Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
File: 0LhJubyQQqFVczGTfkrXFRivYc8.mft (raw, json)
Hash identifier: hrsaCr7qSGOXrFvRqiUVaKgAODsEQuGn+GLmGmNNhP8=
Subject key identifier: 3E:7D:49:30:AF:98:8A:63:F0:92:08:D7:61:4B:1E:D7:85:5C:F2:45
Authority key identifier: D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
Certificate issuer: /CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Certificate serial: 0193549B6216E505168FE61E6ECFB2053330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
Manifest number: 1377
Signing time: Fri 22 Nov 2024 16:01:29 +0000
Manifest this update: Fri 22 Nov 2024 16:01:29 +0000
Manifest next update: Sat 23 Nov 2024 16:01:29 +0000
Files and hashes: 1: 0LhJubyQQqFVczGTfkrXFRivYc8.crl (hash: nDnkXV8gXryM5ltuCxhQeH5PaPQn6eUoolS5Crr4vWY=)
2: 1-DW4bAGAFOB5tXQ6ff-qcRUVg7w.roa (hash: aQyo7itWwdKxpJe+xyAy9NCW9tWWBXMURw+vse4wpxM=)
3: CKlb_jCKSU5WneqetYnL3tbRKEY.roa (hash: Zxb8yfKCp47LQZ4BUCjpOjjNCqcgJnohPLwIHoRSeM0=)
4: UYyu2iB0gA0Hbmi3M_K5Q8G7dlM.roa (hash: Iy9Xp4KMZfpbUZe3zNfaWMerauHwB/+wu13RZRV7sAw=)
5: UnMVx9MrTFqpwrz7bsJIgRN03tc.roa (hash: gtnDSVWf+nxibB2V8m8rfDjtBcfnHSFMdPz7oj4RGuU=)
6: YC3y4qJsXUAPIEC7z7PN1k_bJ7s.roa (hash: igr84PHMi34RCN3+zUyHCvpN+RzyfcZDj/Vk2/IwsoE=)
7: dvkaw-vNrn_feOOix-w6ShcClWE.roa (hash: C4oe/Ry0U+MP65qqJcEsyFiuGgNtNDoYGflwRM8WD7o=)
8: iUll6dAt52yo_L6IVRBxpuY46bI.roa (hash: mbpNGcx4lvRouGZ3VOhMS44+PMUPXQn70I3H9OD1n04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:62:16:e5:05:16:8f:e6:1e:6e:cf:b2:05:33:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0b849b9bc9042a1557331937e4ad71518af61cf
Validity
Not Before: Nov 22 16:01:29 2024 GMT
Not After : Nov 23 16:01:29 2024 GMT
Subject: CN=3e7d4930af988a63f09208d7614b1ed7855cf245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:6c:7e:82:97:bf:6e:56:60:3c:c3:42:2b:
1d:c9:34:56:89:df:20:25:66:5d:6f:83:87:67:10:
e8:61:f1:71:1a:30:f8:4a:af:b2:1e:78:83:77:74:
c7:0a:29:03:00:90:67:23:90:10:e1:6c:db:ba:02:
e9:a4:5c:98:cc:0a:53:ea:37:21:b8:52:76:5d:aa:
ff:9d:d2:97:e6:8e:3d:18:be:f9:0e:7b:7f:34:f4:
30:43:17:6e:17:22:34:98:b3:02:cd:42:bd:5c:3d:
d2:80:75:2a:78:94:93:0d:7c:63:81:86:9b:9e:e8:
ba:42:db:2c:59:f5:bb:84:e2:6d:3c:a7:d7:54:d4:
90:22:42:e3:f8:5b:01:b1:03:cf:7d:cd:5f:92:5a:
fa:81:6d:21:2c:d1:70:32:b2:38:0c:96:06:e5:c4:
94:9b:da:ca:7f:18:0c:6c:ab:72:61:41:11:b3:40:
96:9e:eb:03:ee:74:1b:66:df:ba:e9:6b:8f:fc:b9:
63:2d:de:b0:0d:b4:f6:d1:07:8d:17:41:14:65:76:
9c:d0:e3:a4:a4:5e:4f:28:3e:53:86:4c:35:e6:75:
18:d3:09:cb:17:d0:d5:70:b6:1c:5f:90:e5:25:84:
7d:11:65:fd:a5:68:68:60:43:58:c7:93:d5:62:c0:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7D:49:30:AF:98:8A:63:F0:92:08:D7:61:4B:1E:D7:85:5C:F2:45
X509v3 Authority Key Identifier:
keyid:D0:B8:49:B9:BC:90:42:A1:55:73:31:93:7E:4A:D7:15:18:AF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LhJubyQQqFVczGTfkrXFRivYc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a3fb67-d514-4aee-adb9-72bad9d73c80/1/0LhJubyQQqFVczGTfkrXFRivYc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8e:6e:92:b9:61:a2:e5:8e:af:cb:89:83:9e:8b:ae:eb:c1:
71:3d:39:ed:6e:98:61:41:52:06:9e:12:22:3e:63:99:87:d3:
71:7b:63:c1:17:3f:61:45:cb:15:31:33:44:41:ed:12:75:aa:
ef:a0:d5:e1:ab:08:a1:d5:5a:f0:1d:49:5d:5d:36:62:95:03:
e9:1c:a4:b1:ce:e2:37:62:56:8c:58:62:48:27:85:c8:ab:7d:
5e:88:76:0c:03:f8:2d:15:9e:de:5b:3f:9a:d0:19:1e:e6:8d:
26:b1:da:6f:14:de:7c:e8:62:c8:b4:76:5e:b3:8c:a8:80:74:
f8:7b:fb:c8:23:9b:36:ff:12:c7:4d:bc:81:a5:54:3a:f1:56:
7c:d6:a8:78:0d:f2:bd:9d:2d:dc:da:7d:9e:ba:4d:eb:10:87:
e6:d7:61:5b:aa:8f:0c:4a:df:21:b1:62:27:e0:59:95:bb:15:
7e:d6:18:88:b6:9f:4a:92:01:e4:1a:a0:d0:da:77:cb:cf:d5:
8c:a0:07:ae:09:2c:5e:0c:f3:d0:9f:98:96:28:28:40:79:db:
63:4a:6e:ce:60:62:96:21:92:09:97:c4:5f:bf:21:58:8f:0b:
76:d7:ec:b6:4a:15:53:a6:74:cf:30:94:ef:3d:08:3f:86:16:
d5:eb:2e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:07:44 2024 by rpki-client on console-fra.rpki-client.org