Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier: 8gjjkbJOzWE7A9kasL0ejskINhgRAK/o48Hbyy1sjOg=
Subject key identifier: 21:3D:C4:DF:76:97:C1:5B:D0:C9:4B:2D:AE:8F:51:E1:C4:11:CA:4B
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 0193568A39F334C9829FC2808A429D28BCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number: 07DA
Signing time: Sat 23 Nov 2024 01:01:59 +0000
Manifest this update: Sat 23 Nov 2024 01:01:59 +0000
Manifest next update: Sun 24 Nov 2024 01:01:59 +0000
Files and hashes: 1: JxZtEvIoR08DFGlB2Ty_CjtYE7M.roa (hash: T4xrcdE6YcHTCkqlCRVWydPsrpKe7yjFLACQkXEYxXM=)
2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: O7rDupHIZ4uDhls7p5Xeidn7dKnsarOmDjuz/A0/DIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:39:f3:34:c9:82:9f:c2:80:8a:42:9d:28:bc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Nov 23 01:01:59 2024 GMT
Not After : Nov 24 01:01:59 2024 GMT
Subject: CN=213dc4df7697c15bd0c94b2dae8f51e1c411ca4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:19:e6:41:9a:b1:ca:4a:9b:d4:4b:22:ce:
6e:7b:64:a6:59:58:8e:af:7b:13:ae:d8:a9:23:f2:
94:ac:15:de:8f:16:d9:e3:d8:05:14:42:4d:29:ea:
2b:a7:12:04:db:8a:25:64:dd:6d:26:f3:b1:c3:67:
c2:c8:4b:cf:4d:74:95:96:6b:25:64:c3:51:f7:d3:
5d:62:d5:02:bb:ee:8d:57:89:53:ea:47:86:56:60:
93:97:8d:63:75:56:c9:d9:d0:06:c7:b7:9d:9e:70:
26:c6:dd:00:d2:5e:41:d8:03:1b:c7:92:62:c0:b2:
d7:c0:2e:f3:c7:6b:3f:da:7f:c7:bf:dc:d8:fe:15:
cf:eb:0c:26:09:91:58:cf:78:b8:c2:1e:28:63:01:
b7:d5:f1:df:1b:f8:af:d4:22:a0:43:0e:e9:ef:49:
c7:9a:00:f4:5d:3a:55:28:e1:93:d6:af:d6:df:b3:
bb:5b:b7:bc:c7:40:01:9d:e8:25:1e:5e:56:e6:dd:
db:89:0a:74:33:8e:27:dd:33:f3:a1:12:05:6d:39:
c2:58:f8:1c:84:46:6f:a3:53:8c:03:e7:45:4e:cd:
cd:00:bb:15:a5:f7:8b:dc:0a:04:3a:92:52:90:f8:
91:7e:45:ee:bb:46:8c:26:a3:57:ee:59:ce:2d:3f:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3D:C4:DF:76:97:C1:5B:D0:C9:4B:2D:AE:8F:51:E1:C4:11:CA:4B
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:11:c2:a9:a9:47:0e:91:24:3f:5e:a8:eb:26:d4:64:9d:08:
0c:66:6b:d7:3d:dc:9e:a8:ff:b2:fe:06:e1:a8:79:55:96:a5:
33:3b:37:3d:35:77:db:63:89:f9:78:ad:95:34:89:99:eb:38:
07:e1:df:5c:2b:c3:5a:47:f4:61:15:c8:ae:77:fb:da:9e:1d:
0d:79:88:3e:af:c6:a9:66:8f:02:e0:b1:1c:79:44:c3:08:00:
bd:58:2a:9f:8d:65:a5:ee:f5:e8:ea:2b:32:f3:e7:6f:90:51:
bf:be:91:8f:e6:1e:b6:bc:ef:84:11:81:15:88:21:a5:51:db:
a2:4b:41:36:1a:f3:0c:f0:46:09:fc:47:0f:03:fd:37:da:7a:
83:41:27:5c:5b:83:0e:5e:35:b6:6f:5e:c5:d6:e5:1d:e3:a6:
0c:09:a8:5e:91:41:97:8f:1d:84:fc:15:0b:17:95:28:72:be:
52:15:e2:b3:7f:e3:75:1e:a2:cb:df:e8:64:47:c1:1d:2e:5f:
e3:b1:e9:28:5f:6e:6c:4c:e5:b4:ae:f3:ca:13:c9:57:0d:e6:
5f:18:9b:09:8c:1d:62:ad:2b:ca:d0:9b:30:c0:5b:9e:75:27:
23:6e:4e:2d:08:5f:3c:cd:37:db:78:be:1b:e2:bb:cf:9b:fe:
56:54:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:23 2024 by rpki-client on console-fra.rpki-client.org