Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: z/D+ran6WmHiB6vCoJhYByscnL1JZ6zrFr+FVrFZ0oM=
Subject key identifier: 2F:6E:80:92:FB:92:AB:BF:EA:93:4C:9B:24:2F:38:55:D9:77:BA:79
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 019358ADE18FF9DC193747314439323804CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0789
Signing time: Sat 23 Nov 2024 11:00:10 +0000
Manifest this update: Sat 23 Nov 2024 11:00:10 +0000
Manifest next update: Sun 24 Nov 2024 11:00:10 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: +0FVtIHQGJTNCMqIHXR1tzLPWg3rT49AyVTp6nR5wuw=)
2: FWJIMX_TaHTGG1YZ9dnR8wqLLps.roa (hash: G8RolEltbCNu4ErqJe6LceNbQKZXmOodqnPr3UQPioo=)
3: KBIK6PT5qvM9wll6PO6MR08_x9w.roa (hash: xrX040vjcQU/q3xgJ7cUpnrZofbl92YOX7/NPeOkoZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:ad:e1:8f:f9:dc:19:37:47:31:44:39:32:38:04:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Nov 23 11:00:10 2024 GMT
Not After : Nov 24 11:00:10 2024 GMT
Subject: CN=2f6e8092fb92abbfea934c9b242f3855d977ba79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:13:84:f8:f5:cb:98:5c:2a:13:f2:04:87:
9c:de:74:eb:fd:38:28:24:96:0a:50:81:c3:9e:04:
34:de:c7:24:99:b5:24:e3:61:d9:58:46:4a:7c:1a:
b3:59:cc:a3:b4:e1:6e:e0:59:7d:ab:39:82:2a:2c:
f1:e8:ef:8a:7c:ac:4e:57:1c:c3:8f:94:9c:9a:e7:
b7:c1:01:ee:03:15:4e:94:31:62:dd:25:87:c4:6d:
ed:7f:46:da:b3:fd:8e:97:94:93:ad:d6:70:88:f2:
83:7a:25:1a:08:60:0b:40:80:13:5a:ab:9f:fb:ec:
17:9c:47:10:fe:f9:e3:6e:42:5c:ac:d2:98:7e:b0:
dc:82:04:2b:8d:2b:29:d4:b5:02:ab:fe:69:dc:b5:
42:28:68:98:8d:b9:0b:6e:4d:0f:a0:5b:41:08:1f:
16:59:59:ba:32:f6:c8:69:e3:70:8b:cc:dc:5b:07:
f8:97:59:06:e7:06:2d:85:27:1c:0d:2a:de:aa:60:
18:d6:d7:b6:47:bf:24:24:90:19:1e:c8:7c:cf:5a:
ff:db:3a:82:e2:d7:a2:20:4e:84:0f:d2:cb:f2:85:
89:01:1a:0b:95:d2:7c:a4:bf:c3:c4:0e:00:50:33:
12:53:ba:1e:26:5a:41:61:01:64:c5:a4:9d:3d:5f:
65:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:80:92:FB:92:AB:BF:EA:93:4C:9B:24:2F:38:55:D9:77:BA:79
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dc:8b:05:96:bc:32:09:dc:9c:58:ce:ae:82:e1:ea:16:7a:
5e:bb:5c:19:93:8d:4d:1f:ab:b7:18:53:c6:95:25:ec:de:40:
4f:ad:a5:8d:93:30:f7:d5:1d:10:d9:37:ea:58:ff:0a:c0:07:
68:15:a0:7e:8a:36:15:2b:da:35:5e:d3:b0:de:7c:48:60:61:
f8:1e:be:46:c1:8a:c5:c9:5c:a4:07:79:c5:f2:36:bc:5f:39:
72:23:fa:9b:bc:ee:de:a3:5e:43:38:ee:a4:50:3a:f5:d3:8d:
e5:42:f3:06:db:82:9d:04:79:21:6c:2d:54:84:d0:f7:1f:0f:
81:ff:e6:7d:a3:4f:87:97:bb:6d:69:c6:8c:11:6f:11:ac:b7:
0c:67:e1:cf:25:72:99:b9:f8:a7:a3:97:2f:cd:1d:9f:0d:df:
db:e1:4c:e9:86:50:09:6d:f4:20:10:c9:50:c2:de:e2:5c:91:
58:72:1f:ed:8a:d4:58:c9:d1:39:ec:9a:75:6a:c7:8c:f7:62:
a0:a7:86:0a:48:6a:ce:a9:72:d2:0a:b8:b6:84:1b:f6:29:0a:
56:06:0d:2d:68:aa:49:c8:a9:80:67:3d:09:3a:95:7a:e8:75:
a1:2e:ea:f7:31:cd:b5:ae:20:c4:44:83:1b:74:4c:87:d4:40:
e4:ed:8c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:09:53 2024 by rpki-client on console-ams.rpki-client.org