Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: f90CaffshaZUDECFGd0dvKX9aQJTuyeCZgWWq3hZFmg=
Subject key identifier: FF:4E:C4:1D:E5:46:67:C6:24:7C:E5:94:07:79:FC:46:F3:69:CC:48
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 0193549B8B9A08D50D720C1BB5A421911250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 1389
Signing time: Fri 22 Nov 2024 16:01:40 +0000
Manifest this update: Fri 22 Nov 2024 16:01:40 +0000
Manifest next update: Sat 23 Nov 2024 16:01:40 +0000
Files and hashes: 1: haFxmEplesatplQxfCjMgKAGx-w.roa (hash: 8dF57wkEF3zvfWpMJNNT2LtVTE2DN/jEVKaw7JUHQeY=)
2: hj9c802h27A_GvsHt_USkRE3yPs.roa (hash: 93uBritA9RupTUznnPbJQHB4ptevP6l3YJa4aQx702M=)
3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: dtrlF9seC8caY64rlpL9gsBtnfg7j4fXwT0m7sfazbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:8b:9a:08:d5:0d:72:0c:1b:b5:a4:21:91:12:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Nov 22 16:01:40 2024 GMT
Not After : Nov 23 16:01:40 2024 GMT
Subject: CN=ff4ec41de54667c6247ce5940779fc46f369cc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:18:c4:81:62:b4:8b:2a:98:d8:00:fc:5b:
68:97:b2:c5:90:29:cd:04:c8:c6:c3:91:11:10:2f:
5c:63:fe:ed:af:b3:30:96:68:07:81:33:3d:b3:55:
6d:fb:70:21:47:fd:0a:73:7f:62:9e:59:57:8c:b0:
26:73:24:df:da:2f:77:04:b5:77:fe:18:ff:09:6c:
50:79:ed:63:8c:cb:41:fa:12:73:0e:fd:85:ce:24:
87:60:ec:07:f8:4b:e4:17:fc:0c:25:b4:d6:fe:50:
29:c4:d4:82:d7:71:c6:06:37:7a:fe:65:40:b5:f2:
3a:d0:b8:7a:8f:b9:0a:f3:0d:7c:11:7a:c0:81:78:
87:0f:31:d8:2e:0a:fc:52:79:0c:20:c1:19:47:a6:
8e:54:22:46:80:4f:8e:f8:1b:75:f7:5c:0f:da:da:
c1:bb:21:41:27:67:a1:ff:1c:05:ec:52:22:36:e9:
3f:31:96:09:55:cb:92:05:9d:f9:dd:a0:c6:f8:39:
dd:bf:de:31:7f:d9:68:42:e4:3e:58:25:98:53:ee:
2c:35:af:8a:ee:3e:9f:b6:a0:3d:34:00:49:05:50:
57:b9:63:ac:02:be:44:58:8b:01:83:bb:6b:42:7e:
3a:4e:72:49:4e:72:3d:d0:bc:a8:73:1f:07:d9:e3:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4E:C4:1D:E5:46:67:C6:24:7C:E5:94:07:79:FC:46:F3:69:CC:48
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cb:d8:d4:45:73:a0:f0:ec:22:27:3d:21:e4:35:16:a8:b8:
5a:91:96:d5:ca:41:04:fa:29:ab:1a:13:28:49:47:e6:99:3b:
f7:14:26:cf:e0:db:96:ca:14:61:7d:15:54:63:57:75:26:c0:
f6:3c:1d:a7:e1:05:7e:84:ec:03:7b:1f:e9:d9:dd:e9:82:bd:
cb:97:d6:9c:33:e6:a7:ae:55:3a:2d:16:fc:6a:c5:9a:cf:8a:
4b:6f:ae:67:1d:fc:14:82:5e:37:f6:6a:2a:69:ee:73:29:11:
24:71:37:1d:30:58:b4:13:00:36:b5:e1:d0:a2:5a:0f:09:d5:
00:7e:96:46:89:9d:9e:ab:15:86:95:ec:0e:ec:24:5f:50:d8:
d0:11:95:48:71:58:de:8f:51:bb:8e:5b:5d:2e:78:85:4f:8f:
ab:bc:42:07:a1:d6:0c:60:ea:5a:1b:7a:b4:62:83:55:0a:70:
a9:c5:f5:53:30:7e:a1:fe:da:da:f9:fb:cf:d0:33:52:0e:0e:
85:b0:ab:33:58:50:8e:e4:ef:83:2e:52:64:ed:d0:99:e4:25:
8e:e4:9d:35:59:66:cc:38:bb:75:d7:b0:7e:f5:6e:ac:ac:e4:
05:a8:30:b5:b0:10:9b:56:ba:b4:4b:d0:70:70:4d:69:ef:12:
f7:47:59:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:01 2024 by rpki-client on console-fra.rpki-client.org