Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
File: ApeliZjwl0NHCBwX8l7t1l-tlmE.mft (raw, json)
Hash identifier: MtWG3wwl3q7WlX//wbJ0BzH3fbk8q0AlfLYuxNOpeiw=
Subject key identifier: 3E:2B:CC:8D:25:D7:61:54:DB:DE:8D:29:2B:04:38:38:09:EA:FC:A2
Authority key identifier: 02:97:A5:89:98:F0:97:43:47:08:1C:17:F2:5E:ED:D6:5F:AD:96:61
Certificate issuer: /CN=0297a58998f0974347081c17f25eedd65fad9661
Certificate serial: 01935879BAFBAEECA00DD9B3A94A3E5D8803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApeliZjwl0NHCBwX8l7t1l-tlmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 10:03:12 +0000
Manifest this update: Sat 23 Nov 2024 10:03:12 +0000
Manifest next update: Sun 24 Nov 2024 10:03:12 +0000
Files and hashes: 1: ApeliZjwl0NHCBwX8l7t1l-tlmE.crl (hash: vLQBWMNezEpAUO35ln6Bn8UvoIiUAs6HmPBbMUhUQU8=)
2: HaXkt_iXcDLSzXUQzQHcOheKnmQ.roa (hash: 7Mab3cZpcwKSJ+gVjA92+tciQTZGiNiriF1pEIsy5LY=)
3: NMzk_8Rl4BsvIDbu9hw1nlP7KpM.roa (hash: mxUfa27OB1TAAlmYm5x56nkknkDy+6wRzqfrAOl/Usc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ApeliZjwl0NHCBwX8l7t1l-tlmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:ba:fb:ae:ec:a0:0d:d9:b3:a9:4a:3e:5d:88:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0297a58998f0974347081c17f25eedd65fad9661
Validity
Not Before: Nov 23 10:03:12 2024 GMT
Not After : Nov 24 10:03:12 2024 GMT
Subject: CN=3e2bcc8d25d76154dbde8d292b04383809eafca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:a6:59:24:41:53:ba:6f:98:ff:0e:c8:e5:
6e:24:45:40:8a:5f:14:6c:41:5d:41:ad:ed:fb:a0:
38:5d:4c:98:64:ee:14:37:e2:cd:9e:a3:43:bd:1f:
53:86:e4:85:57:c3:3e:a0:00:87:29:9f:af:05:7c:
a4:70:60:a8:36:d7:f3:c5:6f:b4:e3:d8:50:f8:86:
27:e4:4f:c0:3b:79:dd:11:14:b2:cc:63:c6:72:79:
a7:22:ce:8f:33:d3:83:f0:50:e7:c3:c1:75:f7:c3:
3c:af:b5:e5:38:76:02:14:a9:9a:81:14:a6:6f:44:
2c:c3:13:fe:02:3e:89:7d:59:46:c5:24:72:9c:a6:
f8:05:28:eb:4c:5c:79:eb:05:e6:02:a6:44:a3:6c:
d0:64:d9:8a:92:7f:6f:c8:f2:45:4d:f2:a6:a5:a5:
f4:85:ad:6d:ad:b6:c6:a5:31:ac:e8:23:1e:1b:76:
56:01:52:25:74:07:78:55:ce:38:c8:cc:98:88:aa:
8d:40:d0:09:0b:e8:9c:f7:64:5d:d8:d4:1f:b9:03:
63:77:84:e2:80:79:8b:5b:9f:c5:04:a9:17:db:e6:
2a:7b:4c:55:1e:d0:9c:eb:70:8c:98:1d:af:1d:82:
89:f9:f0:f6:a7:d9:7a:28:18:62:5e:76:a1:50:b5:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2B:CC:8D:25:D7:61:54:DB:DE:8D:29:2B:04:38:38:09:EA:FC:A2
X509v3 Authority Key Identifier:
keyid:02:97:A5:89:98:F0:97:43:47:08:1C:17:F2:5E:ED:D6:5F:AD:96:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApeliZjwl0NHCBwX8l7t1l-tlmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1293db-c752-4d03-857d-579531e5a00f/1/ApeliZjwl0NHCBwX8l7t1l-tlmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a4:e4:ce:c6:42:8d:23:14:a7:be:e4:97:7c:a9:82:8a:10:
be:f8:03:43:ab:0d:ad:93:e4:5e:14:e4:6a:8f:7d:06:91:0a:
f9:d7:60:9b:62:4d:b0:3d:3b:30:46:96:c5:44:12:48:dd:6d:
ad:a4:9b:66:29:2f:63:ab:9b:c1:94:07:bf:89:5a:10:bb:84:
e7:df:a2:3b:17:f8:9a:65:4c:02:b0:ee:9e:59:36:f3:09:44:
01:09:3b:5f:06:a5:2b:a0:d2:ec:75:0e:13:23:df:a2:27:a5:
47:af:d4:69:d9:32:05:4b:f0:0d:ad:42:93:00:12:30:b2:89:
0a:08:2f:77:c3:0d:e9:94:da:31:3c:fa:92:da:a5:4f:0f:ca:
c1:6f:80:16:2c:49:bd:90:91:c4:ff:92:d0:41:24:9f:59:1d:
f7:c6:16:23:14:a5:d6:b2:8b:74:1d:11:c7:5d:69:dd:73:de:
2a:92:f9:8c:ac:94:69:87:61:59:49:b0:d3:65:ac:61:84:80:
84:b9:76:5c:8f:70:83:51:20:62:48:94:0e:06:af:b0:15:bc:
35:9c:58:ba:79:81:9e:40:58:ff:80:47:88:67:cf:9a:00:77:
69:3f:79:6c:20:a1:88:55:f1:8c:8e:6a:6c:8f:2e:73:4a:3c:
3a:5b:2a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:57 2024 by rpki-client on console-fra.rpki-client.org