Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: wZEMJjnb9PJzAcQpbk/volFjHWxjfZ51vJH+V7+6g84=
Subject key identifier: 05:45:53:21:E4:70:9B:4E:4D:52:4C:74:A5:36:F4:A7:29:8B:0F:0E
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 0192395D63C4B7F640817B185CFFB419EDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 06AD
Signing time: Sat 28 Sep 2024 16:01:14 +0000
Manifest this update: Sat 28 Sep 2024 16:01:14 +0000
Manifest next update: Sun 29 Sep 2024 16:01:14 +0000
Files and hashes: 1: H7ZarTI9x30LTio2uaInw4l0cbU.roa (hash: FUVM7vZBSUp2Z9wOg1NUZK9yE+BZSDKZPAUy162MtTQ=)
2: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: tD8pHG76CasWpGC+bxol2FkPkNfPdtpQWgqcCOYiRjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:5d:63:c4:b7:f6:40:81:7b:18:5c:ff:b4:19:ed:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Sep 28 16:01:14 2024 GMT
Not After : Sep 29 16:01:14 2024 GMT
Subject: CN=05455321e4709b4e4d524c74a536f4a7298b0f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:95:57:ba:e5:14:dc:d0:f3:9d:d3:80:af:
2e:1b:8e:a7:10:ca:de:8e:18:92:3a:ae:ae:21:be:
42:ef:2d:e0:b7:ac:b6:b2:b7:4e:36:2b:40:93:45:
93:fa:d6:a3:4f:48:54:f3:6e:0c:b1:be:bc:6c:96:
fe:f5:83:87:58:58:98:f9:36:39:49:58:fa:d0:da:
35:2a:93:c3:a1:80:cc:15:50:ba:9c:fe:c2:5e:54:
69:5c:8c:6b:5f:15:15:72:14:28:35:c1:3b:33:0d:
fb:d1:8b:67:8c:bf:93:af:95:f3:0c:92:1c:4b:b1:
e9:9b:c0:22:a6:fe:ef:26:95:57:f3:a1:9f:78:78:
be:28:a7:b5:42:6c:19:f2:e1:d4:0d:7a:61:03:9b:
64:7a:05:5f:5b:36:f5:08:0d:cf:c7:6e:99:65:7b:
74:d3:fb:0e:6e:6e:a8:fc:94:fd:db:4f:9d:38:89:
49:fb:a1:53:49:d6:8e:46:fb:32:1d:09:2a:00:3d:
89:9a:d9:d7:bd:1b:df:74:6a:31:43:7b:20:c2:94:
2a:c5:bb:81:ca:34:9b:b6:ba:6c:c7:e6:76:99:c7:
48:3b:8f:ab:70:0f:ed:9f:d0:e1:62:27:6b:18:e7:
59:e0:31:0f:55:46:6a:0b:43:ff:a1:57:39:b1:8b:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:45:53:21:E4:70:9B:4E:4D:52:4C:74:A5:36:F4:A7:29:8B:0F:0E
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:99:cf:6a:42:aa:91:72:18:85:d1:8a:9c:85:be:cc:73:6b:
16:c3:0a:00:fd:aa:db:ff:b5:c3:ef:96:6a:be:73:0e:d6:cc:
5b:09:23:10:f7:68:4c:66:7d:7c:96:28:2e:89:67:b6:41:1b:
ed:7a:5a:b4:9e:42:9f:6c:66:4a:f9:35:9e:1d:35:30:7f:55:
b0:2c:df:31:ac:21:10:da:cc:38:a8:57:b8:35:fc:0e:05:5c:
11:29:f1:24:7f:40:7e:d9:96:74:12:c8:b8:03:c9:e1:63:e5:
74:1e:47:cf:32:e1:36:ac:a1:92:fa:60:9b:b2:35:43:90:23:
57:44:e6:f6:37:5b:80:47:8d:ef:c7:7f:be:41:fd:d9:7b:cb:
90:98:4f:7c:53:0e:bf:8a:a7:45:7d:62:9b:31:b2:67:43:f4:
99:81:be:99:25:60:96:4c:95:3d:05:ca:af:3c:a8:fe:56:da:
61:ee:a2:9e:e1:df:b6:a8:75:50:2f:44:3d:57:4f:f3:38:19:
74:be:76:04:f0:20:a2:a3:2e:59:ef:b7:a1:80:47:46:85:de:
26:7a:4d:b1:b7:e9:52:62:42:d9:3e:37:3b:ee:45:3b:64:9a:
47:c3:38:4f:c2:84:27:a8:c8:24:86:5c:f7:9a:7b:a1:6a:01:
2b:54:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:21:07 2024 by rpki-client on console-ams.rpki-client.org