Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: VV/8JkyPf7ETtvG89NRxN5NfnR8alzfDLj/A0CMAmDs=
Subject key identifier: 26:31:16:B8:1B:36:6B:D2:D0:E9:FD:51:1F:E6:25:46:57:D1:06:38
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 0191FA7E36BC62923C5FE8A864E516509E6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 0111
Signing time: Mon 16 Sep 2024 11:01:01 +0000
Manifest this update: Mon 16 Sep 2024 11:01:01 +0000
Manifest next update: Tue 17 Sep 2024 11:01:01 +0000
Files and hashes: 1: Fkpt5orne3i18gA_1eOtuqpdIKw.roa (hash: ZJKkXWHtFqVjy0jGzFewImFsAHhFmfpYt/U4o8zmzw8=)
2: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: i5RW6p/rFVkBp3ISJ8aaoUEgoVp42xLcX00YgCp+c/8=)
3: _DG_Xvgb_MRVRNJEk9pb5bxoEK8.roa (hash: NzQns4axxXAQfqcuX3UszDPnGUyopwkSWA+VkJvlg18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Sep 2024 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:7e:36:bc:62:92:3c:5f:e8:a8:64:e5:16:50:9e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Sep 16 11:01:01 2024 GMT
Not After : Sep 17 11:01:01 2024 GMT
Subject: CN=263116b81b366bd2d0e9fd511fe6254657d10638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:8f:a0:ef:fe:4b:5f:bb:83:bc:c4:93:5e:
4e:13:ac:d3:b3:82:dd:b2:54:00:9e:50:bc:dd:3e:
3b:a6:88:be:92:dc:b2:1b:dc:b3:a8:db:0c:84:bd:
36:f8:25:18:72:e5:73:1a:06:ee:e0:46:40:1e:59:
1b:d7:65:8a:c3:7e:86:0f:6d:cd:14:cb:92:1e:ff:
b2:88:33:09:b6:9c:90:d2:63:b3:2c:53:5d:07:8a:
60:85:42:b0:91:a4:58:2a:b4:e5:aa:62:d8:5b:1a:
36:bd:f6:72:5a:a4:59:58:0c:b6:28:09:8d:01:81:
ff:6e:e4:2b:b0:62:ad:f0:73:73:d0:4b:ab:88:da:
bf:26:12:85:42:1d:e9:a3:7d:07:eb:21:1b:df:4c:
c0:84:28:24:9b:6c:f4:e9:9f:30:df:01:8a:cf:f9:
3e:62:9b:a3:ae:57:a2:50:40:4e:22:4b:a3:89:4b:
d2:2b:44:92:42:1d:c6:d2:b2:cb:2c:3d:e5:b7:0c:
79:99:89:46:0f:b4:ac:a6:59:1b:2b:c5:f0:27:c3:
67:c0:23:d5:c8:0c:6c:0d:b6:93:95:a4:44:d8:20:
42:f1:0b:fa:b9:53:a6:17:f7:c3:25:4d:1b:25:76:
e3:c4:e0:11:0d:a7:39:30:2d:bd:e5:a7:5c:03:aa:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:31:16:B8:1B:36:6B:D2:D0:E9:FD:51:1F:E6:25:46:57:D1:06:38
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8b:cf:dc:52:8c:05:e5:a6:89:6c:59:76:24:25:64:91:51:
23:5e:f2:61:76:fa:a1:ea:60:45:32:e4:e6:e9:e5:a0:e2:97:
7f:a8:18:fc:61:4a:3e:66:80:ec:80:cd:4e:a5:d8:7b:80:3f:
d7:a4:14:64:61:3f:90:1e:a5:fd:85:84:c0:7d:3b:a1:e5:f6:
bf:04:0d:6d:b0:14:f9:96:ae:49:dc:7b:38:8d:00:03:62:77:
97:72:c0:63:05:92:6e:21:63:db:7b:58:1f:28:51:cf:1f:76:
cf:a2:ab:1f:11:10:34:9d:9d:49:f9:b5:3a:bc:44:4a:a4:e7:
b5:a4:df:e7:8a:79:22:d5:93:75:c0:ca:c4:7e:bb:9c:67:03:
c9:dd:c4:23:f9:93:21:4a:3d:5e:06:47:22:d5:d1:4f:0f:17:
ce:49:44:a8:bd:fb:db:fa:5c:a3:ce:b7:92:4e:fa:46:ee:e9:
1d:c1:2f:e5:e1:d5:95:ec:6a:3a:e9:14:ac:70:eb:fa:66:42:
c4:a6:ef:01:ab:b5:3f:97:96:07:89:ac:f3:fc:19:5f:cc:0c:
9e:91:72:f1:a2:11:32:ab:a2:3d:d3:1d:be:6b:c0:56:fe:6e:
9d:78:88:c9:f5:7b:72:b5:0c:ac:95:4a:ef:95:90:be:31:5c:
fe:5a:79:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:17:13 2024 by rpki-client on console-ams.rpki-client.org