Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: aF30WVtTLPANOxk4XKb3Sselc3wgXzsXoLgPn/LBjc8=
Subject key identifier: 3C:65:FB:58:D4:5D:BF:B3:62:4C:15:94:C0:69:FE:75:D8:41:63:3A
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 0193512BBFDFC9E145C5F195790495FDA8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 00:00:41 +0000
Manifest this update: Fri 22 Nov 2024 00:00:41 +0000
Manifest next update: Sat 23 Nov 2024 00:00:41 +0000
Files and hashes: 1: 5HcGwliJpgWS7-f23ONCxA0a9no.roa (hash: WH7kzacmuUDqVWAqi3moBjmfnIc3KjgI57AOOJmD9eQ=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: +xqHhB7kB3ODJzTBZucRPJVwTZZfS+q+ePB1cTbAVM4=)
3: cgf-zS-5JS1jlTjEemFU8o8jilY.roa (hash: m0Njn+arexlq04Dy3aaK2j8YCTKd6cUrfWZxTpdG+Iw=)
4: jukbLrV6RNDZa7-66mqe_uLL5vM.roa (hash: 3ysldxbFpvoGG8lBzfmTjHMeJJcD7dNrHhbrHMD4zeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:bf:df:c9:e1:45:c5:f1:95:79:04:95:fd:a8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Nov 22 00:00:41 2024 GMT
Not After : Nov 23 00:00:41 2024 GMT
Subject: CN=3c65fb58d45dbfb3624c1594c069fe75d841633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:16:96:7b:ee:05:f9:c0:07:bf:1f:82:32:
d3:46:77:19:82:2f:96:bb:11:cc:4f:cc:0d:b2:bb:
8f:d1:72:aa:9b:0d:e0:1c:2b:c1:c0:be:79:d3:5f:
76:55:cb:fc:34:27:7e:53:f8:6d:cb:e9:56:e1:54:
1d:55:a8:93:2f:aa:c9:19:a6:a6:3d:68:14:65:dd:
2d:d6:f4:50:2a:4a:39:39:69:99:e3:ee:de:94:2a:
69:d9:eb:d3:dc:45:ca:a3:8a:21:aa:09:bf:3d:df:
83:18:d0:d6:15:5c:e2:2b:8a:0a:29:16:d5:ea:2a:
54:ef:16:26:ec:ea:7a:41:92:81:97:e7:b2:02:18:
83:56:3c:7a:4b:51:ff:03:ea:05:15:ec:c0:10:5c:
6a:ac:45:d4:c6:7f:73:72:26:5a:7f:fb:6c:6c:04:
e5:f0:35:f0:63:bf:5f:2e:fc:f4:de:fd:75:c6:6f:
bf:98:4f:e8:9d:08:31:97:57:81:01:fd:48:6e:a5:
b4:04:37:dc:8a:6d:cf:d2:dd:bb:c2:e8:30:e1:0b:
17:6d:a9:16:5c:15:31:63:4d:32:dd:1e:20:c5:1c:
a3:86:5f:1e:49:13:9b:9c:08:95:c1:68:a3:d1:1a:
38:08:5f:c9:25:20:aa:5d:44:c1:d0:0e:bd:cc:d2:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:65:FB:58:D4:5D:BF:B3:62:4C:15:94:C0:69:FE:75:D8:41:63:3A
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:55:29:8a:42:95:53:36:1a:e5:b6:db:85:b8:30:a2:73:45:
97:c5:06:a0:df:84:4b:3c:af:6d:01:35:f0:b8:ca:6f:f4:a3:
e1:1c:9b:06:c6:7a:3c:1c:ae:3e:d6:48:70:95:d5:4c:56:45:
7b:a5:3a:bd:21:b3:36:8e:93:b0:31:b9:14:23:20:37:34:a1:
eb:b8:37:41:1b:5d:5a:16:77:91:55:91:18:7e:00:df:68:ea:
9c:48:82:4a:c2:3b:4a:f1:dc:80:ee:6b:ec:43:3a:ea:19:7e:
13:f5:d0:bf:d9:42:fa:ec:41:72:19:4b:ff:c1:45:52:2a:6e:
f7:e5:f7:de:31:e0:d1:0e:cd:4f:02:06:a8:fe:d9:1c:2a:a0:
bd:11:bc:28:52:02:06:37:72:ca:8e:22:e9:03:6e:0c:a2:9a:
f3:54:8c:2a:ca:98:d6:2d:a2:3a:5a:81:3e:b1:17:ad:6c:97:
26:97:0c:33:83:d4:e2:6a:a2:07:c8:b9:a2:5e:6e:59:8d:df:
1b:f3:ad:d0:9b:57:ba:3b:00:f8:64:24:ad:56:05:fb:9b:f0:
63:68:fc:a0:3e:23:83:c6:9a:ca:50:f2:4e:27:37:1f:ec:bd:
42:96:f5:10:ed:3d:6c:36:6f:b9:ca:4a:2f:a0:04:f7:ea:52:
21:e8:6d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:52 2024 by rpki-client on console-fra.rpki-client.org