Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: urTvntsghQ/waLjWBvptkaFECfMIyY3v0oCYPiAIBZA=
Subject key identifier: 1E:40:7B:55:CB:1E:A7:61:BF:42:92:39:B7:BE:2D:85:4C:07:ED:17
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 0193523E22BE77AC28E2697808129D8E50DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 137E
Signing time: Fri 22 Nov 2024 05:00:23 +0000
Manifest this update: Fri 22 Nov 2024 05:00:23 +0000
Manifest next update: Sat 23 Nov 2024 05:00:23 +0000
Files and hashes: 1: CUqB0MGS4ZNBzza2hMgl6oLxAoY.roa (hash: mkMj4cmYh2pDLNFPJCHpzB0XOqj/Z1+5OrJujQoH7Fc=)
2: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: NN+wZajSsSWogUK8IN1EwR7FKLYZQFAen0C18C+vSrg=)
3: PzyWasGB3fgYPLnHKRED5BpExn4.roa (hash: podctX/ZUIGZQSvPPYrgnB6gyctDW96iMwwvCwHQNRE=)
4: W3pA55FIWiZFTZyJhLC8Nb_NKuc.roa (hash: tSAUKAv6YpFvWUrVzoaZEPWdHL2HO9ySno/GjlIxV84=)
5: iD2dgmVcfiJzy8fwxls0Bie2aQk.roa (hash: i7ro14c3XBmgZYCyOPkLrymzp+3Kq6qMGEI1OewfEE0=)
6: mY_PK31Sy60Cf9d-WVwhwtZCxLs.roa (hash: xUUKkxVQXTUDMtfJCLa3e3OsNHQPNx3XpOGA/mTxINE=)
7: oTP3JCCre0XnpwJhFt4oD62GHrA.roa (hash: e89AOwfOzQZkv9cUgz0uLP07chn8jZCAR5aQkNhvQNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:22:be:77:ac:28:e2:69:78:08:12:9d:8e:50:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Nov 22 05:00:23 2024 GMT
Not After : Nov 23 05:00:23 2024 GMT
Subject: CN=1e407b55cb1ea761bf429239b7be2d854c07ed17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:bb:6e:d3:4e:4d:47:c0:03:63:1e:3e:33:
f7:eb:67:29:54:9f:5b:ca:4f:70:ac:f2:96:ff:72:
74:85:c8:b4:c2:14:61:30:ca:e3:99:ef:f6:e1:46:
29:c5:d7:fd:0c:54:c6:0f:83:a6:12:49:8e:9b:fa:
19:00:d6:03:60:f6:c7:6a:3c:6b:a2:98:74:66:9a:
65:28:ae:68:72:7c:59:7c:a5:33:03:84:dc:2c:bc:
36:0b:52:47:c1:58:17:e7:61:7e:18:79:c1:55:c5:
24:19:a3:97:c3:a3:9f:8d:95:96:23:b2:05:d5:b8:
9c:5e:91:02:d0:bb:a7:51:ca:70:12:8e:18:79:4c:
0d:0e:42:69:ce:f1:f6:cb:57:97:1e:6f:38:e9:89:
fd:37:ea:70:c8:6c:27:50:f8:aa:3c:97:5d:d5:3e:
33:b0:e5:76:b1:7a:34:d4:61:32:43:50:6c:c1:86:
a3:dd:c3:b3:f9:72:44:cf:08:db:72:db:b6:a7:6b:
1d:13:9d:c2:c3:ce:ea:bc:0c:de:d3:cd:1c:2e:e8:
70:b4:ce:3a:cd:4c:3f:1d:86:26:b3:bf:f9:c2:9c:
78:f5:a7:7b:20:4e:8f:86:fc:79:36:33:ea:8f:6b:
f5:fd:ce:bd:88:e9:47:d1:f7:5b:51:a0:6f:db:4a:
0a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:40:7B:55:CB:1E:A7:61:BF:42:92:39:B7:BE:2D:85:4C:07:ED:17
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d5:27:9d:0a:1a:b6:14:56:f1:1b:46:17:f8:fe:85:e6:08:
68:69:b6:71:24:92:a0:02:ac:a1:3d:a5:c6:93:81:26:8c:20:
9e:81:36:0f:e3:1c:e0:34:2f:f0:d9:9c:e4:00:4b:f1:8e:5f:
97:af:6c:bd:ac:fb:2d:5e:a1:2b:d4:20:5c:31:76:2a:5a:6b:
8a:08:d0:81:14:61:96:c1:bd:32:91:b1:0e:4c:f6:1c:aa:23:
82:bf:f4:ea:60:78:90:83:9f:72:33:c1:e4:f9:d5:07:ed:d4:
a2:c8:40:7e:53:85:ce:f2:5e:4b:31:1e:e3:29:75:9a:31:ca:
b1:e9:d9:32:c0:bf:f7:67:4d:5d:aa:ee:6a:09:df:bd:e1:94:
39:64:93:13:05:27:b1:53:a5:7b:fb:6d:c3:4c:b9:a2:4e:85:
3c:73:74:40:68:53:e3:42:8d:ab:f6:db:30:21:30:5d:3e:6b:
78:be:1a:82:62:13:53:c3:7f:a8:24:b5:43:af:05:3f:42:de:
29:0f:1a:70:90:9b:11:21:4d:fb:81:b3:b2:36:c3:c8:c3:63:
39:3a:e0:c5:04:07:63:6b:79:d9:3b:93:86:2e:a9:29:8e:6b:
3a:47:65:5b:a0:ec:dd:13:14:77:3d:a1:42:dc:32:1b:23:6c:
e4:de:b4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:06 2024 by rpki-client on console-fra.rpki-client.org