Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
File: 2DAJNvtQCnRWRAq6izuK1TyfAUA.mft (raw, json)
Hash identifier: cp1QW7i+oNgkZ0f3GufM1D9osBtYyyKPdgGYw1PEXLw=
Subject key identifier: F1:A4:AB:48:0A:78:50:0A:A3:0C:32:A2:CD:39:BD:F4:C8:88:73:6A
Authority key identifier: D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
Certificate issuer: /CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Certificate serial: 01935878902390EF8BADD8829B484BFD845B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
Manifest number: 0950
Signing time: Sat 23 Nov 2024 10:01:56 +0000
Manifest this update: Sat 23 Nov 2024 10:01:56 +0000
Manifest next update: Sun 24 Nov 2024 10:01:56 +0000
Files and hashes: 1: 2DAJNvtQCnRWRAq6izuK1TyfAUA.crl (hash: P8MTLh4OVk8SoCjLhhP109CsQlcF5knLwbieX0POWTA=)
2: in1yhgF-cCERXcu2NtwiBt_jW4s.roa (hash: GMjBFvLWdmCaksTRyAmJKx/Zh0CbDg/GYjnYc/8Tcbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:90:23:90:ef:8b:ad:d8:82:9b:48:4b:fd:84:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8300936fb500a7456440aba8b3b8ad53c9f0140
Validity
Not Before: Nov 23 10:01:56 2024 GMT
Not After : Nov 24 10:01:56 2024 GMT
Subject: CN=f1a4ab480a78500aa30c32a2cd39bdf4c888736a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:01:d4:78:55:36:b9:09:d0:5e:c9:db:c0:64:
d1:8b:aa:f4:ea:60:8b:aa:01:2c:8a:86:45:9a:ca:
21:2b:fb:d8:41:b9:c6:cc:d5:5a:57:26:20:7a:8a:
55:54:29:c7:68:6a:9e:09:42:15:12:fb:64:2c:d2:
e5:08:3f:e6:4e:f1:48:04:85:ab:11:a8:0a:e6:d3:
cf:b1:29:20:a8:0a:c2:1b:d2:c2:18:b0:3b:1b:15:
98:b6:d2:58:14:40:85:ae:d9:26:ac:2f:ed:cc:06:
94:03:89:23:b1:90:dc:79:1f:c8:4d:e2:92:04:7c:
3f:dd:92:b2:cc:0f:06:62:91:4a:03:5c:23:4f:b8:
df:25:d6:31:d5:3a:56:9e:48:05:e3:b8:db:dd:e4:
1e:9e:07:43:c9:32:07:c3:af:28:bf:19:07:71:f2:
a3:50:18:1a:97:ca:38:17:9a:9a:d8:78:1c:d8:b1:
cd:7b:ef:d6:e6:01:6f:92:f5:28:31:e7:d7:eb:a3:
45:fe:fd:df:5f:32:e9:bd:3e:75:26:f5:07:34:3b:
4d:c3:31:f4:ed:c8:57:ce:5e:ca:00:da:88:ea:9c:
7c:6f:02:74:d0:34:ea:3e:db:66:f9:5e:6e:b2:54:
d8:c8:bd:22:87:c3:ad:c9:52:59:dd:ea:74:ed:67:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A4:AB:48:0A:78:50:0A:A3:0C:32:A2:CD:39:BD:F4:C8:88:73:6A
X509v3 Authority Key Identifier:
keyid:D8:30:09:36:FB:50:0A:74:56:44:0A:BA:8B:3B:8A:D5:3C:9F:01:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DAJNvtQCnRWRAq6izuK1TyfAUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/77f2aa-cc0c-4f15-8b39-addcd8552026/1/2DAJNvtQCnRWRAq6izuK1TyfAUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5a:3b:64:5c:d7:71:b1:ab:05:90:4e:25:48:55:4c:47:a7:
8a:a6:9f:2b:1e:09:1c:4a:16:42:e3:f1:3d:43:f1:e7:42:6e:
b4:fc:0c:9a:2b:82:81:4c:f2:75:42:f6:cb:f3:f0:99:7a:a7:
ef:94:fb:4f:f3:7d:01:12:01:d5:e8:45:90:e3:94:bc:80:4e:
61:ec:0a:02:a0:5c:2a:80:1e:62:37:16:55:e9:f5:5c:74:20:
7a:72:07:3b:06:f9:27:88:c0:cd:e7:0f:5b:ae:a4:0b:1e:26:
9e:6f:77:32:11:1e:f5:12:37:ea:18:76:13:7e:d6:d6:54:2f:
02:a9:a2:41:f3:8f:b7:ca:b3:0c:57:93:ee:c5:13:23:36:f4:
67:af:80:be:53:7d:c6:ed:e2:a1:94:53:71:cb:8d:ce:c6:d1:
3b:c7:7f:ba:ac:55:da:04:3c:51:d0:40:11:16:66:b2:be:86:
b1:25:d7:8e:21:a0:d2:62:d0:ab:01:58:70:6a:8b:ac:da:9e:
48:11:96:5d:af:07:83:f3:0e:ee:6b:6e:45:5e:39:6f:18:78:
98:02:89:4e:0e:65:3c:e3:55:be:c1:b1:f2:fd:21:8d:47:8b:
6b:49:56:69:d8:85:07:1a:e1:f4:58:d0:78:45:fb:2f:0d:87:
b7:9d:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:00:11 2024 by rpki-client on console-fra.rpki-client.org