Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: MRtQfQogaEw3Yk+Ox4gv0kl8vEY3I4/5SB+94RY28Zk=
Subject key identifier: 31:21:5B:44:4D:7F:55:9B:94:11:0A:8C:02:C3:35:9B:2D:36:F2:D9
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 0193591C05AADDA633ADB994E373D48252A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 13:00:28 +0000
Manifest this update: Sat 23 Nov 2024 13:00:28 +0000
Manifest next update: Sun 24 Nov 2024 13:00:28 +0000
Files and hashes: 1: 0ZLfi9VR51-tjoFl5GMOXrX_aIg.roa (hash: Pe4StWvcw7VKQKGAva+YurzArSzNe169s57NGunrJZI=)
2: JdlPsEncK64ZjPn6W4tGORr10zU.roa (hash: lO0cOUZrFXpbv8LiVi9xOkGRJyB6K0cP/z7foz4/e4s=)
3: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: P8SR3Cqu5et8005QFqPmbZf8JqeYOxHQpAAg4ig4btc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:1c:05:aa:dd:a6:33:ad:b9:94:e3:73:d4:82:52:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Nov 23 13:00:28 2024 GMT
Not After : Nov 24 13:00:28 2024 GMT
Subject: CN=31215b444d7f559b94110a8c02c3359b2d36f2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:ca:c6:af:49:f7:ba:89:29:fa:23:19:d0:
a6:c3:cf:6d:f2:16:1d:f9:4c:96:ba:81:44:3c:7e:
d8:c5:0e:11:03:67:85:9b:d0:5a:5a:9c:5c:56:64:
2e:bf:2c:7f:0e:9a:c1:b0:d0:d2:1e:9a:af:c3:53:
01:93:31:23:81:84:96:d2:f1:30:f0:6d:18:ef:bd:
5d:a3:f0:67:fa:12:7e:e1:c8:8b:9e:27:7b:3c:4c:
7e:77:fc:26:1f:a3:ba:e2:b9:ea:bf:64:0d:24:ea:
56:c9:14:78:03:ad:6b:02:8a:26:8b:6d:3e:b2:6f:
77:4a:e3:3e:56:c3:cb:41:9b:6b:87:73:3d:ad:c6:
8a:13:46:ea:af:38:eb:47:d9:2b:56:e0:88:6c:8c:
8f:7e:22:7a:7b:88:fc:db:e2:82:53:e7:2d:69:bf:
dd:75:5c:33:ce:e4:13:3c:88:0f:ec:74:07:cc:39:
b7:7e:d6:7b:c3:9c:a4:09:7c:a7:5b:f1:46:28:fd:
18:66:95:1f:3d:78:62:6e:e0:9f:97:2d:8e:7f:26:
f5:1a:00:2f:15:40:2c:30:56:db:39:56:d6:30:2b:
da:6c:26:46:4b:13:9b:c4:c5:ec:c5:5d:01:bb:eb:
69:c0:a3:dd:50:4f:7a:ce:4d:74:2b:b3:d6:42:b8:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:21:5B:44:4D:7F:55:9B:94:11:0A:8C:02:C3:35:9B:2D:36:F2:D9
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8d:5e:54:e8:24:61:b6:0f:5a:a8:14:2c:5d:db:88:b1:82:
f0:85:34:78:a8:5e:22:89:0b:e7:21:f4:93:9e:3d:a4:95:46:
cc:14:46:a1:5b:f3:f6:d8:3e:26:67:b0:96:19:35:09:c1:5a:
8a:d6:c4:14:05:e6:6f:91:31:85:56:12:83:e9:44:88:47:1b:
93:42:96:e2:a4:4c:b1:4c:49:8d:87:e6:02:c0:45:44:3f:f3:
7e:8c:63:0b:a4:82:da:f2:3d:41:57:53:78:b1:99:37:c6:a7:
8e:d2:4a:6d:30:28:c9:7b:04:78:88:ca:a1:8f:12:e8:d7:bb:
fb:21:b0:36:c5:94:50:d3:aa:2c:66:88:dd:7f:1f:4e:ec:83:
02:49:e6:c9:05:29:8a:70:a2:41:f5:00:a7:95:8d:88:2a:9d:
e6:2b:ed:3a:9d:2d:23:6c:fd:be:04:07:c4:0f:bf:e1:73:84:
2c:f0:80:f4:ac:5d:00:bf:52:d0:dd:3e:95:4a:32:96:68:2c:
b0:84:2b:cd:e5:6c:9b:77:40:fa:96:9c:da:49:bd:6e:ef:33:
d7:56:cf:50:27:6f:d3:f9:00:52:04:65:fd:a6:b1:70:a6:19:
6d:26:bd:34:db:7e:d1:d5:09:4b:e5:86:6f:84:60:69:d2:7d:
96:65:a0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:52:46 2024 by rpki-client on console-ams.rpki-client.org