Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
File: mCbZDesQFiidwO-MRLU06fsnG1s.mft (raw, json)
Hash identifier: GTgYJHh4A17wgpx/Qx9A7aZVEjmZfgeroPaFCWxxpVE=
Subject key identifier: E5:BF:63:D0:F8:E7:E7:25:12:67:4D:23:6A:4F:C6:C8:BC:14:11:F7
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 019369D9DBE0A62B3C8DABBFDD6DE056B480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
Manifest number: 10B5
Signing time: Tue 26 Nov 2024 19:01:45 +0000
Manifest this update: Tue 26 Nov 2024 19:01:45 +0000
Manifest next update: Wed 27 Nov 2024 19:01:45 +0000
Files and hashes: 1: NeahiD1oVmTiWVHicEaSJZ0Qj2A.roa (hash: hbVEaRzWU8AhFuRn2I/0J2LteARkkV4Mz8zpmW3YkIc=)
2: mCbZDesQFiidwO-MRLU06fsnG1s.crl (hash: ujTuq6qWWaaWevvNqeMEE88DgeSPgFPYar7pCeaZlLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:db:e0:a6:2b:3c:8d:ab:bf:dd:6d:e0:56:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Nov 26 19:01:45 2024 GMT
Not After : Nov 27 19:01:45 2024 GMT
Subject: CN=e5bf63d0f8e7e72512674d236a4fc6c8bc1411f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:43:76:1a:aa:ef:70:e6:5a:c7:d2:cf:8f:
ab:fd:0f:dd:46:27:4c:a6:21:b9:78:6c:bd:9c:9e:
f4:79:cb:0e:26:cf:fa:46:fc:03:ce:6b:4d:73:b0:
32:ef:8d:51:47:ba:4a:80:9f:29:73:7a:b6:1f:36:
19:96:3e:21:6e:70:9a:4a:28:19:64:2c:f5:fe:ac:
7a:49:58:12:24:a7:f1:18:8a:06:5d:4b:a7:24:4d:
d2:7c:c7:cb:c0:da:95:e4:a2:e4:97:9c:09:b2:51:
aa:d9:c4:7a:42:c5:af:78:58:13:c7:d9:37:0b:09:
c5:82:4b:69:be:8c:bd:c0:a1:f4:43:94:54:38:f6:
9a:d0:10:28:27:73:f0:0b:65:b1:91:7e:66:ad:47:
eb:fc:ac:8c:bc:9d:4e:78:29:00:ed:31:43:a0:df:
64:3b:81:d4:3e:1d:ec:68:e0:4c:65:94:a2:87:32:
bf:f4:37:77:d6:69:e7:69:8f:cd:30:4a:3d:73:1e:
c0:c0:de:41:86:69:e4:53:c2:8e:ce:e8:a9:45:27:
8b:4d:a7:4c:af:26:dd:fc:23:66:45:9f:2a:02:fc:
d0:f1:80:e8:30:67:a6:65:e9:e3:c5:36:45:74:a0:
e8:6e:56:2c:51:80:27:1b:4c:ac:4b:62:6f:cb:50:
51:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BF:63:D0:F8:E7:E7:25:12:67:4D:23:6A:4F:C6:C8:BC:14:11:F7
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c6:e5:c3:e9:62:8a:49:5d:55:10:5f:7e:59:c9:06:17:77:
f7:90:71:12:98:20:7e:ae:93:83:49:c9:db:89:61:73:76:4d:
6d:38:e4:16:86:fb:38:1e:d8:17:16:df:59:12:97:46:16:fa:
b0:7a:c2:60:9e:b7:f5:96:51:a0:a4:c2:dc:78:29:d3:1b:97:
b1:33:b0:59:1a:ca:f2:fa:19:1f:24:fa:93:89:68:60:ef:2a:
cd:2d:2b:fc:05:bf:5a:4c:00:61:de:c1:7f:da:59:16:4e:c9:
1d:86:02:6d:96:e2:ba:cb:94:fe:ef:be:f4:39:7b:f0:c5:e4:
54:c8:7d:41:49:84:05:42:5f:bf:72:ae:5c:d2:ec:8a:ec:53:
75:ba:f2:63:79:8f:5d:e1:4d:60:6a:2c:97:83:e1:f1:be:11:
92:65:17:a1:b3:c6:f0:98:b9:04:f4:95:a3:bf:ad:09:93:3a:
53:76:bb:47:b5:79:60:bd:28:7d:21:99:f1:62:34:ba:29:47:
ac:fa:06:4e:cd:9f:a1:48:64:4d:1c:2b:74:9f:60:2e:fb:12:
29:e5:14:fd:a6:c9:f7:8b:a6:7e:bd:19:87:d6:79:6f:18:04:
48:d1:33:66:2f:9f:0a:f5:d9:11:07:aa:92:06:a9:ba:0a:4e:
a8:2b:a2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:16:18 2024 by rpki-client on console-ams.rpki-client.org