Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: W9oxAn+dQb6HlhCLkhbj7gFT2KPiwOf+wruvvYEl+dA=
Subject key identifier: 98:E7:B2:DB:3C:F6:B8:3D:31:FF:8B:5A:39:61:6C:A6:A1:10:BD:46
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 0193549C4C8A82F53D574FBCAD50D3E62346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 08DC
Signing time: Fri 22 Nov 2024 16:02:29 +0000
Manifest this update: Fri 22 Nov 2024 16:02:29 +0000
Manifest next update: Sat 23 Nov 2024 16:02:29 +0000
Files and hashes: 1: 947yIxqXJUpydUglAOY3i87ztc4.roa (hash: KCh8IsQ1xCrmzU5PcgtnlF+JLT6d+1Kl/ED4DnmxjN0=)
2: ONEdxN-peaPcpdnR-c7nkTvQ1WI.roa (hash: pzRpQilNfnuOz0iZr6WV5PGc0XZr/OMxaeOc7+T4CPU=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: CZTXm0XDd119cWjTcA7W9u103nptxWGP4Whju44goE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:4c:8a:82:f5:3d:57:4f:bc:ad:50:d3:e6:23:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Nov 22 16:02:29 2024 GMT
Not After : Nov 23 16:02:29 2024 GMT
Subject: CN=98e7b2db3cf6b83d31ff8b5a39616ca6a110bd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bc:1c:4b:ee:c1:64:d4:5b:c6:c5:98:b6:17:
56:ad:00:f6:90:92:09:46:2d:95:83:32:ef:6e:4d:
16:63:54:1c:32:62:24:4b:04:db:64:09:68:41:0f:
bf:c9:4e:f2:0d:63:e1:d7:6a:9f:a4:fc:2c:15:12:
2c:a6:fc:98:da:ed:e5:3d:eb:70:5b:f7:51:91:96:
8e:71:11:6d:3f:a9:91:a4:4e:48:04:2a:24:77:bc:
97:68:0e:28:e2:52:d3:c1:30:04:92:f6:8d:a5:f1:
b0:9a:9c:fe:eb:8a:85:50:12:c2:4f:ec:68:38:70:
50:24:30:e1:d6:d1:e3:ba:ee:7c:e3:a9:bc:46:d5:
0f:d7:de:db:ff:93:23:26:40:b5:82:1e:8d:27:10:
be:73:0a:1e:af:c5:16:5e:e7:79:62:bc:8e:35:28:
94:06:7e:ba:b4:00:7c:8e:cc:8d:82:83:27:3b:37:
77:97:88:0d:5d:b3:9f:ed:fb:a3:11:9e:74:c8:8c:
83:64:36:11:f1:6b:25:76:6c:9a:27:16:4f:5c:5e:
a1:81:47:49:75:be:2c:41:83:5b:45:d1:44:d5:38:
9b:98:e7:5e:c3:5e:a2:07:ff:b9:92:d9:a5:78:42:
8b:6e:78:46:1c:3b:7e:e4:a2:f8:9b:81:f4:68:14:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E7:B2:DB:3C:F6:B8:3D:31:FF:8B:5A:39:61:6C:A6:A1:10:BD:46
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:14:a5:31:92:59:76:9c:b3:4f:dc:33:9a:6e:2a:f7:a5:a3:
0b:84:f1:16:2a:bd:81:e2:23:fd:97:04:7a:e8:da:78:68:97:
ba:5c:49:73:ee:f7:d0:5e:55:6a:2c:f3:cb:73:ca:0e:2d:f2:
ad:14:7f:a1:03:0c:6f:54:4c:71:c5:54:af:44:99:f1:3b:63:
77:1a:bb:59:f2:d6:aa:db:b2:fd:ab:26:c8:35:e5:cb:2a:3f:
33:a7:49:ba:24:52:9a:3c:36:db:58:8f:f7:06:fa:15:bd:6f:
87:8d:d7:11:53:11:22:10:56:02:f8:24:a3:16:6f:0e:3d:fd:
69:f6:81:4b:f6:f4:79:cf:75:3f:f1:61:76:0c:14:dd:a7:07:
4f:71:50:ba:d2:5a:88:45:cf:07:19:87:14:8a:96:95:ad:35:
0d:bf:59:7d:97:7f:4b:e4:5d:0f:1c:e6:7e:c6:04:73:56:b7:
4c:5f:fa:77:42:3c:f0:61:8c:f1:a8:15:a9:d1:b7:ca:c9:26:
4d:43:a5:d7:f9:bd:67:02:36:43:86:38:fe:89:33:9e:97:89:
13:89:70:9f:f1:b6:ce:64:c9:bf:5a:ea:fe:c2:6c:ed:45:e4:
48:06:f9:3b:a2:e0:94:60:98:ac:e0:f7:02:92:4f:c6:c8:da:
3f:1f:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:07:53 2024 by rpki-client on console-ams.rpki-client.org