Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: /INtwey1HR/ziGbC3HGZqXQQN7aD2G4wD64AoiwinOQ=
Subject key identifier: A8:77:93:65:1A:B9:3C:55:DB:CA:DE:63:89:35:09:F2:AA:3E:DF:88
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 0193523E0E06CADE95534A54D35A437E2AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 01C3
Signing time: Fri 22 Nov 2024 05:00:18 +0000
Manifest this update: Fri 22 Nov 2024 05:00:18 +0000
Manifest next update: Sat 23 Nov 2024 05:00:18 +0000
Files and hashes: 1: Fkpt5orne3i18gA_1eOtuqpdIKw.roa (hash: ZJKkXWHtFqVjy0jGzFewImFsAHhFmfpYt/U4o8zmzw8=)
2: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: sL0jjDInGz9mFCV+U/T+Yr9V6JDvrejN2YcAvLjNYI8=)
3: _DG_Xvgb_MRVRNJEk9pb5bxoEK8.roa (hash: NzQns4axxXAQfqcuX3UszDPnGUyopwkSWA+VkJvlg18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:0e:06:ca:de:95:53:4a:54:d3:5a:43:7e:2a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Nov 22 05:00:18 2024 GMT
Not After : Nov 23 05:00:18 2024 GMT
Subject: CN=a87793651ab93c55dbcade63893509f2aa3edf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:5f:5d:6a:ac:2c:0e:df:2e:42:00:72:dd:
4f:be:24:fa:1f:38:bc:aa:bf:1f:62:a0:8e:cf:e7:
f6:0f:e5:36:83:7d:a5:c2:68:cb:21:fa:6e:21:9a:
d6:d5:1b:c0:1b:cd:ff:93:0b:97:99:de:2b:b9:e4:
79:5c:37:51:b3:fe:7a:75:1b:13:51:79:d8:1c:f8:
dd:02:8e:1f:d7:d2:37:08:83:24:cc:55:6d:21:e3:
00:cb:a7:4c:a2:cf:b1:44:6a:51:58:62:61:b1:5f:
fe:be:0d:40:d1:60:59:39:2f:74:8e:c8:d1:81:84:
af:b0:b8:8b:07:07:dd:65:29:f5:ef:d9:99:24:0b:
7f:cd:e8:22:1d:81:a9:6c:36:3f:fb:d2:35:25:50:
1d:32:2e:f1:3e:96:09:1a:7b:e6:0f:aa:ff:8b:db:
4c:13:af:23:89:c2:86:ba:21:cc:c8:1a:66:0f:b6:
3f:c4:d2:b4:e0:c5:c1:99:aa:11:66:34:bf:b6:ab:
56:db:19:be:d0:d5:f5:0f:0f:d5:0f:41:59:1a:b6:
8a:6c:16:70:cd:22:d2:63:e9:39:c1:82:8b:9e:86:
54:16:cc:66:30:52:c1:12:91:ed:3d:ea:8f:9e:ef:
a0:9f:10:8e:e0:19:6b:95:66:fe:d5:44:85:70:a0:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:77:93:65:1A:B9:3C:55:DB:CA:DE:63:89:35:09:F2:AA:3E:DF:88
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0a:ba:1d:5e:65:51:ba:9e:02:4b:e6:a0:8b:89:1e:46:aa:
ed:07:ca:41:27:d0:0d:f4:dd:b6:91:b6:48:8e:4b:34:ab:e3:
dd:e1:2b:ab:79:cf:62:97:db:30:72:24:53:72:27:7d:8f:3f:
d6:be:e2:01:ba:c7:59:db:09:fd:50:ae:60:d0:c2:10:31:bf:
b0:b3:23:54:af:8a:da:66:65:bd:58:4b:47:bc:b0:0f:20:59:
21:e6:52:62:0c:61:46:34:2b:a0:98:83:58:60:e2:85:8b:cc:
61:9b:ac:71:52:3d:54:9b:61:bd:33:91:fb:9c:9a:d0:5f:3b:
c4:fd:bc:54:b2:0f:7c:aa:15:2e:ad:5e:cb:fe:95:12:f9:88:
a5:46:41:16:48:98:4d:f4:42:16:f7:84:84:8a:5b:dd:40:c4:
ef:ef:e3:b7:6a:1c:7e:c1:ea:c5:61:8a:e5:ad:ca:df:c8:04:
ac:c1:2d:20:31:21:bb:9d:19:4a:8d:56:ca:5f:da:74:a3:be:
72:33:f5:c5:c5:8b:09:26:b3:51:d6:25:55:fc:d2:e9:2b:3a:
73:ab:32:bf:5d:14:b0:36:12:03:e4:2a:27:fc:bb:48:cb:06:
e6:70:9c:a5:5a:01:ff:5b:29:e5:51:59:33:5a:63:ab:7a:d6:
06:71:05:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:40:21 2024 by rpki-client on console-fra.rpki-client.org