Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: NVZOJuB5AYCXxmd2ItOBofYIbJVdH1ZjsdcrUOnzslI=
Subject key identifier: 2F:03:6A:8F:A6:8D:41:3D:77:60:F3:A4:05:FD:D9:E1:32:22:20:C9
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 0193549B54E1E8CD5844C872BD1FECF5F285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0402
Signing time: Fri 22 Nov 2024 16:01:26 +0000
Manifest this update: Fri 22 Nov 2024 16:01:26 +0000
Manifest next update: Sat 23 Nov 2024 16:01:26 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: Gg6rb4s8orv4BXbCZvv4KYEM4oH7Xx+prntu5NgrBis=)
2: 6Al_kVf_l9Cs-6s4xQ5I9UaaZi4.roa (hash: EvkOvhe1iFwxHRZGBtj5Li6e1x2vOm/cS/sr0uE+Tcg=)
3: nB0iBqYfvmx35lQqWdPD-o6S2yY.roa (hash: syq6jubpksgiySEaUrD3G8DUUYR6uNCG0uV3raGwU/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:54:e1:e8:cd:58:44:c8:72:bd:1f:ec:f5:f2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Nov 22 16:01:26 2024 GMT
Not After : Nov 23 16:01:26 2024 GMT
Subject: CN=2f036a8fa68d413d7760f3a405fdd9e1322220c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:1b:c9:ac:1c:ed:91:59:89:d2:c9:d9:d6:
b2:48:c1:95:31:62:01:bc:64:a8:0f:26:8c:32:9d:
e7:31:bd:e6:af:41:f1:86:29:e0:21:6f:5e:42:f8:
c9:00:c8:fe:50:c0:a7:d6:7c:03:f7:f4:07:f8:6d:
5b:04:dd:ff:9f:3c:bf:ea:4b:5b:be:de:2f:37:b4:
dc:bc:d1:2b:e7:4f:c0:b8:24:32:83:2d:0a:73:c1:
74:1e:a8:10:3f:c5:71:04:aa:ab:cc:69:52:9b:f0:
4e:4b:b5:85:90:71:5e:e3:e6:12:84:ba:b3:b0:37:
b0:e8:49:8f:ef:8e:bb:95:ce:82:d1:16:89:37:02:
6d:d2:07:99:5c:07:ed:46:04:68:ac:3f:51:6f:0c:
5d:44:ca:99:2f:46:3d:31:eb:86:ab:79:51:7e:a0:
5e:c5:c7:7a:7b:05:09:9d:81:5a:88:30:47:5c:f3:
3b:90:16:4e:02:09:b4:99:33:de:05:df:07:39:50:
ec:4f:14:d7:de:94:a1:12:d8:f8:2e:37:7e:96:ba:
6d:ce:5e:24:72:df:c7:95:e9:44:5e:6c:42:d4:95:
03:1b:86:3f:5a:b8:f8:9d:3d:e1:e9:ce:17:10:24:
0c:9f:5a:b2:d9:d3:fe:39:50:18:fe:95:b0:d0:54:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:03:6A:8F:A6:8D:41:3D:77:60:F3:A4:05:FD:D9:E1:32:22:20:C9
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:65:97:c7:66:a1:f5:b6:f4:ce:02:7c:6b:5f:53:f4:8e:5d:
a5:4b:0b:0e:54:2e:bc:07:fa:8c:d6:b7:0f:7b:12:01:3e:58:
91:e1:e5:37:87:12:c7:7a:27:94:7b:3e:03:f4:78:ca:3e:6d:
27:81:69:35:41:f1:67:11:21:6a:72:57:db:2d:1b:9e:48:57:
d5:54:2a:bf:a7:33:a8:d0:94:5a:62:72:76:24:8f:11:95:8b:
13:3b:81:07:08:58:6c:38:9a:d9:f7:5d:e1:3f:bf:0e:09:ba:
2f:cc:b5:f2:93:03:40:91:79:9b:71:df:88:4e:16:c9:0a:b7:
24:5e:c0:cc:34:f2:c6:50:00:b4:de:96:93:f6:eb:30:c0:c6:
b4:81:d1:c6:d0:4b:df:80:0c:dc:e1:14:40:84:2a:31:7c:de:
bc:00:d8:7d:40:00:8c:f3:7b:b0:ae:97:e7:cd:e8:66:f9:23:
1e:53:ec:c4:4b:b5:26:7e:84:c5:c6:9b:f2:c5:dc:2b:dc:62:
69:1b:b9:f0:22:32:80:2f:15:6a:84:0b:2e:e4:b0:17:40:15:
3a:b4:bd:2c:2e:d1:76:77:bf:77:e4:e7:0c:36:8f:56:94:fb:
24:a2:05:4a:aa:a7:23:e2:a2:64:c7:3d:2b:fd:b0:fc:3b:71:
20:8e:1a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:06:49 2024 by rpki-client on console-fra.rpki-client.org