a:dd:cb:bf:3f:0a:
0b:78:ae:db:c5:21:e7:08:f5:4f:22:6d:cf:1f:18:
de:5e:a2:ed:6d:dd:09:5b:1e:26:a1:29:9c:e5:16:
de:d5:6c:ef:27:6d:65:7c:23:6a:8e:32:d1:31:f1:
97:56:42:65:7d:6d:e0:83:0f:a4:be:2e:31:43:2f:
35:ed:a8:52:a4:1b:68:22:bf:9a:34:93:25:22:ad:
28:e0:97:e2:b8:8b:63:8f:bd:43:de:16:3a:4b:35:
d7:0b:77:96:d0:08:9f:43:ad:f0:c2:e9:80:d3:4e:
3b:79:0c:a5:28:92:6a:0f:f1:1b:f0:ee:40:63:aa:
ee:b5:e8:53:26:93:85:84:e2:6d:bf:97:08:fd:9b:
f8:39:90:f7:15:7b:71:2f:bd:a2:4c:80:ac:0e:bd:
5e:4f:73:2d:dd:e9:6b:c9:08:f2:da:e5:f7:bd:99:
18:67:98:ec:1f:e5:63:af:a8:f3:10:79:37:8b:a3:
1e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A2:4D:A2:54:CF:31:E7:32:8C:77:AA:53:CC:BB:1A:84:52:C4:AC
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c5:4d:9d:3e:1a:e8:ef:de:50:48:e2:69:f6:6c:08:74:df:
80:0b:c0:3c:b6:39:f9:6c:74:3d:d4:86:1a:6d:f9:71:6f:f2:
0e:eb:be:31:d9:ea:76:fb:25:e5:49:f5:38:80:4d:74:04:f3:
a0:40:e8:be:5e:d8:39:9f:8b:59:d1:2d:85:39:60:20:57:29:
7d:5e:0a:81:c7:f0:6f:6f:2a:de:bd:9f:30:e8:4e:bc:c0:da:
39:a2:7f:23:14:57:4b:12:29:6d:d6:91:63:88:2e:dc:d3:8b:
2d:2e:55:dc:28:d8:6a:58:f7:c6:2f:6c:4b:a9:46:53:bd:f9:
f6:44:df:b5:68:c4:10:1e:f0:5f:f7:8b:dc:0e:90:08:86:d5:
75:70:ab:df:b0:fd:71:00:93:ec:25:ab:e2:a4:6d:1e:42:1f:
51:86:e5:cf:4e:bb:82:f2:52:b2:da:e1:d2:3b:32:0b:5b:0b:
06:cd:07:12:33:1c:cf:fa:a6:3b:19:e8:46:41:ef:7b:6b:52:
da:c9:ce:31:3b:03:c2:81:9e:0f:87:09:5a:e4:7f:7f:a1:1e:
46:9d:4d:8a:91:3b:7d:7c:a7:d2:32:f7:df:7e:91:db:8b:3e:
44:77:bd:5c:81:01:07:04:49:02:ba:1d:db:01:38:10:f4:ec:
47:8b:fa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:05 2024 by rpki-client on console-fra.rpki-client.org