Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File: S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier: hun4O1IA7wDOVBs423vYhRd4I5JQi6Desto6yt5CCjw=
Subject key identifier: DD:6D:D9:3D:18:38:A9:E1:55:14:AB:5F:59:E4:AC:A9:50:61:12:EC
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer: /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial: 019369D9AADF725DF9C4CD7AA39288E3B405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 19:01:32 +0000
Manifest this update: Tue 26 Nov 2024 19:01:32 +0000
Manifest next update: Wed 27 Nov 2024 19:01:32 +0000
Files and hashes: 1: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: Euh75LKGTn5GF1H/9R9X85FJ5ip4XOiOtjK34q7Nolo=)
2: tsgLFBiXDVEej1p_RJIngcs74M8.roa (hash: fofInnuSbDbiP1toHpYSRXncICGDJZ2MoM+Tjv9kJn8=)
3: xvI7a1vx4hempyngLWjBPfmDsno.roa (hash: kcIjbZj497zqN/InCjCU9auWtegElY6wcnkRXru1Ny8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:aa:df:72:5d:f9:c4:cd:7a:a3:92:88:e3:b4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Validity
Not Before: Nov 26 19:01:32 2024 GMT
Not After : Nov 27 19:01:32 2024 GMT
Subject: CN=dd6dd93d1838a9e15514ab5f59e4aca9506112ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:41:67:44:e0:00:a1:21:fb:78:6c:12:72:
82:0f:65:91:31:7e:0f:8b:d0:53:a9:62:b2:ea:19:
7f:1d:82:9c:d4:de:fd:22:71:cf:c3:f4:73:80:da:
63:34:9b:21:e1:5f:1d:48:d0:dc:fe:ba:74:25:be:
77:bb:92:65:2c:99:96:02:f2:03:46:ad:ae:56:3a:
49:58:89:09:6c:9e:ab:5a:8b:95:d0:25:4b:1f:c7:
f6:ae:01:19:dc:f6:b6:f0:fc:5f:82:ea:8e:78:6b:
88:d1:a7:7c:39:62:8f:f6:a4:6c:dc:39:28:b0:0d:
2a:94:51:18:03:0e:ff:58:a1:85:9a:09:a3:cd:a9:
22:89:45:51:06:d8:9c:39:3c:b4:2d:84:eb:1c:98:
37:58:1c:d8:6e:20:b1:12:92:4b:52:07:71:91:70:
b6:8e:c2:a8:f5:6c:b5:d4:16:7f:e1:6c:35:3a:76:
94:90:ae:90:10:ce:4b:b0:c9:0f:d7:40:8b:6d:64:
22:c8:a8:fc:9d:fc:9b:0f:d5:02:96:aa:85:9e:3b:
d0:7a:d6:7f:54:92:bc:03:d6:03:9f:6f:1f:95:50:
d5:7d:8a:2d:26:eb:c1:d5:65:54:48:e0:ef:f5:6d:
e1:84:fe:2a:27:a9:d0:95:b0:30:2f:e2:9e:08:3f:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6D:D9:3D:18:38:A9:E1:55:14:AB:5F:59:E4:AC:A9:50:61:12:EC
X509v3 Authority Key Identifier:
keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:46:a3:2d:60:80:96:a8:80:18:9e:9c:5c:c4:f5:e8:92:2d:
0f:c6:6e:fd:34:fb:1d:1b:6d:69:42:71:54:2c:2e:4b:c2:e2:
31:64:e4:42:48:fd:73:4a:94:a8:04:47:3b:7e:6f:09:d1:b9:
7e:6d:6e:5e:ab:70:62:9c:4e:6c:e1:c6:4c:44:7c:13:2f:6e:
70:f2:9a:53:b5:2f:aa:62:f2:7c:1c:e6:59:6c:7a:51:b7:07:
92:50:37:a7:bf:2e:04:44:ef:2d:60:d9:01:4e:f7:9f:08:bc:
30:91:50:5b:f6:33:75:30:4c:67:7a:bc:b2:19:d7:76:db:a5:
2f:a2:89:dd:b7:0b:85:8e:a2:84:af:9b:8f:fa:82:ed:ef:30:
33:84:88:3f:85:2c:33:25:c5:3e:81:48:ba:3a:af:6b:c8:28:
c1:4a:1a:be:26:dc:2b:2a:8e:06:39:61:fb:43:53:f4:c0:93:
a5:ff:90:0a:79:e3:bb:12:43:ca:de:3c:4c:5e:6f:50:fe:7e:
ee:dd:25:49:ad:3f:fe:31:62:73:db:0d:52:85:6f:2e:1c:ac:
0e:ec:8b:6c:60:6c:66:e6:a3:19:3c:2d:ef:ce:9e:1a:5f:a7:
0c:d4:d0:ac:45:5f:95:d3:1b:84:bf:8c:fe:40:d0:c9:15:7c:
84:47:11:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:37 2024 by rpki-client on console-fra.rpki-client.org