Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
File: lYs3Q2qJ-sosT35g-axNR6GZrWY.mft (raw, json)
Hash identifier: uIYiVoCMcJBUVIjR8pE7OIXeemyzpQBQc9QTP5490yc=
Subject key identifier: F1:49:A4:BF:99:43:FD:58:94:3D:31:C8:FE:FF:35:B4:69:E7:60:33
Authority key identifier: 95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
Certificate issuer: /CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Certificate serial: 019356F6A5B38A021F909724F47AFB414325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
Manifest number: 136E
Signing time: Sat 23 Nov 2024 03:00:25 +0000
Manifest this update: Sat 23 Nov 2024 03:00:25 +0000
Manifest next update: Sun 24 Nov 2024 03:00:25 +0000
Files and hashes: 1: YhkOnqRvLrzX5UJmI8dD_0YE1X4.roa (hash: 7/RDzcmO1u3qEguY4vDQxIPU0+psovzgJ3GTZCHfGfE=)
2: lYs3Q2qJ-sosT35g-axNR6GZrWY.crl (hash: 2Pi5F1BZ0a8PrsN39LzxibaCRiwGGiJuQubiMT/sSzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:a5:b3:8a:02:1f:90:97:24:f4:7a:fb:41:43:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b37436a89faca2c4f7e60f9ac4d47a199ad66
Validity
Not Before: Nov 23 03:00:25 2024 GMT
Not After : Nov 24 03:00:25 2024 GMT
Subject: CN=f149a4bf9943fd58943d31c8feff35b469e76033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:7e:16:7d:19:c5:b4:10:32:96:ff:a1:02:
80:81:42:62:9f:39:0e:f6:71:6c:b1:81:1f:8b:21:
a1:b4:c7:0c:3e:90:19:16:34:43:08:8b:1d:4c:87:
dd:3a:6b:75:68:e5:34:0a:f0:4f:14:8f:af:a2:ec:
99:72:45:c5:61:09:5f:6b:35:b8:93:18:45:10:a2:
bf:57:48:e4:0d:b3:a0:d7:4f:a5:24:cb:a6:c9:b9:
19:d9:53:54:1a:1f:ac:07:02:38:bf:3b:e8:4a:cd:
59:a3:d7:ce:60:85:3b:8d:86:e6:b7:d3:0c:c1:ba:
e6:ae:49:c0:78:cd:83:14:8e:6b:ab:3c:9a:db:c7:
a0:6e:6d:44:73:d2:fc:4f:5e:d2:32:61:72:1a:aa:
46:f3:48:39:16:4b:a0:a4:27:4c:7a:fb:8d:5f:3d:
4d:cb:da:1b:88:5e:90:13:be:14:fc:ab:02:ff:b2:
8f:54:05:dc:cb:ce:38:c9:fe:67:cd:15:bb:d5:58:
9f:08:f1:d8:14:02:44:cf:81:d6:d2:a6:32:d3:0c:
ea:a3:c2:38:4a:a1:ee:b0:76:17:f0:72:b6:8b:27:
79:57:bf:52:38:f9:da:f3:bb:82:e4:d4:5c:d4:37:
c5:a4:92:2c:88:91:ac:7a:20:a6:83:38:96:a2:fa:
23:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:49:A4:BF:99:43:FD:58:94:3D:31:C8:FE:FF:35:B4:69:E7:60:33
X509v3 Authority Key Identifier:
keyid:95:8B:37:43:6A:89:FA:CA:2C:4F:7E:60:F9:AC:4D:47:A1:99:AD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs3Q2qJ-sosT35g-axNR6GZrWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e31f39-c9f4-42c2-a03e-12125312b2a3/1/lYs3Q2qJ-sosT35g-axNR6GZrWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a2:3e:72:b9:72:85:fb:08:84:a2:46:9e:b9:2c:16:9b:45:
c9:75:f3:37:b5:2a:67:6e:6a:cc:31:59:e9:91:09:74:91:b1:
3a:91:07:87:23:98:df:be:96:9d:a3:bb:33:16:15:bb:ec:e2:
42:65:b2:cc:5f:1b:ea:01:99:4b:11:cd:bb:35:83:97:87:06:
2a:81:1b:db:cf:15:97:d1:71:dc:34:9a:86:48:0c:05:21:2e:
66:90:09:53:60:29:14:3d:ea:10:23:fa:c9:2e:84:f9:ad:6e:
48:8a:6a:23:3c:5a:5a:4b:c5:fa:69:e0:eb:6a:e3:85:88:10:
a0:d4:ff:57:6b:91:3a:eb:f5:2e:e8:b6:46:a9:ea:1e:a4:7f:
c5:2b:54:5f:b5:b5:a6:e9:5d:35:12:e9:6b:1e:fa:12:a0:56:
8c:db:9f:42:bf:ee:d6:f2:af:82:5c:63:84:0c:1f:fa:ce:6b:
df:ec:bf:11:eb:e6:2c:29:fb:1c:0d:90:a2:cf:d4:2a:5d:78:
cb:3b:57:a7:1f:ce:4d:60:ee:f1:e8:93:f5:c4:13:d8:b7:e8:
f9:44:ba:50:58:54:cc:2a:ba:1d:bf:3a:f5:fe:f0:0c:81:7e:
6e:e6:49:17:db:5f:40:5d:49:e4:12:af:e5:77:ae:6c:3d:de:
a5:24:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:37 2024 by rpki-client on console-ams.rpki-client.org