Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
File: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft (raw, json)
Hash identifier: Y71aTEeOEamfJ8XkP6Ir/EyXNBfqmzvyfQ1ecg8MdRY=
Subject key identifier: 1A:6E:E6:8B:FA:9E:99:22:C5:63:8D:53:75:8D:EC:B7:01:95:91:EC
Authority key identifier: FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
Certificate issuer: /CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Certificate serial: 019358782779C591E7B477E8B0CEA4AD190B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 10:01:29 +0000
Manifest this update: Sat 23 Nov 2024 10:01:29 +0000
Manifest next update: Sun 24 Nov 2024 10:01:29 +0000
Files and hashes: 1: R5lZ5YMjLjFju7LDkRXStgORVMQ.roa (hash: WnvDddicIDTZav05Cbb04luLdpGMTeS7uwMZj/34ySI=)
2: _cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl (hash: dl9zTFSqWPGhE0xn2G4axqmpUfNMk3qGAkUaUPu1djw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:27:79:c5:91:e7:b4:77:e8:b0:ce:a4:ad:19:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcb976bb6029216f7a2ad05b7932f4a55e0cf8a
Validity
Not Before: Nov 23 10:01:29 2024 GMT
Not After : Nov 24 10:01:29 2024 GMT
Subject: CN=1a6ee68bfa9e9922c5638d53758decb7019591ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:59:df:fb:c0:9c:2f:64:48:34:11:99:be:
06:2e:b4:d3:80:eb:be:7c:3d:09:c8:9e:7c:b6:72:
ad:82:59:2c:8e:a3:0b:a6:d1:a9:72:6a:0e:8f:a1:
96:08:60:6c:6f:0f:71:97:58:d7:35:08:2c:a3:81:
ce:be:18:ee:92:7a:ec:cf:96:19:88:0f:0e:ad:10:
b5:eb:ba:a6:ea:29:37:93:b2:53:57:be:2b:cb:a2:
1f:36:e6:83:7f:dd:16:b1:87:ac:69:a2:82:ff:cc:
9b:37:b6:cc:89:50:1a:24:65:43:40:d2:11:7d:5c:
d0:f3:f9:cc:a7:42:bc:e7:66:1f:29:f7:b7:34:ba:
38:ee:3e:e2:22:67:34:c7:29:27:93:89:1e:e8:7a:
a9:86:03:10:60:a8:4b:e7:d0:82:f4:bf:5d:e1:a9:
72:5a:b3:1d:0e:e2:8c:2a:15:9b:0f:0d:d2:d5:50:
8b:dc:2b:ea:96:00:fa:32:68:ef:a0:66:f5:c1:99:
f1:ab:33:5d:99:22:12:b6:d4:5c:6a:1a:cd:ed:c5:
c9:dc:71:30:6d:a8:3c:bc:2c:8f:48:3b:b7:ba:2f:
58:65:91:3f:9c:0f:de:12:ce:48:65:63:ea:28:27:
56:a6:5a:16:ea:8c:91:67:33:84:89:99:d7:b7:a8:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6E:E6:8B:FA:9E:99:22:C5:63:8D:53:75:8D:EC:B7:01:95:91:EC
X509v3 Authority Key Identifier:
keyid:FD:CB:97:6B:B6:02:92:16:F7:A2:AD:05:B7:93:2F:4A:55:E0:CF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/494f27-4bbc-4b38-849b-d888a0689c19/1/_cuXa7YCkhb3oq0Ft5MvSlXgz4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:3f:1c:3a:b3:ac:79:9b:e6:de:a9:11:49:59:7b:d5:47:ef:
46:e4:57:a5:f4:de:58:62:73:e0:55:c4:43:75:a7:98:2c:52:
a5:b5:5a:35:96:c9:fc:04:60:9e:0b:83:db:14:95:da:c5:03:
eb:90:27:a5:78:1c:3f:0a:6a:81:8b:5d:99:82:8a:58:21:56:
15:30:7e:e5:06:6f:94:ef:48:de:bc:40:cb:ae:95:44:6c:b9:
a1:67:47:43:03:33:ea:e9:b8:ac:56:f3:85:ec:70:35:a6:9c:
54:8a:b2:eb:83:01:41:01:2c:c8:18:06:24:70:73:44:b4:4c:
10:50:12:cf:4a:5e:9a:e9:7d:a0:84:d1:97:74:2b:10:4d:45:
87:91:0b:3f:70:d5:fb:3a:fa:22:70:50:6c:5e:b8:87:c5:11:
7b:ca:7d:0d:c5:dd:88:88:3e:45:a4:a7:3e:00:fb:b3:23:56:
10:a8:d9:bf:79:62:78:c7:bf:8b:b3:43:11:36:bd:a6:f0:45:
15:5c:45:75:eb:f6:24:95:0b:23:e8:53:17:c5:d0:da:3e:bf:
58:fe:16:43:58:64:a2:7b:bf:2f:d1:5a:15:4c:f3:d0:13:63:
72:47:8f:d1:ab:95:ca:af:79:8a:6d:bb:1e:5a:ac:a4:ac:10:
b5:f0:1b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:21 2024 by rpki-client on console-fra.rpki-client.org