Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File: s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier: TMR4zhhSL9sV8cLX/+Q+5Qk8BDEGAssCt3ab8648cL4=
Subject key identifier: 6A:EF:AA:2C:92:EB:5B:A0:FC:E8:4E:2E:A7:08:37:A0:58:28:10:50
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer: /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial: 019355086546A9531DB5426BF6C7EB8FECC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 18:00:33 +0000
Manifest this update: Fri 22 Nov 2024 18:00:33 +0000
Manifest next update: Sat 23 Nov 2024 18:00:33 +0000
Files and hashes: 1: ohuXq8V-bzSVNjcAhYl1lVxvthw.roa (hash: 4sM+tzmdZWrYKexDYCjufpHc/hooRAqxyo2PyEcf7A0=)
2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: XhBQGXYdWlv0HEJvrC6XNdPUCoU8zZ4A4qmyIBNGUAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:08:65:46:a9:53:1d:b5:42:6b:f6:c7:eb:8f:ec:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Validity
Not Before: Nov 22 18:00:33 2024 GMT
Not After : Nov 23 18:00:33 2024 GMT
Subject: CN=6aefaa2c92eb5ba0fce84e2ea70837a058281050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:15:1e:5b:ee:91:19:51:13:13:dc:de:e4:
04:3e:7a:9e:8a:3b:17:0c:48:54:76:6a:48:6f:19:
03:35:71:0e:18:6f:29:b1:d4:81:7b:c2:cc:60:6e:
8b:a5:e7:7b:73:28:9f:2f:f3:30:5f:96:ae:70:7c:
c8:02:5e:4d:5a:e3:32:2d:f2:49:c4:35:0e:5c:2a:
f5:b8:33:ee:0f:d9:4d:86:48:79:0e:a7:e2:6a:b0:
a9:b6:5d:2f:5f:7f:c0:c9:1c:81:27:ac:cf:e4:4e:
35:59:71:1a:17:20:74:08:0f:40:d8:88:aa:a5:0c:
66:0d:d7:e0:99:f4:b4:06:ca:49:26:4f:52:5d:95:
46:6c:52:3e:3d:bc:b9:58:4f:92:15:8d:78:17:e9:
83:9e:51:3e:03:44:80:0f:69:ce:4a:e3:d1:20:dd:
df:fb:9b:11:73:c4:92:ca:50:ba:51:bc:22:f5:8e:
19:32:1d:1c:dd:ed:ca:da:49:40:53:ce:86:b0:3c:
2d:25:82:55:2f:3e:74:ca:a8:1a:32:4b:d6:35:78:
e5:f9:ac:f0:d9:dc:c8:9a:d3:d3:5c:12:fa:28:74:
d5:b3:f3:f8:5e:94:f1:32:f9:52:4f:5a:a7:88:81:
ec:76:d5:dc:6e:58:23:97:bb:54:d1:c2:e1:17:51:
38:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EF:AA:2C:92:EB:5B:A0:FC:E8:4E:2E:A7:08:37:A0:58:28:10:50
X509v3 Authority Key Identifier:
keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:03:5a:77:70:32:5b:5c:af:4c:30:69:f0:f7:27:09:34:cb:
da:6d:ea:c5:d8:5b:e4:ab:59:7a:87:e4:76:fd:cd:92:f5:ff:
29:11:94:3c:e4:e9:01:b2:a5:aa:4c:0b:3b:c9:95:ba:82:68:
16:9a:83:c8:63:16:97:ca:f5:b6:7d:32:4d:46:e2:d0:a9:a0:
95:7c:97:d8:79:93:50:92:02:ca:e7:79:a9:ff:d5:a3:1c:01:
42:ab:0c:02:8f:c5:43:be:51:f6:c7:8b:4c:a9:fc:86:b3:76:
1c:94:b9:ab:9b:05:a5:1b:75:90:66:69:25:a5:f4:d5:80:bc:
3c:ba:69:47:69:ae:62:ab:1c:8c:4e:47:e6:26:d2:5d:b4:5b:
a8:69:13:a7:45:b5:15:d2:5b:3f:8d:71:c2:3f:d0:e8:09:d9:
e6:97:80:5f:95:8d:db:fc:42:2f:da:e1:6e:72:7d:90:b4:ab:
d2:39:bd:6d:cc:11:db:db:ad:aa:12:2e:dd:72:be:d3:14:85:
23:5e:54:dc:43:b8:53:db:c6:67:22:c2:3f:c7:6d:44:d2:41:
12:53:ed:1b:d9:96:3b:35:dd:87:44:22:13:65:32:7b:8e:78:
09:79:20:8f:40:cc:9c:4a:79:f1:b9:5d:17:99:0a:ff:8f:77:
ee:09:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:08:27 2024 by rpki-client on console-ams.rpki-client.org