Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
File: M1wzNuLOO9daspzoHlT_gexW8do.mft (raw, json)
Hash identifier: UrADA5NGpsdGTSaZDifNdKP8hs8VqvU1TIT0MT699KQ=
Subject key identifier: EC:43:89:B6:27:FB:67:65:65:C9:2F:2A:BA:92:39:66:3A:05:3F:B1
Authority key identifier: 33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
Certificate issuer: /CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Certificate serial: 0193568A22C93FCB2832C6AC3E38288EF5B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:01:53 +0000
Manifest this update: Sat 23 Nov 2024 01:01:53 +0000
Manifest next update: Sun 24 Nov 2024 01:01:53 +0000
Files and hashes: 1: 75ebd0HFGMdsp3MPs89DOK3-1Nk.roa (hash: tril8Xcc+DTbBFz4g540ToTKsnG/wYjqYRYJ9lVTJjA=)
2: J68WndLp5Mnq9_2aAoaD1s8g-20.roa (hash: erLznfZzKbu6OJGlroxknEZTda8TISXJDngMGjcXvvg=)
3: M1wzNuLOO9daspzoHlT_gexW8do.crl (hash: 4mvMNR1JbbbHoR64sSEC4MCSS5P7rodsSvkKk52jcog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:22:c9:3f:cb:28:32:c6:ac:3e:38:28:8e:f5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335c3336e2ce3bd75ab29ce81e54ff81ec56f1da
Validity
Not Before: Nov 23 01:01:53 2024 GMT
Not After : Nov 24 01:01:53 2024 GMT
Subject: CN=ec4389b627fb676565c92f2aba9239663a053fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:c4:57:c1:a1:69:dd:ce:e0:54:37:f2:db:
82:5d:da:d4:41:03:dd:99:3f:51:92:b0:5a:ed:04:
2d:65:92:5d:19:69:a1:f1:07:a3:5e:0c:f9:cf:90:
cc:ec:41:4b:cb:9a:c3:77:73:21:68:7f:7c:44:d8:
2a:cc:ba:24:e9:58:5e:80:f3:42:bd:34:09:f6:cb:
df:be:1e:5e:93:dc:9a:83:67:9e:31:ab:11:26:0f:
a8:6b:76:82:fa:66:a4:81:45:0e:51:24:c6:bc:6a:
24:66:e1:81:28:40:e0:0b:e1:fa:f5:e9:e6:26:63:
75:44:1c:fe:9c:ec:45:ea:a1:aa:30:cb:40:92:55:
f7:f3:6d:e5:a1:39:d8:91:cf:0a:94:0d:4e:89:b6:
e1:2a:3d:aa:ba:3e:9c:53:11:89:01:7c:96:cb:e6:
21:56:bf:9a:28:19:cf:fd:8b:7b:8e:06:02:f7:3f:
01:5f:0f:63:48:f6:4c:b2:6a:79:69:15:a9:85:79:
ef:ef:bb:9a:28:ee:40:03:b0:b2:f8:c0:80:be:87:
de:02:70:3c:d2:fa:d1:02:16:cf:f9:32:f2:fe:59:
aa:6d:a3:23:17:9e:0f:3b:84:b7:de:06:b7:b5:b7:
30:28:0f:9f:f8:30:77:a4:27:0b:dd:22:e1:10:89:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:89:B6:27:FB:67:65:65:C9:2F:2A:BA:92:39:66:3A:05:3F:B1
X509v3 Authority Key Identifier:
keyid:33:5C:33:36:E2:CE:3B:D7:5A:B2:9C:E8:1E:54:FF:81:EC:56:F1:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1wzNuLOO9daspzoHlT_gexW8do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6ed20e-2159-47d5-9b1d-41d509f8b155/1/M1wzNuLOO9daspzoHlT_gexW8do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2d:bb:e7:bb:19:01:48:67:c1:87:e1:99:81:44:c2:31:4c:
02:99:ef:59:b4:2c:34:0d:36:5f:a6:3c:c3:30:6e:22:28:4a:
6e:ce:df:46:1d:1b:c4:55:5d:df:3b:b0:bb:a3:e0:e6:f7:c7:
a0:c6:ce:e5:ee:1e:3f:99:a2:21:c0:6a:b6:e1:02:95:6c:4b:
d6:02:80:cc:42:c2:17:6e:6c:9c:f6:8c:71:3c:a6:cc:ca:16:
ec:f8:98:45:cd:98:dc:79:49:d7:d3:7b:2c:e3:af:0e:6c:8f:
8c:35:b2:e5:c9:84:98:1a:3d:4b:9b:7c:59:58:3f:6d:9b:d0:
89:90:2a:ad:98:11:17:c7:93:ce:7f:d1:72:61:99:3a:bf:32:
eb:de:b2:1d:84:8e:d6:5d:5b:22:c4:55:44:63:d2:d2:0c:25:
80:d7:9c:d2:cc:c8:e8:26:e8:13:ff:5d:41:08:c3:17:86:19:
a9:15:9a:ab:af:b0:61:8a:d5:1a:5f:01:18:3e:83:36:f1:5f:
f8:7f:fb:de:3e:53:6f:b6:e9:52:a1:e3:67:9b:0f:5a:f5:30:
2f:d2:68:fd:d1:d7:8d:43:9e:08:00:a9:94:44:e4:f6:2d:2f:
d5:ff:8b:27:9f:ec:dc:a1:9c:6a:dd:40:d0:23:cf:fa:8d:3c:
91:07:f4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:21 2024 by rpki-client on console-ams.rpki-client.org