Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
File: EvG7YR8rejeAD0nGwSXF7pi3GcU.mft (raw, json)
Hash identifier: hXrT+TPu/6WRyK45MtCCiZCPlE/svYt5uAC6hgC74ak=
Subject key identifier: 81:8D:4C:3B:6A:96:82:C9:D0:75:A7:5A:8A:48:08:14:1F:0B:A7:CC
Authority key identifier: 12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
Certificate issuer: /CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Certificate serial: 019358770C2E5BB8618AB154C616DAC08C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 10:00:17 +0000
Manifest this update: Sat 23 Nov 2024 10:00:17 +0000
Manifest next update: Sun 24 Nov 2024 10:00:17 +0000
Files and hashes: 1: 7bPKhXsGBS37j0edM7zhsP2uf5Y.roa (hash: a8JhEnBpC8dFzPGjHqRtJfMHDon2SxFOxBndl8iBZwQ=)
2: EvG7YR8rejeAD0nGwSXF7pi3GcU.crl (hash: 4VQ1wlC2mIaQbw0dtKC4NDeenjZzSLPVXCMIyDUVS0E=)
3: F8Blo1BoR0QEdmujZT-0DhQ9xSk.roa (hash: INcuge+1sOoqqdwbqHomou7klQ3L7q5/f4kYx8zOqGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:0c:2e:5b:b8:61:8a:b1:54:c6:16:da:c0:8c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12f1bb611f2b7a37800f49c6c125c5ee98b719c5
Validity
Not Before: Nov 23 10:00:17 2024 GMT
Not After : Nov 24 10:00:17 2024 GMT
Subject: CN=818d4c3b6a9682c9d075a75a8a4808141f0ba7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:5b:d0:bb:c7:c3:36:35:c3:53:64:33:03:
ad:9e:6f:93:29:39:c0:1b:88:7c:43:43:fb:f3:12:
f8:14:bd:3d:f9:d9:11:c1:d6:80:47:20:d3:8f:d4:
af:ac:ad:9b:5e:b4:82:41:24:67:aa:51:a3:aa:99:
7f:67:63:1b:02:97:17:b9:3e:16:b1:89:9a:9f:d0:
32:a9:a3:35:49:b8:a4:e1:c6:80:03:57:17:04:0f:
03:be:46:e1:52:34:d6:71:81:97:ac:09:78:52:75:
23:07:0e:e3:2f:41:01:54:de:1e:c3:dc:e9:c3:8f:
f7:00:16:1f:f9:cb:54:35:fe:71:43:d4:92:6a:41:
b9:39:b4:75:56:e5:66:f5:2c:ae:da:d4:aa:77:0d:
43:1d:03:bd:23:50:a1:1c:07:ab:27:2d:86:79:95:
05:21:fd:cb:14:14:8e:57:aa:dd:35:a7:8f:b3:82:
18:05:bc:7e:48:b2:b3:71:57:49:7e:0c:25:42:3c:
e2:c9:60:50:24:f6:eb:7b:26:32:8c:54:b1:09:70:
35:b1:73:74:e4:1a:33:61:6f:0b:51:c7:62:2e:5d:
b3:04:e1:87:2e:bb:af:12:80:15:af:65:df:24:91:
aa:b8:11:6f:6b:4f:32:b4:7a:85:1c:c2:53:58:50:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8D:4C:3B:6A:96:82:C9:D0:75:A7:5A:8A:48:08:14:1F:0B:A7:CC
X509v3 Authority Key Identifier:
keyid:12:F1:BB:61:1F:2B:7A:37:80:0F:49:C6:C1:25:C5:EE:98:B7:19:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvG7YR8rejeAD0nGwSXF7pi3GcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/EvG7YR8rejeAD0nGwSXF7pi3GcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:77:e0:cc:f9:cc:2b:8f:21:ba:d8:83:10:16:69:ff:6a:2f:
f0:00:18:c4:24:56:19:0c:92:41:60:cd:69:a6:b6:b2:41:7c:
c8:c0:0a:ac:41:90:f2:00:66:b8:2b:69:b7:71:76:25:d7:e3:
ed:9e:82:87:bd:79:db:30:1a:19:87:07:93:62:00:81:2b:aa:
36:01:9e:af:d0:f3:46:5e:2f:39:ed:cf:1c:7b:ca:fe:b7:55:
03:9c:60:95:7d:ae:e3:dd:ab:63:78:97:f9:7d:54:66:ba:18:
c0:de:f2:69:4a:c3:86:c6:c8:db:3e:4b:e9:e0:0c:a1:d3:ac:
d3:7c:a6:53:7b:40:e6:1b:8e:ae:04:b6:de:3c:16:b4:02:fb:
1c:61:4d:98:85:75:5e:78:41:54:54:56:cd:65:6a:c2:e5:39:
76:bb:49:aa:91:aa:c1:d6:5f:b3:22:8f:87:03:a1:36:77:97:
3c:ef:7a:b0:6c:9e:72:88:ef:e1:44:7e:40:8b:a8:3a:05:22:
14:45:43:7b:00:b9:9c:20:1e:0f:36:c2:bb:73:47:a4:28:cb:
a9:77:25:3b:51:b1:a6:ed:0f:4b:76:56:3e:5e:c2:41:b8:e6:
ec:8d:61:35:f0:c5:e0:db:ba:63:21:5c:9a:6c:d2:f4:72:7f:
f8:8d:a3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:59 2024 by rpki-client on console-fra.rpki-client.org