Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/eas7uxZ3susE1XfNrjDZVwuN3i4.mft
File: eas7uxZ3susE1XfNrjDZVwuN3i4.mft (raw, json)
Hash identifier: FqdTx9YfZOBC5pphmwZi9HIX8TyHDZgqPGVg13KPbaQ=
Subject key identifier: 32:4D:4F:82:00:EC:DC:42:ED:4E:44:91:C6:AD:4F:82:36:EA:06:EC
Authority key identifier: 79:AB:3B:BB:16:77:B2:EB:04:D5:77:CD:AE:30:D9:57:0B:8D:DE:2E
Certificate issuer: /CN=79ab3bbb1677b2eb04d577cdae30d9570b8dde2e
Certificate serial: 0193523E280AF9820B192FD2D5507DF48994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eas7uxZ3susE1XfNrjDZVwuN3i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/eas7uxZ3susE1XfNrjDZVwuN3i4.mft
Manifest number: 0800
Signing time: Fri 22 Nov 2024 05:00:25 +0000
Manifest this update: Fri 22 Nov 2024 05:00:25 +0000
Manifest next update: Sat 23 Nov 2024 05:00:25 +0000
Files and hashes: 1: eas7uxZ3susE1XfNrjDZVwuN3i4.crl (hash: PimvWtuFSapVjNHv33lQE8AY7fXbg0JJtB1rBtrATsQ=)
2: ivMHVxPPruswvq1RIxWjZt_9WWM.roa (hash: 0+iEuoS1EDKFzWR3l7BtVYwCYcTDqaBeUdW8vQGf2Z0=)
3: lvBGUUgCpsTxxxlpecbxC_WI-kQ.roa (hash: EsY3B/RNAjgjAJtPnmA0UA1aKXzO6cIWaCvxW8oezyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/eas7uxZ3susE1XfNrjDZVwuN3i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/eas7uxZ3susE1XfNrjDZVwuN3i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eas7uxZ3susE1XfNrjDZVwuN3i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:28:0a:f9:82:0b:19:2f:d2:d5:50:7d:f4:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ab3bbb1677b2eb04d577cdae30d9570b8dde2e
Validity
Not Before: Nov 22 05:00:25 2024 GMT
Not After : Nov 23 05:00:25 2024 GMT
Subject: CN=324d4f8200ecdc42ed4e4491c6ad4f8236ea06ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:53:c3:50:4d:bd:de:c0:c9:9a:9c:36:71:
d8:70:05:08:41:37:88:ee:33:82:37:73:fb:be:3d:
ea:21:97:9b:86:17:f8:8c:9e:53:82:90:a9:9e:16:
8c:9b:d0:a9:7f:94:7c:f5:b1:57:73:0b:4b:f3:15:
fe:26:20:5a:25:8d:8c:ae:a5:af:96:8b:30:61:ac:
ed:d2:bc:b0:b3:49:16:05:b0:62:a1:2e:e4:39:c7:
ba:96:77:02:ce:c6:e4:b5:87:a7:ae:61:cd:c6:e4:
3b:e7:ba:c7:dc:de:f3:20:83:61:ee:48:bd:72:4a:
8b:d1:fd:f0:20:62:5a:cc:c4:4a:63:21:84:7d:70:
d4:62:89:ff:8e:41:a6:47:ff:43:14:54:99:3d:86:
f9:44:d0:88:ee:87:a1:ff:5a:c5:da:64:09:50:85:
41:dd:d8:14:59:78:10:f3:4c:92:2c:f0:35:90:74:
6a:84:3a:d7:be:05:ca:6c:4d:ae:6c:af:f0:9b:9c:
1c:be:d6:f5:7b:aa:0f:f5:92:eb:9c:5d:8b:8e:d0:
a8:bf:13:e5:07:06:9c:bd:c8:7e:f6:d8:6e:13:40:
fa:ad:c4:5e:78:6f:44:7f:5c:91:01:b7:d4:b5:14:
d3:13:ed:31:84:be:b9:5d:b4:1b:60:f9:3f:08:26:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4D:4F:82:00:EC:DC:42:ED:4E:44:91:C6:AD:4F:82:36:EA:06:EC
X509v3 Authority Key Identifier:
keyid:79:AB:3B:BB:16:77:B2:EB:04:D5:77:CD:AE:30:D9:57:0B:8D:DE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eas7uxZ3susE1XfNrjDZVwuN3i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/eas7uxZ3susE1XfNrjDZVwuN3i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/eas7uxZ3susE1XfNrjDZVwuN3i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:79:87:c3:63:9d:0f:f0:f1:ba:1b:03:b8:09:8e:e2:a2:f1:
1d:22:3e:41:7a:45:ed:f5:a4:ed:83:df:96:b4:6a:92:07:0a:
f0:dd:d2:26:26:ea:e1:3e:97:e0:18:b8:7b:70:fc:87:0e:4e:
57:f1:11:75:c0:df:3c:62:a4:d8:92:41:fa:e5:9e:7d:76:40:
56:d3:ad:e5:18:7d:3a:0e:bd:19:68:b1:c6:47:21:fb:12:ba:
05:7e:8f:d3:f4:71:dc:ad:52:fd:cc:c3:8d:ef:8f:d1:45:f6:
d5:61:90:41:98:01:ce:21:82:46:04:4d:00:06:4f:8f:4c:e0:
9d:5a:55:a9:f1:b0:48:49:2e:93:47:d4:e3:6e:3d:98:c0:30:
2a:80:e8:58:b8:38:b6:55:b0:45:dc:a4:de:10:29:22:3f:d9:
0e:1b:b8:7f:6d:11:22:bd:d4:38:67:60:33:e6:76:9f:cd:d0:
95:c1:ec:2f:7c:a0:5f:72:33:76:f4:26:94:5b:8a:4d:05:0e:
16:77:43:46:73:e3:6a:55:2a:b6:03:a0:22:a7:cf:18:12:0d:
fb:c9:c3:76:14:3f:34:07:4d:10:cf:cb:1a:c7:bf:fe:50:e1:
45:6a:56:ac:11:8e:5f:cd:05:8b:c9:aa:f6:c1:26:7f:47:05:
4d:88:b3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:39:13 2024 by rpki-client on console-ams.rpki-client.org