Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: dgbyjWxGcMrNFwUAu8wwOqkEJyOzBBqvpI+2n9gcZG4=
Subject key identifier: 9A:1C:85:ED:18:3B:39:3A:B1:30:06:F3:9D:D0:1F:67:FB:FA:B9:C7
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 01935199B03D5321DE60B00E29F208EBFB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 1372
Signing time: Fri 22 Nov 2024 02:00:46 +0000
Manifest this update: Fri 22 Nov 2024 02:00:46 +0000
Manifest next update: Sat 23 Nov 2024 02:00:46 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: DPM4J0l5g8hyQ+/s8xiBmWRl+0cWnUsURwIIp+ITHgM=)
2: MKyRgkSi8lwzkhS39EP-Xji4B_M.roa (hash: RNB4n+igi3MGFGnxeqGyBhLriDyLRXgRwYRheRXKSPw=)
3: iZZ4ouetDhEfftvUxbTFsd6oE3M.roa (hash: pHf+NSt9Rio/bTiOgtwP2/90zlCcYZDC5NfU3KVNepA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:b0:3d:53:21:de:60:b0:0e:29:f2:08:eb:fb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Nov 22 02:00:46 2024 GMT
Not After : Nov 23 02:00:46 2024 GMT
Subject: CN=9a1c85ed183b393ab13006f39dd01f67fbfab9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:4c:dc:e7:7e:5e:cd:77:15:67:d2:18:cf:
42:18:61:4d:da:93:ad:31:ef:4a:a6:2a:1f:da:a4:
54:98:94:63:ab:4d:ae:8c:a5:03:a1:49:95:65:08:
12:cc:3c:4b:0d:ea:f8:7d:76:10:c7:77:3f:e0:49:
7a:56:57:4e:7a:ac:a8:74:21:2e:c2:ad:e0:2f:0f:
7a:86:31:04:12:17:cb:6e:ae:1d:86:e4:cd:88:bf:
43:5c:26:8b:3d:b2:9d:28:98:ce:c7:72:c7:cc:ee:
b5:87:c9:6a:0a:fd:7a:60:25:5c:27:36:56:3c:18:
a0:62:ec:49:60:37:e8:8e:bd:ad:d2:f9:24:9b:d3:
c6:f1:5b:ea:32:db:c1:9f:85:45:9c:6d:6f:c6:85:
0b:6e:9e:96:8f:03:6f:b0:1c:53:15:c0:7d:51:1e:
c0:bd:6d:c9:01:17:40:93:e0:3d:97:76:cd:33:e4:
4f:dc:54:22:12:e5:a5:f8:16:16:56:b3:fd:81:bb:
7a:b5:8c:42:65:a9:f7:6d:7b:dc:0c:a4:4f:5d:0c:
54:aa:db:7a:92:ec:4f:d5:ee:5d:43:53:52:1c:98:
9b:92:f5:c8:4f:52:7c:a7:a5:31:29:25:e9:94:59:
9e:3b:e8:3f:0a:30:f7:e4:83:53:65:8f:a9:3d:16:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1C:85:ED:18:3B:39:3A:B1:30:06:F3:9D:D0:1F:67:FB:FA:B9:C7
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:73:68:81:1d:5b:75:7f:30:0d:73:05:6e:2e:d9:bb:f9:0f:
27:f1:eb:a3:0d:df:3d:6d:a7:c7:b5:34:89:62:b1:0d:03:aa:
d0:0c:f7:1c:4e:80:6f:80:ce:66:04:b5:19:c3:bc:88:84:40:
ca:61:bf:f0:b4:e7:d6:e7:86:6c:77:26:a5:b8:ac:e5:b5:ad:
0d:2d:e5:ee:86:e2:ab:75:6c:df:74:c0:72:1a:e0:67:aa:a9:
54:2e:7c:94:ee:8b:d3:81:d7:4b:ed:3e:b2:e4:7a:c5:31:c2:
69:97:3c:cf:23:55:fd:b2:e1:f6:f2:44:30:69:88:03:ee:1e:
4d:8e:9b:dc:d5:c1:03:d3:12:27:08:63:65:4d:3a:04:88:ce:
e3:11:9a:b4:14:b0:48:19:72:db:b2:85:c6:c1:7e:b8:f6:2a:
1b:5b:c2:b7:54:06:4a:51:aa:63:b7:9d:98:ec:bf:28:f9:c2:
e3:9d:ed:4f:2f:8c:4a:92:02:7d:45:f9:74:c7:0c:c0:9c:b4:
d2:07:1c:c4:36:73:f4:f3:25:e1:10:a4:eb:48:9c:6f:7a:34:
b7:ba:59:f9:ca:24:a3:88:bc:7c:f2:f4:29:39:fe:7c:c3:17:
97:05:43:5e:b3:8a:57:54:bb:9a:4c:5e:26:14:5d:8e:c5:7f:
d1:ae:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:37:19 2024 by rpki-client on console-fra.rpki-client.org