Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
File: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft (raw, json)
Hash identifier: ySC6pNODots9Uwmx8vKiPxadLy3sbvcLrIrNcNtoPmU=
Subject key identifier: 58:6E:80:FE:8D:ED:78:AA:B3:A4:4A:A7:17:32:51:81:18:01:6B:BA
Authority key identifier: DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
Certificate issuer: /CN=da70c441fb892b8c9816534885069fcd3300c9a4
Certificate serial: 01935207BD5C6EF694C90509ABB0AE958C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
Manifest number: 0AB0
Signing time: Fri 22 Nov 2024 04:00:59 +0000
Manifest this update: Fri 22 Nov 2024 04:00:59 +0000
Manifest next update: Sat 23 Nov 2024 04:00:59 +0000
Files and hashes: 1: 2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl (hash: 1/noHJpDWNYnv709JQiG9Gk630EfXpbpUmKh2akpG8I=)
2: gPDc6ZBxxWe07h-VqJNCFEoqkEM.roa (hash: Glxj1otzpAMyG4w7myyT5xZf8H3t/k06JaZpYF4bjGU=)
3: lSIEA_iUXjNR0OGAjrLaQS4TOYA.roa (hash: /z4HU8LI8X2cO4Uy7Um8ZmGIiYbSawvJhnA0iQe2cjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:bd:5c:6e:f6:94:c9:05:09:ab:b0:ae:95:8c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da70c441fb892b8c9816534885069fcd3300c9a4
Validity
Not Before: Nov 22 04:00:59 2024 GMT
Not After : Nov 23 04:00:59 2024 GMT
Subject: CN=586e80fe8ded78aab3a44aa71732518118016bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:d2:3f:45:2a:12:f6:49:c3:4c:bd:11:12:
73:24:30:0e:14:7a:3c:a7:c5:35:31:37:c2:08:70:
5a:59:9b:1e:9e:0a:6b:ce:50:fa:56:76:24:fc:fb:
fd:87:c4:4a:d7:94:77:09:e2:f9:fc:c1:bd:0e:a1:
75:16:03:e5:53:10:0e:45:33:88:0b:17:c1:7a:f7:
31:85:93:49:76:76:4e:28:14:4b:f0:6a:9f:a6:d1:
01:b4:f1:1b:59:72:f9:b6:56:fb:33:14:2b:4b:93:
0d:b5:bc:ce:1b:70:18:2f:ec:62:b8:70:e3:ac:08:
85:9c:65:8b:08:17:88:db:1e:9c:79:a9:f2:6e:41:
62:fa:03:d5:29:20:98:c8:ce:14:12:52:4b:de:ad:
4b:8e:c8:8d:ab:d2:57:fa:2e:bb:22:6d:85:67:7d:
d0:26:95:8e:99:0d:46:ab:0e:68:5b:37:4d:eb:2f:
d3:e0:89:19:b5:46:25:15:2d:f8:90:ce:64:00:3c:
30:52:7f:c3:72:66:4b:3c:92:d4:06:4b:47:47:e6:
f2:09:14:2c:21:81:e1:4c:52:b6:c7:69:c0:54:b6:
4e:db:83:7f:31:37:5a:73:b9:06:bf:f5:3b:1c:36:
87:a5:e5:4b:4d:64:1c:d2:36:71:bc:53:29:5b:d6:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6E:80:FE:8D:ED:78:AA:B3:A4:4A:A7:17:32:51:81:18:01:6B:BA
X509v3 Authority Key Identifier:
keyid:DA:70:C4:41:FB:89:2B:8C:98:16:53:48:85:06:9F:CD:33:00:C9:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nDEQfuJK4yYFlNIhQafzTMAyaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e53de5-1b5f-4467-a68c-15fc0b68f844/1/2nDEQfuJK4yYFlNIhQafzTMAyaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:46:31:45:59:e7:fb:da:40:35:81:74:a7:54:93:40:03:8f:
ee:39:3f:8f:aa:0b:a8:f6:8a:b8:f9:9d:e3:a9:f2:c5:34:85:
5c:df:64:b8:66:e2:8c:ab:09:ac:e0:a6:84:a1:49:41:59:0a:
6a:d4:5b:d7:3c:10:c0:e6:d4:a1:1e:77:9e:5f:9d:c1:7e:3c:
06:c0:a0:5e:c8:9a:27:34:95:a2:95:14:e9:89:43:e1:ae:08:
b5:7d:2b:ce:69:52:af:82:02:1e:6f:56:72:12:5b:b0:59:38:
ac:e5:25:2e:f5:43:32:f9:b2:cd:4c:32:99:5f:b0:e8:b2:ab:
ff:5b:92:42:14:12:e4:fc:30:d8:12:59:97:85:39:97:81:8f:
a8:a5:31:63:fb:83:cf:4f:87:50:ee:2c:9f:43:8f:99:58:7b:
41:29:cc:44:3f:45:16:e7:d9:99:40:c4:3e:7a:b5:70:6a:4c:
97:c9:92:19:5e:c6:7d:83:92:0c:f7:e4:7e:45:8c:fc:dd:f2:
69:be:30:9a:81:40:f9:b3:09:9f:2e:4a:ed:22:10:00:ef:64:
02:8a:c0:5e:99:74:fc:e4:18:65:4a:93:1e:94:0a:da:36:78:
1c:38:ac:fa:4d:9b:f2:35:bf:b4:92:a6:ee:47:81:fc:2a:19:
96:84:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:47:08 2024 by rpki-client on console-fra.rpki-client.org