Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: Ms42r0fZ/jikaF+qlw1kqbrlzZ6JbinqgQzrGtnSXLo=
Subject key identifier: 14:01:DE:B8:83:6A:F5:D3:5F:D0:5E:CD:B9:01:DD:3D:32:CF:1E:E1
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 01935508870E77B0C03113622758268789C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 18:00:42 +0000
Manifest this update: Fri 22 Nov 2024 18:00:42 +0000
Manifest next update: Sat 23 Nov 2024 18:00:42 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: bc2SmRPzFHhzDXZks0GUysb5uxoZPqATtW1NnFvLzmQ=)
2: ObQ-a-YoT9d0J20R2C8_0PoZ-R4.roa (hash: fUFOhLtcYVAdfkaJN9B9AkGUOQi+JBVh1S7d0tqQ1Wc=)
3: RqzU4bO-wPg8xEpSLzZ5CpN8AeQ.roa (hash: +ETCKG1R8zYIY/9m7rGuF80mOtbn1yNfyB+Nz4uIxnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:87:0e:77:b0:c0:31:13:62:27:58:26:87:89:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Nov 22 18:00:42 2024 GMT
Not After : Nov 23 18:00:42 2024 GMT
Subject: CN=1401deb8836af5d35fd05ecdb901dd3d32cf1ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:f2:bb:34:aa:23:f1:3f:85:5c:7c:42:17:
e2:63:ac:53:33:26:24:e6:d3:0b:58:4c:4e:21:8a:
03:af:bb:31:29:17:93:98:11:f9:f2:22:91:71:53:
92:9a:12:1c:8b:fc:bf:c4:da:98:ac:c6:b8:1a:29:
a5:d7:81:dd:3f:4f:45:72:ca:12:f4:77:59:c0:47:
33:0d:0b:92:85:3e:a9:90:2c:fc:97:cb:ad:ad:bd:
0f:f1:44:d7:b4:ed:94:54:08:f4:99:8f:db:f9:5b:
7f:ce:d1:da:42:fb:1d:89:33:6f:c5:7e:c9:05:f8:
16:4d:29:95:ce:c9:cc:fc:6e:2e:b8:50:65:07:76:
84:90:d7:2e:b0:94:b2:5e:72:52:61:b6:56:1c:8b:
84:97:34:b7:2e:cd:bb:59:d8:31:84:d3:b0:32:9e:
48:53:d6:16:4a:14:27:91:7a:b9:30:63:ad:8e:de:
cc:4f:d6:9a:36:cc:5f:92:83:79:58:bd:07:51:b0:
d2:2c:2b:83:9f:fe:12:26:73:45:5e:6b:83:b4:21:
90:3a:2f:96:3c:6b:50:20:5e:a5:d1:67:9a:0a:ed:
60:1b:f4:3c:78:80:33:fc:be:14:49:54:7b:b7:58:
1f:1e:d9:78:1d:98:e0:ca:af:de:77:ce:84:f3:fb:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:01:DE:B8:83:6A:F5:D3:5F:D0:5E:CD:B9:01:DD:3D:32:CF:1E:E1
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bf:b9:55:fa:6d:08:5b:29:fe:b6:1a:ed:fa:64:cb:b4:24:
4e:87:e2:73:60:14:a1:ce:49:a7:20:72:ec:c3:26:0c:25:2a:
03:4b:f6:bf:ba:a7:de:1a:9b:e4:ef:50:a0:a3:2a:39:ce:bb:
24:57:fd:d0:16:a8:0f:d5:4f:8c:ae:77:ae:a9:d7:2a:bc:75:
5a:79:e9:fc:d3:42:a4:f9:72:b7:7d:34:b2:ec:06:5b:7f:ae:
69:45:b7:8a:77:25:18:05:26:94:c5:60:72:7a:f0:12:27:aa:
cc:30:42:bd:1c:a3:78:b1:42:9c:37:7b:91:17:b9:d9:dc:90:
cb:44:96:23:b7:c2:d9:7d:59:4f:74:e4:77:3f:73:a1:54:81:
85:e2:69:0e:42:e5:3c:b2:b2:34:63:bc:36:2f:64:af:5d:95:
82:f9:08:90:ff:06:86:10:0c:cc:02:ec:c0:00:01:9e:e4:79:
2e:2f:97:5b:ee:c5:c9:30:19:7b:e2:a5:86:f5:48:03:9d:ea:
a7:ce:35:97:0c:1d:85:0f:52:87:a6:ed:ad:2e:cc:1f:80:04:
04:07:a3:bf:a3:ff:4c:ab:14:b1:af:8f:df:f0:a3:91:8c:f5:
a5:9a:34:d0:6d:d3:bf:93:e9:b0:a5:12:56:64:f0:fd:b1:84:
8a:ed:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:45 2024 by rpki-client on console-fra.rpki-client.org