Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: pKMUFe9ApcN6zCi/yp1NBlW+o5dPqTVEBcr7vQdAI2M=
Subject key identifier: CE:58:2B:DB:A7:B7:3E:A9:91:C6:01:B8:B8:CB:25:E9:51:D4:E1:82
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 0193572DE46DC9D401B9235ABE3685B9B38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 04:00:45 +0000
Manifest this update: Sat 23 Nov 2024 04:00:45 +0000
Manifest next update: Sun 24 Nov 2024 04:00:45 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: B3s1HzCNvBXPk7pzcT75g7vyts9YNaztC6txRNXFcHs=)
2: SWP6oP-oc-8YhtgeIJi-tGS3QAU.roa (hash: ITBGdZHWXUkIhPK4dHJESFWcrycAQ9ePTSQojiFg14E=)
3: fs2fb9vyAdTJ_9vZHP12Zvq4Myw.roa (hash: H+v0AGTX9OPRrvx0El9sPJcT+c7zAT319O7GS7lreK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:e4:6d:c9:d4:01:b9:23:5a:be:36:85:b9:b3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Nov 23 04:00:45 2024 GMT
Not After : Nov 24 04:00:45 2024 GMT
Subject: CN=ce582bdba7b73ea991c601b8b8cb25e951d4e182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:1d:f8:48:e0:f4:37:50:34:fc:b2:96:fd:
49:a3:42:94:9e:79:d9:a0:4f:89:80:fa:0c:cf:82:
f7:cb:b5:a2:b0:6b:0d:37:f8:1a:f0:58:fc:ec:c8:
cc:cb:9f:bf:2c:54:92:47:dd:19:c0:a0:a7:c5:a5:
50:ed:15:3d:77:99:f9:ff:37:6e:72:57:10:2d:12:
43:49:6d:fa:ab:eb:8f:38:69:70:d5:13:80:5e:43:
69:0a:6f:45:9a:76:a5:34:6e:09:96:a6:f5:e9:33:
d9:ef:93:ce:91:18:37:3c:ac:b8:37:b1:a8:a4:0f:
5f:ec:30:da:f9:a7:c4:8e:8a:de:e9:91:e7:c6:6b:
ab:e8:27:f7:4f:62:f6:65:e2:53:67:fa:66:14:39:
d7:42:d4:ab:b0:f4:20:1f:33:7b:5e:e8:bb:9e:9d:
2b:78:a3:55:00:13:6c:94:fd:d8:04:74:06:93:d7:
04:a7:7a:21:33:7c:4f:6b:03:4a:37:17:ad:02:8d:
e4:77:3a:ba:c7:16:de:93:1c:c3:3c:7f:7d:d3:d3:
99:b6:73:3c:91:22:b8:63:6e:44:45:83:02:fd:8d:
f2:02:52:56:15:f5:ce:e1:98:c5:39:a2:af:b2:f9:
7d:6b:e0:68:58:00:da:74:ee:3d:a7:3e:b0:62:df:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:58:2B:DB:A7:B7:3E:A9:91:C6:01:B8:B8:CB:25:E9:51:D4:E1:82
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:94:4e:da:55:48:59:7d:82:50:9f:22:5f:4d:5a:a3:bd:4e:
c9:73:a0:91:17:76:36:7b:f2:b8:e1:fc:71:05:36:bd:72:56:
3c:55:db:81:94:cf:83:00:36:54:3c:59:5e:44:75:cf:26:56:
a2:19:f9:22:eb:f7:53:8b:d4:d3:53:84:73:cd:c8:4f:28:04:
ea:88:56:49:2e:f1:cf:58:9b:a1:80:4f:0b:c0:c0:f1:d5:88:
71:89:98:cd:45:82:13:59:b6:b8:9f:1a:82:aa:5e:6c:e5:a8:
fa:b1:53:08:de:e3:1b:0d:e7:4f:fc:d5:4c:44:ec:e9:8e:df:
42:5d:42:d0:f0:0b:f6:c6:34:47:a3:f0:58:03:a7:7f:d5:09:
7d:fd:33:0b:96:93:36:af:5c:9c:2b:61:a3:39:c2:25:47:ad:
e3:39:ba:30:17:a0:5e:a4:56:a7:1d:18:7a:1e:7d:67:f6:f8:
a6:28:8c:6f:3d:e6:03:21:cc:a5:53:5c:e6:9c:97:57:60:b1:
d6:2e:2a:bb:4c:52:41:99:16:98:a8:75:f8:3a:55:3e:66:2e:
f8:0c:9e:e9:5c:5d:d0:c6:a9:fa:2f:10:e6:6c:05:cb:c6:97:
43:d7:61:cb:b3:43:00:6b:5b:c7:31:89:42:db:80:b6:7a:d2:
f2:f0:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:15:42 2024 by rpki-client on console-ams.rpki-client.org