Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
File: d53x3kOsymHuwDTOomi0ZUzBXKw.mft (raw, json)
Hash identifier: KHM7V9RlJ+fPuv0XunBhtDIk7q0mO0Qonp34u/dRkAI=
Subject key identifier: 6E:29:0D:12:E8:A2:C5:78:B5:48:88:75:75:8A:83:78:D3:3F:A7:D4
Authority key identifier: 77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
Certificate issuer: /CN=779df1de43acca61eec034cea268b4654cc15cac
Certificate serial: 0193568A53E46DE110295B20C91305A602BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:02:06 +0000
Manifest this update: Sat 23 Nov 2024 01:02:06 +0000
Manifest next update: Sun 24 Nov 2024 01:02:06 +0000
Files and hashes: 1: CxEFb_SPtgpusRu1Ni588FKYVYI.roa (hash: o99ivj152j7CI87cLlEc6ECSNP80mBIqoqiIsYG8jy4=)
2: d53x3kOsymHuwDTOomi0ZUzBXKw.crl (hash: 3PocfcmS3G5GTN80MjxCF2j41glPP6tiB57uqck2mh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:53:e4:6d:e1:10:29:5b:20:c9:13:05:a6:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779df1de43acca61eec034cea268b4654cc15cac
Validity
Not Before: Nov 23 01:02:06 2024 GMT
Not After : Nov 24 01:02:06 2024 GMT
Subject: CN=6e290d12e8a2c578b5488875758a8378d33fa7d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:57:5e:b6:47:7a:83:87:e4:f5:e8:27:37:b3:
a6:1a:8a:ea:00:7a:26:ef:84:2a:94:15:e4:bb:ed:
31:b2:80:9f:96:42:b8:31:83:90:16:c8:52:72:cc:
b3:21:71:fa:c6:5f:ad:32:53:e2:3c:25:3d:f5:79:
c5:5e:5a:8a:6d:69:65:32:d4:4a:b9:b9:8c:9e:35:
39:af:ca:b1:a9:c0:a5:12:06:24:e7:58:15:89:5f:
6d:49:a2:1e:fa:0e:61:0e:5f:c2:56:ca:17:56:46:
7f:69:81:7f:e0:26:c6:48:9e:78:f2:97:66:1b:7f:
87:df:63:6d:06:f4:ec:d6:68:78:5f:3c:28:a4:a1:
a0:14:7d:a4:d7:d8:66:f3:5f:85:63:fc:79:14:ad:
7f:0d:44:f3:e9:32:60:c6:52:e2:9a:92:97:54:58:
da:92:58:30:39:57:d1:ad:71:7a:ca:db:a2:51:75:
ed:e0:c1:7e:a0:98:2b:0e:42:3c:be:f8:80:cb:a5:
c0:2e:a2:1a:f4:0b:70:6a:c0:77:8b:0e:5f:76:09:
0b:ca:9e:1e:d9:39:a5:41:91:4c:da:7e:98:80:cf:
96:45:bb:2e:b2:7b:21:3f:9c:e7:57:c9:00:bf:2c:
f1:da:f2:7e:4f:5f:99:d9:8a:6f:33:7d:68:cb:3e:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:29:0D:12:E8:A2:C5:78:B5:48:88:75:75:8A:83:78:D3:3F:A7:D4
X509v3 Authority Key Identifier:
keyid:77:9D:F1:DE:43:AC:CA:61:EE:C0:34:CE:A2:68:B4:65:4C:C1:5C:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d53x3kOsymHuwDTOomi0ZUzBXKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3af48a-0616-4c32-bb40-4b9ae41b3d2f/1/d53x3kOsymHuwDTOomi0ZUzBXKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b9:6b:cc:61:c1:f1:42:b6:24:14:3a:c7:fe:52:ad:d1:b5:
18:88:fb:54:c9:99:09:ad:b9:56:63:85:2d:6c:c1:13:c9:3b:
54:78:94:ff:42:38:b3:ad:58:db:a0:73:0e:90:e4:08:83:11:
f9:0d:aa:1d:63:45:16:db:27:7c:f2:6c:f1:c4:1c:3d:2b:b8:
23:31:35:35:30:76:02:38:25:1d:9f:4c:38:24:35:65:59:a5:
07:90:90:11:94:52:18:c7:93:91:2a:3f:a7:87:d6:a8:24:f5:
1e:45:6e:8a:63:90:34:5e:22:28:b7:0c:74:1c:7d:29:93:f7:
00:77:3a:20:30:5b:82:f2:9a:75:4b:35:2f:f2:13:50:f4:40:
32:16:ad:45:9c:0d:f7:52:c0:a8:d3:6f:9d:65:a1:50:a0:55:
8f:95:94:c8:da:e8:af:a7:86:9c:32:60:3d:d5:4f:e1:f8:64:
f8:9e:ce:1f:7f:3d:d2:43:1a:f0:02:b4:9d:35:14:1b:df:d8:
d9:c6:6e:fb:38:3f:4f:cf:2d:90:9f:6e:67:90:b4:f2:99:f9:
b4:ed:3b:37:b4:74:d5:27:97:d3:34:a1:c6:bb:ac:62:52:d8:
62:e1:e3:3a:0b:03:88:90:6e:48:e3:4a:99:4a:cd:6b:f5:10:
00:14:39:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:50 2024 by rpki-client on console-fra.rpki-client.org