Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File: 98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier: P2hcxz/wRGIEUiQ5f1Webjc0oBKpJ9dhCvdc9ubgMFM=
Subject key identifier: 2D:5F:94:87:72:0C:C3:E8:46:D5:C2:3A:49:C2:44:16:C2:14:0C:E3
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer: /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial: 019357D27BAA0AD6B035AE539E66F49939D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number: 025F
Signing time: Sat 23 Nov 2024 07:00:32 +0000
Manifest this update: Sat 23 Nov 2024 07:00:32 +0000
Manifest next update: Sun 24 Nov 2024 07:00:32 +0000
Files and hashes: 1: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: ZbS+5aH9QOYhKC5LaVp/RtvsKdJmV6DaceibL/9tJ5k=)
2: XAfKngD0G0OLCY6gcnrK2NhdJYA.roa (hash: T/ZhWdy4snE3bXQK24VllZ7ZYZucINkjgR/+3FTgKzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:7b:aa:0a:d6:b0:35:ae:53:9e:66:f4:99:39:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
Validity
Not Before: Nov 23 07:00:32 2024 GMT
Not After : Nov 24 07:00:32 2024 GMT
Subject: CN=2d5f9487720cc3e846d5c23a49c24416c2140ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:7b:c6:2b:a1:fe:9b:11:14:c9:14:23:0f:
b0:58:a6:58:8f:af:de:4c:b5:4d:30:04:5e:e8:db:
dd:81:aa:ec:a3:72:78:63:32:d0:95:41:e8:76:96:
34:58:da:50:eb:39:c8:5e:a1:50:cb:8f:66:53:24:
df:a9:3a:d7:2c:de:fc:2f:64:e4:73:29:2a:8b:be:
ff:6f:b0:71:d1:46:d6:14:fb:04:a1:d7:ec:a8:b8:
36:68:da:cb:5c:43:b8:8e:b6:a0:bd:e4:05:61:2d:
62:69:df:24:75:7f:e1:2d:d9:94:4a:ee:2e:b7:af:
6e:f5:20:92:92:55:e0:61:94:2e:09:01:90:18:9a:
a0:78:21:b6:0e:16:9c:ac:78:7e:70:d0:d4:5d:63:
8b:47:69:4f:a4:d7:b4:e6:05:90:b8:ed:e1:7b:fc:
7c:c4:00:18:f0:eb:1b:e3:81:4d:5d:0f:1c:c2:a0:
5b:75:48:bb:54:6d:1f:f5:d1:0f:e8:71:12:9b:b2:
14:e1:0f:28:77:2b:2e:c5:37:19:01:82:93:d6:3d:
6a:cc:72:3b:89:c0:90:da:d1:64:43:c4:7c:47:62:
ee:89:16:5a:54:51:72:45:58:8d:68:11:b2:05:a3:
8a:49:ca:b7:3b:aa:ef:30:57:11:0d:92:f0:8a:36:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5F:94:87:72:0C:C3:E8:46:D5:C2:3A:49:C2:44:16:C2:14:0C:E3
X509v3 Authority Key Identifier:
keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:05:46:b4:c4:85:c1:3e:99:e9:ee:38:a7:f1:f2:1a:60:72:
5d:4b:63:8a:25:80:b4:9a:2a:c8:32:35:5c:02:29:fb:a8:f5:
41:44:1f:4b:b8:f5:de:71:ca:88:d4:d2:62:cc:aa:02:68:51:
c9:04:b1:be:ae:b2:f5:62:22:bc:5f:19:ec:0c:0e:d0:51:55:
3e:e7:59:14:8b:04:50:17:1d:8d:64:44:39:39:23:dd:fb:99:
10:bb:07:b2:19:27:3b:2f:95:37:56:f7:ce:6c:ed:1d:e7:9a:
ad:0f:af:7b:39:19:b9:97:e2:87:79:3a:0b:79:14:ee:3d:74:
0c:b2:b8:a2:70:0c:26:a6:12:b7:73:0d:d4:cc:59:73:c0:eb:
a3:cb:ad:ab:ca:ed:de:0e:b2:11:76:f6:ac:dd:1b:07:28:e4:
d8:99:9d:04:f8:2b:c1:6f:b0:55:cf:0b:4b:1f:0b:a8:83:8f:
c5:b2:1a:0d:43:63:3c:1c:7c:7d:ec:0f:45:46:07:58:ca:e2:
2f:25:1a:31:c9:b1:09:df:6d:17:c4:d6:7d:4c:b0:51:f9:3e:
70:5f:04:18:e7:d6:6d:42:29:cc:ea:d6:e9:b4:a7:77:42:93:
ba:43:d4:9d:ad:1b:c8:6d:bd:f6:60:35:ca:cb:eb:73:52:d8:
75:da:dc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:34 2024 by rpki-client on console-ams.rpki-client.org