Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
File: cFtQehAZ98Rlc33FlzbAb93c7-c.mft (raw, json)
Hash identifier: DSu4oBNcNSYTJmg/Mp8zfUvqeKO/p5M0iW/mcDPYPJ0=
Subject key identifier: D4:92:B6:AB:80:D8:D8:DB:A7:B4:AB:90:FC:A7:E7:DA:00:75:86:36
Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7
Certificate serial: 019357D2354D59A97AB748D2075C8FABA229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
Manifest number: 0377
Signing time: Sat 23 Nov 2024 07:00:14 +0000
Manifest this update: Sat 23 Nov 2024 07:00:14 +0000
Manifest next update: Sun 24 Nov 2024 07:00:14 +0000
Files and hashes: 1: aluq5CoDcSgM-Q_dy7TdGaOQJOk.roa (hash: lLja1UiXN53YcqFzhXVvoDvXi/dh2XIR/2sHYelOVAQ=)
2: cFtQehAZ98Rlc33FlzbAb93c7-c.crl (hash: lo+wKbGndMvmsDF51rmOawpq401huRAXGxJVh8ENCdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:35:4d:59:a9:7a:b7:48:d2:07:5c:8f:ab:a2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7
Validity
Not Before: Nov 23 07:00:14 2024 GMT
Not After : Nov 24 07:00:14 2024 GMT
Subject: CN=d492b6ab80d8d8dba7b4ab90fca7e7da00758636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:fd:b5:5d:b4:78:6b:c9:46:f0:d3:35:f9:
51:90:aa:7b:1c:51:10:9a:6b:26:19:e9:71:82:3f:
38:9c:99:3c:cd:b1:ee:9c:26:39:b1:6e:05:73:96:
e1:57:25:d8:63:24:14:90:c5:d7:c8:ac:6b:40:50:
76:86:27:0f:31:6a:f3:1c:50:08:fc:6c:13:21:05:
8d:40:1d:60:4f:a8:01:7d:2d:98:4b:d4:65:6a:13:
0b:ab:56:50:1a:fb:11:50:14:3c:22:41:6c:56:71:
d7:49:bf:2f:ca:3a:58:3b:17:4b:2b:b4:2b:fa:bb:
d1:8c:01:65:76:8e:10:ca:32:ff:9c:a1:6b:1f:ae:
9a:6a:ae:2d:25:44:54:23:67:bc:c6:a9:ad:70:12:
bb:5b:af:8a:2e:d4:2c:c0:0c:31:7c:f3:a5:48:ba:
b9:a1:ce:e9:5c:ad:5d:ed:6f:46:d1:fa:ec:ea:86:
8e:7c:61:22:43:ec:48:13:07:ab:1a:ef:9b:b0:d7:
02:8d:dc:81:a8:62:47:96:52:50:fe:9c:e2:d5:f0:
8c:48:22:81:85:ef:05:dc:90:53:91:99:17:05:5b:
ce:bb:40:4d:5b:f1:cc:19:69:bb:56:14:c6:14:fe:
c2:15:56:9b:8d:00:e1:83:f5:59:5b:6e:a8:06:3f:
2c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:92:B6:AB:80:D8:D8:DB:A7:B4:AB:90:FC:A7:E7:DA:00:75:86:36
X509v3 Authority Key Identifier:
keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c2:5a:20:62:21:8a:80:62:ea:54:80:6b:ec:bd:90:88:83:
11:93:73:71:1c:44:ef:bd:3d:f6:4b:a7:71:1a:bf:37:56:b3:
72:ad:d8:aa:c2:7c:cc:d4:41:da:e4:0b:63:db:6b:5c:ee:e2:
2b:ae:d2:9a:0f:2f:1b:b3:ba:e9:f2:37:1f:c5:aa:92:90:4c:
26:18:b7:0f:e3:7e:d6:d9:33:05:81:d3:ea:d1:39:3d:29:93:
40:c2:8c:ed:e6:2c:8c:0c:f8:b2:b3:6f:7a:d1:73:e1:6d:04:
ca:89:97:73:de:e5:1d:e8:df:55:30:c5:cd:9e:4a:c8:fc:00:
34:e5:05:5b:ed:95:68:e6:5d:aa:1d:28:bb:27:47:44:7a:82:
67:cf:8d:51:ff:c7:43:48:44:28:94:62:f9:13:bd:23:f0:04:
a1:00:8f:0a:70:4e:e3:d5:12:d2:db:45:44:16:76:86:02:fe:
f0:8b:7d:b3:8f:e9:51:87:77:d8:c9:8a:f7:76:c5:94:d4:cb:
92:97:2f:67:e3:9e:b5:33:67:b0:6c:ff:74:26:ed:d1:2e:ca:
48:95:7b:74:99:5c:02:29:e2:c6:bf:71:25:13:30:fe:fc:46:
a0:ab:8d:99:ab:63:6b:66:c3:e1:5c:7c:8e:00:51:c3:fd:60:
ce:f6:b1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:11:33 2024 by rpki-client on console-ams.rpki-client.org