Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
File: g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft (raw, json)
Hash identifier: GoK8I8F+JXlkdy6rGpVFylRr7ItTkEQfWSni/wT00bM=
Subject key identifier: 85:C2:26:61:2F:26:E2:5F:21:C9:4E:15:50:D4:9F:0E:1D:87:21:82
Authority key identifier: 83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
Certificate issuer: /CN=837e177f76663166c75190e2d209335a6aae5ace
Certificate serial: 019359531CF1C3425928FD9F9127275BB6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
Manifest number: 0CD8
Signing time: Sat 23 Nov 2024 14:00:39 +0000
Manifest this update: Sat 23 Nov 2024 14:00:39 +0000
Manifest next update: Sun 24 Nov 2024 14:00:39 +0000
Files and hashes: 1: L13LoPcaJtJA4nra9tpGRduHylc.roa (hash: waKHdCM6Ho8wdRyjFkbrzQ2CdKCwMSIHYWj/8TFgFXY=)
2: XAXhQztW6_EnvoHe8nZu8VO1O1s.roa (hash: zAw2ydbUwcMZXNy3kGJwuMgsmSkyPgLiK3FgRgEDin8=)
3: g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl (hash: idG1cntuHJsEigmbBGScSl8mVou3s3hjZ81Pt5o2gP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:1c:f1:c3:42:59:28:fd:9f:91:27:27:5b:b6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=837e177f76663166c75190e2d209335a6aae5ace
Validity
Not Before: Nov 23 14:00:39 2024 GMT
Not After : Nov 24 14:00:39 2024 GMT
Subject: CN=85c226612f26e25f21c94e1550d49f0e1d872182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:dd:21:15:90:46:5f:f0:05:87:65:24:1d:
22:8f:3a:a4:cd:11:34:b0:a3:bb:53:7b:28:8e:4a:
ee:6d:0a:dd:4d:72:c7:7c:d5:0e:61:00:dd:fb:45:
64:a2:90:53:e4:6c:13:88:0a:c7:03:65:a1:37:37:
57:6b:8d:d2:71:d6:f4:ac:c3:4d:59:ef:13:01:fc:
e5:56:44:6d:fb:af:bf:f2:97:8f:b9:f5:ea:39:11:
bf:20:93:2c:9e:88:1a:5d:fa:c0:11:a5:59:fe:3b:
d7:1f:e4:75:52:9f:ce:04:cb:5d:36:d3:eb:d5:3f:
14:9b:29:e4:13:a1:f8:c3:da:33:b1:f9:51:97:9d:
e2:47:36:ff:0b:a9:50:26:f7:78:9f:47:45:46:01:
1f:03:8c:e0:31:e6:24:c5:00:fa:41:20:1d:a7:72:
13:e1:c3:18:d8:e9:15:c9:ce:7f:9c:97:d7:61:81:
31:79:de:2f:c6:41:0a:ea:9c:8a:b3:cb:9e:5a:63:
9d:48:01:11:c5:dc:ad:4f:f8:b0:02:5b:53:6a:85:
0b:52:ef:f4:19:68:99:a0:f2:5f:09:6b:a4:32:83:
86:75:f7:25:93:8c:2f:01:ec:95:dd:11:1c:b3:db:
8a:cc:32:e9:f5:8c:cd:b6:d4:33:86:ad:0f:7b:67:
2c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C2:26:61:2F:26:E2:5F:21:C9:4E:15:50:D4:9F:0E:1D:87:21:82
X509v3 Authority Key Identifier:
keyid:83:7E:17:7F:76:66:31:66:C7:51:90:E2:D2:09:33:5A:6A:AE:5A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g34Xf3ZmMWbHUZDi0gkzWmquWs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/70c19f-29ca-4b62-ac62-8ba768022763/1/g34Xf3ZmMWbHUZDi0gkzWmquWs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0d:74:80:c1:8b:f3:f7:e1:86:b3:27:60:c8:4b:b6:97:1f:
34:4c:77:31:fa:b9:66:25:ec:30:15:87:4a:25:35:22:37:8a:
8a:aa:c8:9b:99:d2:34:4c:c6:5b:cb:43:95:53:d8:06:aa:74:
6f:09:95:ea:69:5c:a5:c1:7b:20:7d:08:13:65:f7:ab:56:24:
44:88:19:b9:3b:6a:1e:b2:ed:a7:b4:26:43:ab:5d:38:11:24:
9c:70:76:e1:f9:e4:25:44:11:e7:d3:98:f9:64:f5:2d:5a:2f:
7a:34:a0:0c:0b:da:e7:a0:01:f5:2a:8f:c9:2f:0d:29:ae:09:
57:f9:bd:cd:0d:5f:12:18:fd:e1:5c:77:aa:d0:72:94:9d:f8:
32:33:bd:27:72:1a:6a:46:4e:70:cd:f3:89:9e:32:f6:6e:be:
8e:33:db:f4:00:d0:9b:4d:1c:cc:df:58:51:79:a4:b7:d4:bd:
df:5f:27:96:c9:8e:27:ed:61:88:78:33:09:34:a7:65:70:88:
3a:8f:15:65:37:ea:f7:70:b8:b6:e2:f2:9e:f5:dc:ec:60:b5:
15:1a:4e:2d:aa:0b:81:ac:d5:ba:e9:df:25:a5:e6:6d:90:4b:
5d:66:88:84:1f:6a:07:5a:48:dc:23:64:55:75:e7:6d:68:0a:
0f:db:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:18:52 2024 by rpki-client on console-fra.rpki-client.org