Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: /5fiUSEv2fFBo84uZj28T8y/to6r/xeWodi5K/zIhMU=
Subject key identifier: 27:C5:AD:DC:3A:28:AA:E5:AD:9E:23:65:3A:0A:84:EE:C3:5A:85:97
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 0193587763861CE838B206E4D0838A17E2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 04A3
Signing time: Sat 23 Nov 2024 10:00:39 +0000
Manifest this update: Sat 23 Nov 2024 10:00:39 +0000
Manifest next update: Sun 24 Nov 2024 10:00:39 +0000
Files and hashes: 1: amGG5lCTuDxH_pf4Flr3VvQkZpI.roa (hash: +o5L7wM9+7kwuNYJw32muZp3W9/Zk+r/ir77ovw+Ro8=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: T11hGPfuj/vaFvGSzv30f+71lh2KRGTHSH6ZccEBBsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:63:86:1c:e8:38:b2:06:e4:d0:83:8a:17:e2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Nov 23 10:00:39 2024 GMT
Not After : Nov 24 10:00:39 2024 GMT
Subject: CN=27c5addc3a28aae5ad9e23653a0a84eec35a8597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:53:05:93:93:34:30:2f:51:22:c8:e2:cd:
bc:9e:ae:58:1e:bc:2e:9f:89:02:11:c7:22:1d:07:
aa:85:6e:65:6d:7e:46:fe:7e:fb:d2:92:b1:43:8e:
ec:40:c0:0b:38:e4:f6:63:d0:dd:a3:c0:eb:6d:b2:
32:e3:25:1c:64:55:a0:0f:d3:7a:99:96:0d:84:80:
28:f0:00:3b:2f:c3:14:52:d7:57:67:70:6c:04:76:
d7:ca:45:21:0c:de:19:77:0d:fd:3a:7f:7e:2a:c9:
78:18:7f:08:21:6b:95:3f:91:79:b2:d1:16:05:33:
fa:6f:a2:5e:30:1b:d6:e4:35:31:ed:ff:60:e3:75:
c8:97:07:ea:c4:c1:2f:ba:1f:23:4e:45:8f:4a:91:
a4:71:6d:45:62:95:fb:77:75:14:e3:b8:e8:25:91:
17:96:cf:2a:ae:56:ca:6c:9c:f0:2c:17:7c:79:b1:
ea:fd:2c:dd:5c:47:de:53:da:99:08:5e:cd:ad:b9:
68:aa:0b:22:4d:ab:a9:ba:93:0c:a2:07:36:01:03:
05:e5:8f:3b:be:a1:53:df:7f:98:3f:8f:8b:af:c7:
38:fd:75:69:f9:fa:61:fd:4f:39:ee:35:7d:e4:fa:
c3:a1:02:ae:a2:55:17:cf:87:a4:db:fd:6e:fe:a0:
d5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:AD:DC:3A:28:AA:E5:AD:9E:23:65:3A:0A:84:EE:C3:5A:85:97
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1d:b8:d3:bc:01:62:a4:8a:b7:c5:81:68:af:ed:39:30:90:
43:db:c6:e6:42:5c:f3:af:94:22:7d:a3:cd:4e:61:d0:17:84:
e4:34:84:6d:66:50:69:1f:93:e0:36:f5:ab:cd:b8:11:2b:1a:
08:71:bc:e9:f6:88:7d:f5:fc:ed:b4:5c:7e:1f:85:96:ac:e9:
b2:11:d1:87:bf:da:79:ef:1c:70:90:7a:6e:83:68:65:33:9c:
a6:8d:31:bf:f4:c9:9f:cf:28:b9:2f:39:9f:ff:09:6a:8e:f3:
3e:fb:39:af:51:ef:16:bf:e1:21:44:1e:11:14:16:01:bf:3f:
fd:03:d7:1b:0f:23:3e:27:e6:40:93:f2:de:96:f4:41:f2:91:
0b:55:f8:64:7e:55:16:ad:13:78:d6:5d:38:63:06:1c:a2:79:
14:0e:9b:73:bf:fa:39:f0:33:a3:e3:7e:66:28:2b:7c:84:33:
66:b5:6b:e7:a8:cd:53:4e:5d:8b:18:f0:af:41:39:23:e7:99:
5e:95:82:1a:ba:b8:67:07:40:dd:20:c1:0e:70:8c:a5:b6:ac:
92:54:2b:0e:86:5a:66:44:ee:92:20:38:3f:2c:93:42:23:65:
23:8e:37:1e:1e:05:e4:54:c2:32:20:3c:d3:ff:19:c6:82:55:
b4:ec:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:18 2024 by rpki-client on console-fra.rpki-client.org