Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: aAXTtaT14NhniQMZBXv8AbE2KYopHm4MFza3br7l3w8=
Subject key identifier: 00:78:8A:B5:CA:7D:06:4E:F1:3E:A5:63:38:6C:56:98:FA:B3:24:2B
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 019356F729CEBA08CA329E5F8B02282D698B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 03:00:58 +0000
Manifest this update: Sat 23 Nov 2024 03:00:58 +0000
Manifest next update: Sun 24 Nov 2024 03:00:58 +0000
Files and hashes: 1: J45z5LMEFH9agYI1cjx7U42hhSI.roa (hash: 1IjeUVM4mWR2KlK5BVflB2pS1saOHOSFe/bnXpzaPyA=)
2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: u0baG5MAGN0ga9D08dKDygMFFGgCBVSdEbaiyiKGjjw=)
3: iDH7eY9MycLRPBuoHkeXUFhbinI.roa (hash: JtNDFqHVGgpMCfLqaWACq4dbhgEvkSRrMo46aS4XaOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:29:ce:ba:08:ca:32:9e:5f:8b:02:28:2d:69:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Nov 23 03:00:58 2024 GMT
Not After : Nov 24 03:00:58 2024 GMT
Subject: CN=00788ab5ca7d064ef13ea563386c5698fab3242b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:93:a3:f3:e9:d1:01:d6:69:1d:41:02:eb:
a4:2f:37:c1:44:8e:0e:ef:49:34:21:1f:e5:78:1b:
16:b2:ad:9f:82:40:4d:0c:64:8f:3a:24:3e:56:54:
1f:0e:43:0b:3c:a1:e6:97:a1:a3:aa:c1:08:34:fa:
e7:d2:e8:f1:cc:e4:1f:c6:4a:e3:d0:9e:c5:60:50:
69:9c:99:57:fb:f9:f6:36:5b:48:7f:99:15:7e:e2:
ed:dd:79:a9:70:8f:67:eb:7f:51:d1:5b:74:7d:6d:
30:85:81:77:bc:d2:b6:55:73:7c:d5:79:e5:61:09:
91:e1:e2:50:c6:20:97:94:b0:e3:ee:bd:19:69:79:
b1:5b:da:2b:a8:0e:88:3a:e3:ff:55:00:ab:ec:9e:
81:b1:ae:28:99:eb:2d:ca:75:4c:65:df:54:99:75:
ca:8d:c2:a4:86:92:af:2e:ec:f7:ee:7b:15:3d:c5:
93:ca:f8:40:c5:87:ee:0f:34:fe:aa:92:de:a2:9d:
d9:3e:53:9f:4d:17:86:b1:a2:97:2a:b9:31:ec:e3:
8c:9c:36:92:63:f0:2a:49:a5:1c:0d:78:48:83:84:
32:f3:1c:1a:1f:09:96:67:52:aa:17:f2:d5:31:ab:
9f:08:88:b0:bd:3e:e4:66:9c:42:70:3f:b2:30:97:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:78:8A:B5:CA:7D:06:4E:F1:3E:A5:63:38:6C:56:98:FA:B3:24:2B
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8d:9c:1c:c0:9c:84:9d:8d:50:63:fe:8f:2e:60:87:2b:53:
ba:ea:0d:84:6f:2b:70:95:64:83:95:b6:dd:6f:78:09:ee:6f:
c9:8b:89:3d:09:c1:f6:8c:9a:8c:b6:60:da:5a:b2:74:7e:91:
2b:19:6c:32:c0:fe:01:d4:4b:56:c7:5e:9e:ad:01:82:7a:c1:
c9:e2:dd:2f:ea:7d:74:0f:7f:c9:a2:03:fa:0d:f7:0d:94:78:
fa:e6:3d:3d:66:31:e1:5e:7d:2e:66:52:4b:14:cc:4f:00:86:
bf:48:97:36:fc:95:e4:86:8a:2e:e6:56:dd:84:6e:08:0b:60:
97:52:dd:38:e8:cf:37:0b:ce:66:d4:89:4b:64:03:0c:b1:20:
0d:e5:17:2e:f8:79:da:9a:da:b7:f1:2c:38:55:12:31:7a:5b:
2d:95:b0:a8:53:77:ab:af:a3:15:1a:04:c5:f4:c8:be:f7:66:
e2:24:a2:16:97:1f:ba:1f:c9:b3:26:48:20:1f:80:bc:a1:1e:
55:a4:56:1a:e4:16:ee:21:f9:44:a7:fa:d4:a4:0c:ef:6f:35:
24:a2:0d:f2:cb:6b:ef:db:20:26:e0:67:c8:14:8e:f3:c7:85:
af:e3:d4:8b:5e:e1:d6:27:65:bd:48:a7:bd:e4:cb:ac:2d:53:
24:e2:ba:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:42:28 2024 by rpki-client on console-ams.rpki-client.org