Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: MZuvbCgKnadquEf+oxLux5SBiVxWVuM957OZ5+KUtCY=
Subject key identifier: 9C:6B:33:C7:D9:94:23:41:C1:DB:15:4E:A2:36:7C:AE:7D:43:BD:43
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 01935688B345ED2BD6BCB683FA19B8C3453F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0BDA
Signing time: Sat 23 Nov 2024 01:00:19 +0000
Manifest this update: Sat 23 Nov 2024 01:00:19 +0000
Manifest next update: Sun 24 Nov 2024 01:00:19 +0000
Files and hashes: 1: 5SbSfaPqglT_LS49Iu7Sb2bs45I.roa (hash: Cd5aIQnIyMVVvvsSlx9BelifKiolyUz+8pbVp9BLqB4=)
2: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: DD/HRMApZlWJkm6Tdmqf+DGVHk9FD57w19PFRMhap10=)
3: xEQTNBRUBEfw6-rNz7s7PC4NcI0.roa (hash: YchpiE+E4jk85eTM56jGn7Qkd3lN1liv6ICp30IunHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:b3:45:ed:2b:d6:bc:b6:83:fa:19:b8:c3:45:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Nov 23 01:00:19 2024 GMT
Not After : Nov 24 01:00:19 2024 GMT
Subject: CN=9c6b33c7d9942341c1db154ea2367cae7d43bd43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:4d:63:3f:ee:7a:fe:b6:3e:c3:34:74:9e:
7e:45:4f:bb:f0:0d:79:4b:e5:b6:99:89:35:95:37:
72:97:78:fe:4e:ce:0b:74:78:5f:0a:23:c1:df:d7:
ed:a2:24:7e:37:67:4a:ec:1c:1a:91:30:86:e3:a7:
54:ef:99:29:bd:0f:ec:92:25:92:2a:89:91:c9:fe:
dc:2a:f8:37:6f:c8:0f:cd:01:a5:46:b1:07:01:9e:
e7:c9:8c:48:cf:15:fd:eb:8e:43:39:00:a6:b6:1c:
f7:d2:79:22:91:d5:d7:3a:63:1d:13:72:e5:85:ca:
f7:67:bf:58:78:d4:f0:30:80:a4:19:77:13:90:a3:
76:20:d9:ef:e4:b8:07:91:0a:94:db:36:63:45:f7:
86:48:75:c2:d8:d7:b4:c1:c9:cb:88:7b:e1:ca:18:
a9:bb:da:23:9d:2c:2d:cb:34:83:9f:4d:81:12:b5:
9a:b1:69:62:47:25:c5:5e:6f:cc:a9:7a:5c:8c:23:
d9:ef:3f:fb:61:b5:fd:40:04:37:49:cc:06:bf:e6:
ee:5b:74:e6:a7:88:26:d9:54:d7:69:fc:a7:28:db:
87:fe:75:ff:f0:51:ac:14:2f:34:b4:49:5b:96:22:
64:23:cf:9d:95:aa:18:f9:b6:60:86:97:fa:43:bd:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6B:33:C7:D9:94:23:41:C1:DB:15:4E:A2:36:7C:AE:7D:43:BD:43
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:bb:76:f5:d3:fb:9f:fe:ff:bf:64:36:2c:03:bd:aa:a6:a6:
30:a0:b7:be:4d:b0:3a:af:8b:cd:dd:34:45:e0:e5:6b:45:bb:
90:eb:95:ea:bb:98:2a:4e:d1:e2:51:95:d3:af:34:e1:14:f0:
97:7c:90:54:8e:7e:89:a1:9e:bf:e1:ce:27:d9:74:7b:2a:26:
fc:31:d0:5d:7f:cf:6a:50:ce:cb:13:f7:01:b9:fd:12:5a:a9:
aa:ec:14:26:f0:ee:3e:f0:bc:d2:ca:df:86:bc:a5:d9:6e:04:
90:f9:29:a6:08:0d:80:2f:3f:8e:51:12:15:d4:c6:dc:4f:be:
0c:5a:66:f0:f2:96:2b:f5:e8:9f:d0:0f:05:0a:a7:71:28:53:
56:81:c7:f7:b2:a5:f8:7b:2f:ea:fa:a4:52:e7:91:3f:dd:25:
27:f5:30:fb:f6:2e:cb:ce:f4:af:8c:d3:d6:59:d6:42:7f:87:
44:9b:84:be:38:91:95:04:06:21:80:ed:f2:ef:47:24:fc:a1:
bb:10:df:36:27:0e:e8:87:81:2c:c9:53:e2:32:2b:95:a1:8e:
f4:7c:7e:b5:85:b7:84:75:ee:08:9f:8a:d2:93:62:af:22:7f:
02:74:b5:ee:ba:bf:fe:2d:db:6b:73:82:11:e2:9c:7d:60:47:
c0:2c:9e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:17:33 2024 by rpki-client on console-fra.rpki-client.org