Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: 1/n2Vk4BpP7xm/f9GaIKqBdyhb6xChgMnhg3mS8Gkyk=
Subject key identifier: D9:3A:AC:68:F3:02:72:41:BE:E9:90:3F:0C:DC:99:5D:35:C7:F0:59
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 019352ADB153A7B2F7CA3A78A81EE531A0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 07:02:15 +0000
Manifest this update: Fri 22 Nov 2024 07:02:15 +0000
Manifest next update: Sat 23 Nov 2024 07:02:15 +0000
Files and hashes: 1: L7R3g4R9Y7IPQ38r9aTtrIvpSR4.roa (hash: nAw8fYsYlXa+EWadzV6KYnyPx0a1Ym3w2Sh5cgZVCcY=)
2: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: zDzJjU17pKyDIavdGXJmqQaXrWgHB7oS3a2dzQHfFPI=)
3: uzCmRPY5e0dwgyl4AtQ5clRpYus.roa (hash: CsqOyziaXD6loMO7RhpUvFuZN3Y7fS3IsRnDmCO95rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:b1:53:a7:b2:f7:ca:3a:78:a8:1e:e5:31:a0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Nov 22 07:02:15 2024 GMT
Not After : Nov 23 07:02:15 2024 GMT
Subject: CN=d93aac68f3027241bee9903f0cdc995d35c7f059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:6f:94:bb:26:e7:2e:70:0d:05:3d:33:21:
41:44:7b:22:aa:05:2c:25:5e:22:b7:06:56:d1:aa:
48:9c:48:94:93:7c:ed:12:77:d9:7a:4d:e6:48:ee:
fa:dd:7e:16:be:57:44:79:e0:ec:76:e9:29:28:53:
2a:d2:9b:c1:e5:e7:60:05:5e:69:5f:74:70:0b:7a:
6d:af:9e:21:fd:de:40:6d:29:43:f6:3a:f7:a1:f0:
df:f6:48:98:13:eb:58:bd:fa:20:31:de:f1:d1:ce:
1e:52:4a:e3:d6:aa:03:8a:13:a3:90:11:e0:d5:47:
d0:1d:6d:65:f3:03:ec:b8:12:fa:cb:0c:ab:47:c3:
d0:09:6d:67:52:f7:a3:61:fa:96:ae:96:40:69:4a:
8b:3b:22:94:e4:9e:94:6f:0f:e8:81:fb:91:bc:27:
70:78:9f:2b:2c:d5:33:1d:04:be:ae:bf:91:b4:da:
54:b2:36:b0:a5:e0:bc:34:9b:c2:15:b6:c8:8a:80:
25:aa:5b:1c:a3:d8:31:8c:ab:1a:86:4d:b8:dd:a5:
ba:3f:ce:e9:2b:84:1d:b7:16:18:4d:c6:11:67:a5:
f1:1d:68:6b:f5:ec:c1:d8:a6:31:57:21:ca:2a:f4:
f8:24:09:9a:13:68:40:32:bf:e3:5c:84:f9:43:75:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3A:AC:68:F3:02:72:41:BE:E9:90:3F:0C:DC:99:5D:35:C7:F0:59
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:07:a3:ad:49:07:3f:b6:ba:c7:9a:77:e4:51:43:62:ee:81:
0d:ff:dd:c0:64:9f:6f:53:f2:39:84:f1:21:48:7e:d4:7d:c2:
bc:b1:48:97:bb:2e:36:31:5c:40:7e:cf:cb:94:d0:35:7b:92:
ab:e1:30:66:83:35:8c:b3:63:70:01:0c:cc:60:48:64:62:4d:
b5:1f:e4:8d:24:fe:22:32:f6:7c:ee:dd:ae:ea:e2:da:f2:10:
d9:a5:69:07:70:6c:02:73:f8:ec:21:9a:7a:92:3f:ee:c2:8f:
ab:6b:3f:e5:b3:be:43:02:cc:84:3a:5c:a9:5e:7b:0b:5f:27:
c5:14:ed:1d:60:13:f2:31:8b:46:e7:da:34:cd:d4:94:5e:6c:
2a:d7:3e:60:f2:50:e4:01:1b:a3:8e:c4:0a:47:4f:df:5b:29:
93:62:54:41:83:9f:6d:0b:36:a2:70:97:2e:aa:73:a8:cd:7e:
10:b5:fb:bb:07:5a:39:8c:79:40:11:ed:50:a7:90:5b:4d:e6:
09:03:50:cf:43:9d:00:45:11:10:73:4e:5e:21:fd:dc:e0:b4:
2a:d7:a1:4a:34:47:af:57:47:8c:5c:da:e4:82:08:37:54:a7:
08:7e:03:5a:73:9a:d8:12:20:da:8c:93:5b:6d:b9:39:5c:20:
01:05:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:18 2024 by rpki-client on console-fra.rpki-client.org