Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File: fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier: lhb+KGa90OffJ0QUzqMaQCm2kc4WLnQSSk44sTgXp8c=
Subject key identifier: ED:2F:48:B7:EA:4E:74:A4:E0:9F:D0:95:9C:1D:DD:45:97:A6:46:56
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer: /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial: 019360325ED17DAAACC7A194B09B1FAD91F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number: 0DD6
Signing time: Sun 24 Nov 2024 22:02:13 +0000
Manifest this update: Sun 24 Nov 2024 22:02:13 +0000
Manifest next update: Mon 25 Nov 2024 22:02:13 +0000
Files and hashes: 1: 0SZ1oIwim7IAyDckdr-8svkY53M.roa (hash: ZGvsKSC4bj2ZzlPcQEKGf5YPitnOjtrk2jDq8Ky+dCk=)
2: Doig4v0YQyUfVWdxp1DgZ9gSTTs.roa (hash: 4xuJKXb6vzGegjMw8Xw+4+4TiS1oxsHqda1u1Q4bY3g=)
3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: wVICCdvaIseG+aYDux9D1YBAIOYc5cMPuKa109pxrDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:60:32:5e:d1:7d:aa:ac:c7:a1:94:b0:9b:1f:ad:91:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
Validity
Not Before: Nov 24 22:02:13 2024 GMT
Not After : Nov 25 22:02:13 2024 GMT
Subject: CN=ed2f48b7ea4e74a4e09fd0959c1ddd4597a64656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:de:09:ce:d7:32:a5:14:b8:a5:82:04:67:
1b:fb:e1:e4:50:e8:9f:1c:37:a2:96:31:b0:a9:b6:
02:b7:22:28:be:32:f9:c3:64:be:02:6a:cb:8b:8b:
e7:83:f9:24:d4:c1:d8:dc:2a:af:cd:bd:45:8b:b9:
57:3e:51:2d:99:d6:98:26:8e:5f:64:35:47:c1:4f:
b4:ee:f5:c1:19:aa:bf:4a:1c:f7:e9:bb:fd:1b:3e:
52:0b:d9:e3:3f:0e:a4:5f:77:14:39:68:c5:d1:20:
99:42:f8:1b:30:9d:46:99:67:5c:ef:85:37:0f:46:
c4:41:c7:ff:4a:f2:33:60:48:f3:37:94:c0:b0:a6:
8f:59:56:32:6c:20:5c:4a:3f:82:19:66:7a:61:1a:
e4:44:4d:3b:5b:78:f3:f5:21:17:f9:eb:4b:93:d8:
dd:f0:d6:01:ae:10:52:84:18:ab:35:6e:25:88:77:
e8:4c:12:be:a5:ed:7a:32:7a:27:4b:5a:2f:95:98:
6b:51:9e:1c:81:32:78:d9:a0:af:28:c7:c1:ed:ab:
da:92:ff:c5:3c:b2:aa:0b:eb:5c:38:7a:5c:eb:a6:
b0:ee:28:bc:39:b5:7d:3f:c2:c7:45:43:84:d2:7d:
60:09:71:75:5d:ae:0c:03:b2:f1:e7:6c:3a:ab:9b:
4c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2F:48:B7:EA:4E:74:A4:E0:9F:D0:95:9C:1D:DD:45:97:A6:46:56
X509v3 Authority Key Identifier:
keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f0:04:2c:f9:b8:a9:8e:d4:c1:8d:16:0f:d1:0f:62:12:3a:
f0:3a:ee:b2:55:68:50:aa:56:22:35:1f:84:ae:7b:20:01:a9:
8e:cf:d7:ac:96:58:eb:c0:24:6c:92:d9:9b:61:cd:42:01:96:
3b:75:37:0a:1e:c6:ea:e8:97:50:c8:b9:e2:9e:73:71:69:6f:
69:24:f7:e5:0a:8b:7e:9c:a6:c8:3c:15:1e:5f:dd:0f:9a:81:
28:14:85:93:e5:39:e1:2c:79:bc:40:11:6e:14:17:a0:7f:ec:
06:6e:e0:fb:34:05:35:37:ea:31:dc:2a:df:5f:6a:f9:53:22:
7f:37:f1:f4:40:7a:e6:e1:d9:4d:6d:f3:bc:a6:cf:8f:df:f8:
88:ae:46:71:6e:ea:8b:3b:70:27:b1:00:e1:13:d2:2a:2e:f5:
75:bc:de:7b:f9:86:c8:df:24:9a:af:a5:c2:31:a9:38:4a:59:
d1:e4:c6:62:7c:f9:d2:70:99:26:29:18:08:77:dd:00:86:bd:
8d:c2:c3:d4:e0:0a:30:4e:e2:73:5a:8e:d5:61:b1:ba:a6:d2:
51:7c:eb:49:89:8c:a1:80:6f:61:ec:ad:73:4d:cc:d5:2e:57:
57:2f:99:ad:3d:6c:53:7d:fd:c3:63:45:a2:fc:22:50:46:43:
5d:ad:a6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:01:55 2024 by rpki-client on console-fra.rpki-client.org