Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File: eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier: vUxX4rAi3lhZfMe6xiQUqgmvU9cjDQ4QgPfEQeyu+0w=
Subject key identifier: BB:C4:9D:FA:24:CF:24:49:D5:F7:69:1A:61:57:0A:7E:75:26:3E:4A
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer: /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial: 0193523DED4409A6EADDDBB13F6B0D4DB4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number: 0215
Signing time: Fri 22 Nov 2024 05:00:10 +0000
Manifest this update: Fri 22 Nov 2024 05:00:10 +0000
Manifest next update: Sat 23 Nov 2024 05:00:10 +0000
Files and hashes: 1: 0WED1QltM3WO5oE7shkXjBns7_w.roa (hash: LFI0+E6nv1ixYpC9dVTZK+S6453vLWQJaWTt6x3khoM=)
2: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: pTQM0Qeu3VU7RrirQ5uoQHBa6Nj2JTygZOeyy9XLZag=)
3: sk8RYmYZuzmW19v3aPXsnHCozTY.roa (hash: 7Agm8LHN/3qivdGloVnUsIMjwkLsD1cJ1bZFLV7MAFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3d:ed:44:09:a6:ea:dd:db:b1:3f:6b:0d:4d:b4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
Validity
Not Before: Nov 22 05:00:10 2024 GMT
Not After : Nov 23 05:00:10 2024 GMT
Subject: CN=bbc49dfa24cf2449d5f7691a61570a7e75263e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:b3:d0:d9:bd:30:9a:fd:39:7f:ce:47:63:
45:75:26:b5:2a:9f:e5:a8:4c:04:ce:49:89:42:a5:
9a:e0:c3:ab:85:4f:66:7c:82:97:d8:c6:1c:75:72:
8a:7c:85:14:83:17:3d:65:ad:f4:6c:a0:1f:3c:bb:
6b:1b:5d:89:28:b7:0d:01:c5:20:0a:61:ef:54:7b:
14:3e:8a:19:eb:5a:a1:62:b7:6c:83:90:ce:5e:fd:
c6:03:08:ef:02:db:c8:6c:1f:3e:29:88:7b:5c:8e:
01:1e:cf:20:7d:71:ec:0b:47:df:90:cc:12:00:b3:
72:c7:78:94:1a:dd:b1:d3:b1:7b:b3:72:de:b2:59:
01:f8:93:3a:0e:8a:68:96:d5:4c:8a:b1:d0:8c:0f:
f6:49:6f:54:e9:e9:53:c3:6c:a3:f5:60:9a:3a:cc:
5d:e1:ba:9e:02:38:92:f6:25:ba:0d:c4:2b:2d:32:
50:97:e3:58:9d:72:6a:dc:fb:47:0c:7a:24:cc:ed:
2f:f5:6a:ce:ac:b0:08:68:1f:39:1b:a5:9d:93:ba:
cf:18:82:39:f6:02:c9:7a:27:2c:90:72:cc:e3:8e:
20:52:18:49:80:ce:2a:74:be:4b:79:63:c1:0d:e2:
8f:45:96:09:5c:39:a1:34:7b:64:3b:1c:f1:b7:7a:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C4:9D:FA:24:CF:24:49:D5:F7:69:1A:61:57:0A:7E:75:26:3E:4A
X509v3 Authority Key Identifier:
keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7c:b7:b4:5e:da:70:7a:56:e7:12:e2:45:10:78:af:06:0d:
1f:7e:21:2d:c2:92:6d:3a:50:39:68:9c:37:b9:e0:d0:30:ca:
d6:12:43:58:d0:d5:58:36:ed:b7:fe:7b:d4:2e:ae:34:28:e9:
e8:6c:76:fa:70:fd:de:d5:9c:75:f4:1e:1a:4a:b2:05:06:24:
92:62:00:a4:58:cd:ef:b9:28:8a:57:fb:e3:8f:b9:97:aa:84:
91:e0:b9:10:ab:bd:cb:b5:4f:3c:e3:b2:69:bf:12:8d:ec:a5:
18:f4:11:cd:6b:4e:02:e3:21:c6:4a:6f:1f:85:48:d7:e3:a4:
b6:61:9b:26:7a:cb:5d:62:e5:32:2e:32:7b:d3:45:b8:38:62:
a9:cf:fb:7f:27:b5:ec:93:a6:53:09:1e:29:cb:2d:c4:df:9f:
ad:e4:7b:0b:2d:8b:93:8b:9c:91:bd:50:0d:b4:95:9b:7b:52:
16:72:0e:69:b9:c1:39:2e:ae:33:75:07:db:61:a9:b9:88:8f:
a7:58:4f:d8:ba:33:39:6a:74:a0:42:14:a0:af:f0:03:5d:40:
08:4a:d8:39:8a:e8:f3:ee:0d:b1:c0:bb:d7:5b:1d:97:10:e1:
0c:17:b7:bc:8e:dc:5d:b8:07:20:8c:86:b8:27:b2:eb:f2:4c:
18:ad:48:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:33 2024 by rpki-client on console-ams.rpki-client.org