Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
File: iwzWlq2okRMCVjuk5ELmz6aij_s.mft (raw, json)
Hash identifier: LhUas2enHG5Gu/8Qqls6UsUwVSt5hd1YxB5ZZWqAzyQ=
Subject key identifier: 96:8D:AA:91:8B:6D:1A:12:F6:3D:C3:CC:E3:44:DD:3A:01:79:20:3D
Authority key identifier: 8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
Certificate issuer: /CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Certificate serial: 019356F6CCFB24F169DA211AF0F7370DEA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
Manifest number: 1303
Signing time: Sat 23 Nov 2024 03:00:35 +0000
Manifest this update: Sat 23 Nov 2024 03:00:35 +0000
Manifest next update: Sun 24 Nov 2024 03:00:35 +0000
Files and hashes: 1: 2TTSOfXnXpV7ajNtDHqPwl7MI44.roa (hash: M1KIGmV5ggp3Vd0lKz9ca9hTrBlPH2nIY1F8We0HeSU=)
2: eqVWqN-iuQKvZMTXi1LEaRpKndc.roa (hash: cjhdPIsB1745Yxm7FSEB3aJnr9qjzc0NNqLuUcPwJBI=)
3: iwzWlq2okRMCVjuk5ELmz6aij_s.crl (hash: T6Qc1DX4vbVocITd8TBD1AwSWz1W/2l2GOw4O6nif6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:cc:fb:24:f1:69:da:21:1a:f0:f7:37:0d:ea:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b0cd696ada8911302563ba4e442e6cfa6a28ffb
Validity
Not Before: Nov 23 03:00:35 2024 GMT
Not After : Nov 24 03:00:35 2024 GMT
Subject: CN=968daa918b6d1a12f63dc3cce344dd3a0179203d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:59:0f:fa:0a:59:40:d1:f5:42:e9:82:26:d5:
9b:5f:bb:ed:09:0d:f3:d5:27:f6:48:bd:e8:4c:97:
1e:c2:6d:58:9f:84:19:e3:34:e7:6e:83:87:9d:b0:
d6:4c:fa:06:01:5b:de:d8:42:14:16:e4:5d:31:bf:
0b:c2:21:af:99:99:37:74:67:8a:92:37:0d:b8:3b:
cb:3d:a3:90:b2:46:ff:33:d9:b1:de:f3:ce:78:85:
3e:d2:bc:43:0d:0d:bc:b0:15:38:09:d1:8a:c3:e7:
cc:0b:45:ca:dd:25:09:fa:43:87:3f:c7:82:cf:d8:
0d:04:7c:2a:34:b6:77:55:99:8e:92:2c:ef:15:fc:
69:06:86:9a:94:73:94:92:6d:75:0a:21:a4:a1:5d:
cc:97:e7:97:03:55:bb:30:7e:4d:05:74:7c:11:10:
a5:b5:f9:7e:53:9a:dc:13:a6:4d:ed:eb:78:ab:d2:
3b:7f:5b:5f:35:96:56:ce:14:b2:53:ed:05:6c:52:
0e:cc:6e:03:57:ed:81:32:5f:9c:9c:09:4c:15:b7:
89:63:e3:d2:2c:68:d5:56:34:ef:0b:32:7c:33:f2:
00:8d:e6:6b:2d:37:4b:fd:28:08:92:27:c4:28:a9:
7a:7d:b4:0f:49:da:e9:1c:fb:ff:10:85:bc:d7:6b:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8D:AA:91:8B:6D:1A:12:F6:3D:C3:CC:E3:44:DD:3A:01:79:20:3D
X509v3 Authority Key Identifier:
keyid:8B:0C:D6:96:AD:A8:91:13:02:56:3B:A4:E4:42:E6:CF:A6:A2:8F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwzWlq2okRMCVjuk5ELmz6aij_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3c443-b199-4041-8247-b403d10c3e91/1/iwzWlq2okRMCVjuk5ELmz6aij_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:13:a9:d6:15:68:70:22:93:54:47:dd:da:c5:71:2e:0d:4a:
a1:17:7b:34:53:ec:b2:77:fe:85:46:66:92:c1:b8:b0:f7:59:
1b:1c:0b:26:7a:16:2b:3f:f3:f5:35:e4:fa:f5:46:0f:6a:ba:
4a:9b:a7:a1:85:10:79:df:7e:34:00:c0:07:d7:de:05:67:6a:
44:77:7b:d1:1b:75:b6:2b:6f:b4:f4:18:47:d5:fd:3f:24:15:
84:88:68:5a:af:28:60:c5:3e:48:81:4a:79:cf:b1:22:a4:f6:
20:ad:9a:53:c6:6a:03:5d:62:05:5f:cc:8b:57:16:cb:58:4d:
c2:91:ec:92:ac:e5:61:f4:83:dc:cb:c0:78:5e:a1:70:ce:ec:
db:01:76:11:7d:08:ab:ba:c0:0b:e5:c0:1e:41:3d:87:bc:6c:
18:ae:35:93:6c:e5:3e:98:81:27:0e:a3:77:b6:e9:ca:c4:00:
b6:8d:3f:d9:82:d4:9d:e3:5b:cb:4c:67:96:e3:a4:79:85:5d:
42:61:18:07:b6:f2:d1:85:19:f5:54:56:6b:81:1d:45:92:a4:
b0:01:c4:29:fe:50:e1:67:a2:5a:fd:29:92:fe:83:33:06:29:
82:a4:6a:87:9b:1c:1b:7f:39:4f:14:5b:ae:57:27:c4:e4:da:
c5:2e:14:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:11:48 2024 by rpki-client on console-fra.rpki-client.org