Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: Jz32QwXfCO09JRpOv8iaxfo2BCecdebrdC1fvV/G44U=
Subject key identifier: 86:D0:56:58:41:73:C7:72:4E:4B:E3:03:A1:B6:D9:5A:AC:27:F9:E3
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 019356BFB98932943A75F24A14C8D6F0BE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 02A6
Signing time: Sat 23 Nov 2024 02:00:25 +0000
Manifest this update: Sat 23 Nov 2024 02:00:25 +0000
Manifest next update: Sun 24 Nov 2024 02:00:25 +0000
Files and hashes: 1: XgXo1pj917oiYuZWpNg-RINAcOM.roa (hash: atg2AXwVmObutb/VkzeeTF4rdQ06DyTtTyNadvdFY2I=)
2: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: ILRDJa1noj8nuJ7xnhagRP9ZUNbp7IpFwfNS/4lxQu4=)
3: tI7GzP_0Es_s7DIWPCj6TszLXYY.roa (hash: 7kL9hzkqr+h1PYZHaGFLoNFmf6XOV+2VluVeZbR2ne4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:b9:89:32:94:3a:75:f2:4a:14:c8:d6:f0:be:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Nov 23 02:00:25 2024 GMT
Not After : Nov 24 02:00:25 2024 GMT
Subject: CN=86d056584173c7724e4be303a1b6d95aac27f9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9e:db:a6:8e:1e:17:68:ad:36:f0:2a:72:08:
3c:10:d7:c8:6d:48:38:0d:07:d8:11:61:83:cc:74:
6d:fc:bb:b8:16:6c:b2:d2:15:07:4e:23:47:c4:c3:
fe:e7:ce:52:e5:00:87:fd:68:b0:b9:0a:8b:66:b5:
48:3d:78:b2:22:09:ed:8d:0b:21:a8:40:1b:63:c9:
20:76:92:5b:00:98:09:94:ca:87:69:b6:b9:46:5e:
4c:ee:ad:a5:90:e9:e2:64:3e:ca:14:2e:1f:4c:f1:
b5:3e:bd:88:8f:79:89:3c:b2:85:f6:9b:1d:b3:b2:
95:09:1c:23:51:09:ca:8e:58:3f:be:af:22:f0:b9:
47:09:6c:47:45:9b:66:71:e0:4e:5a:9a:50:2a:96:
cf:10:a5:30:d6:6f:7c:e7:eb:08:64:28:80:c4:ea:
0c:21:f5:67:5b:62:58:70:88:6d:8b:9f:45:c2:d5:
48:c7:b7:8c:d4:37:84:d6:7e:82:62:5f:5a:4a:d4:
f1:0b:94:97:1e:ae:66:bc:be:f9:11:a3:d2:db:7b:
2d:c9:5a:c4:07:ad:f7:50:b2:e6:1f:b3:87:c1:66:
d3:6a:0a:e7:4e:4c:79:41:ca:b0:3f:09:a6:1d:11:
bd:74:d6:24:03:71:dc:75:77:4f:3b:13:08:dd:07:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:56:58:41:73:C7:72:4E:4B:E3:03:A1:B6:D9:5A:AC:27:F9:E3
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ab:b3:b6:e8:96:3f:db:92:69:dc:e7:88:1b:ac:be:f0:7f:
ed:9a:08:15:89:67:89:a6:8e:2a:9b:03:9d:36:7c:0c:d3:01:
99:3f:14:32:53:fc:3d:a2:78:71:0c:d3:c7:4d:94:1e:77:fb:
94:2d:bd:70:bb:c4:43:0d:46:99:ea:80:a2:1b:f2:75:61:cb:
a9:d2:46:de:f6:4e:49:4f:d8:44:b1:c0:8a:d9:f4:93:76:36:
9f:b4:29:e4:15:6f:18:f8:62:cb:36:4d:72:22:2f:87:e2:85:
d0:81:1f:fd:e3:0f:c2:2b:5f:9f:a4:db:35:28:9d:57:80:7b:
ba:87:03:89:11:5c:5a:54:f7:ca:fe:7d:d0:ac:fe:44:ff:41:
b5:11:0c:91:1e:37:7a:fd:c4:e3:8f:95:81:e3:10:f3:01:eb:
9d:5a:21:30:69:19:cd:65:fb:58:71:3e:1b:33:be:cc:38:fc:
b4:f2:40:b7:23:81:fd:69:91:28:70:02:2b:da:b4:7e:e4:c2:
57:e6:38:8f:e4:3c:a5:41:0a:f3:4a:7b:90:1c:40:cb:e8:14:
29:27:30:1a:8e:eb:dc:3c:3f:45:30:2b:62:b3:a3:56:a0:8c:
53:2c:8b:bb:21:90:b3:86:c9:42:e5:bf:b5:e9:7b:14:20:3e:
42:aa:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:22 2024 by rpki-client on console-ams.rpki-client.org