Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
File: A4uZY8lywdegPflvrSX2jr1PoUk.mft (raw, json)
Hash identifier: cf+WDzFb5X6Hu98PY+/aMcKOx+mkZDmnNzmBQVdtyTI=
Subject key identifier: FD:70:5A:A6:5C:FC:50:37:0A:0D:95:81:FC:10:1F:59:2A:27:19:EF
Authority key identifier: 03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
Certificate issuer: /CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Certificate serial: 019356F707C5DB43B9DED54CF04F30EA2152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 03:00:50 +0000
Manifest this update: Sat 23 Nov 2024 03:00:50 +0000
Manifest next update: Sun 24 Nov 2024 03:00:50 +0000
Files and hashes: 1: A4uZY8lywdegPflvrSX2jr1PoUk.crl (hash: 8NdyqzounumSlekheMuxPY8qFlrBTpdxRa/Yq+cQHfo=)
2: rCTDNvSTU6UckdmJTW7MAEO6oMA.roa (hash: Ah36vnfCLKlh9YU8NvNCd2La+XVt6f3crasYjGYP5GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:07:c5:db:43:b9:de:d5:4c:f0:4f:30:ea:21:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038b9963c972c1d7a03df96fad25f68ebd4fa149
Validity
Not Before: Nov 23 03:00:50 2024 GMT
Not After : Nov 24 03:00:50 2024 GMT
Subject: CN=fd705aa65cfc50370a0d9581fc101f592a2719ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:fa:7a:78:e7:bb:9a:e4:b3:7c:6f:21:06:
b3:bb:b7:d0:8f:7a:be:0d:4f:02:46:40:43:e0:84:
80:c0:00:f4:2c:88:05:c8:24:cb:06:55:9e:fc:53:
1f:67:27:48:0d:d0:fd:29:1c:1c:98:92:f2:28:08:
0a:2b:ee:37:be:0c:14:34:3b:f1:d6:e3:a6:0e:08:
9f:81:17:3e:2b:d3:a6:19:44:35:cb:d6:c0:ca:8d:
21:60:6f:39:93:6c:59:47:fc:d9:d2:08:62:0e:0a:
eb:aa:c7:65:62:4e:70:f4:ec:c0:06:4d:d4:d4:da:
9b:30:05:55:27:30:c7:41:15:63:50:78:a7:66:7c:
a0:86:01:d0:a8:22:5a:d6:80:33:12:b3:0d:9a:b4:
2a:31:8c:ac:b6:ee:91:c3:c6:95:4b:1b:c2:fc:e6:
f3:0d:ab:a1:3f:2e:c0:e4:7b:b1:67:e2:6a:c5:0b:
14:39:9a:bf:47:56:e1:90:36:2f:10:8e:ab:3d:7c:
c0:f9:93:66:e1:e5:3f:de:a9:50:5b:04:c6:ad:e9:
81:f2:b4:7b:21:f5:01:0c:f6:60:78:3f:74:6c:57:
97:20:6c:42:c2:8b:49:c0:6d:e9:f0:33:0e:bb:2f:
b9:01:a2:0c:15:aa:3b:eb:e4:af:a2:cc:4f:f7:f1:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:70:5A:A6:5C:FC:50:37:0A:0D:95:81:FC:10:1F:59:2A:27:19:EF
X509v3 Authority Key Identifier:
keyid:03:8B:99:63:C9:72:C1:D7:A0:3D:F9:6F:AD:25:F6:8E:BD:4F:A1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4uZY8lywdegPflvrSX2jr1PoUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/506801-b94d-4b5d-94ab-6163b997b642/1/A4uZY8lywdegPflvrSX2jr1PoUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3e:61:f5:0c:5d:9c:03:49:84:e9:e7:2a:90:80:6e:9e:a0:
7e:28:1b:c2:fc:d5:f3:94:36:fb:d1:d9:39:2c:cc:c8:31:66:
c4:05:23:35:a2:33:fa:b2:88:39:bb:c0:5b:ba:90:ad:5c:eb:
a2:a5:71:b4:f8:1b:c6:91:7b:d7:61:d4:94:43:1b:95:98:9e:
a6:9d:07:5a:d7:84:4a:7e:b8:ab:7f:28:1e:fb:81:9e:3d:be:
91:bf:40:5f:ea:bf:cf:a8:79:59:69:38:62:92:ba:e1:13:e0:
80:77:89:b6:42:9e:4d:14:86:d7:b1:70:24:29:d0:e0:b0:e3:
09:71:e4:1e:aa:0c:55:2f:eb:9e:15:9b:4e:a1:13:90:80:51:
08:05:81:d9:dd:53:cb:ce:1c:17:41:f2:47:38:90:e8:db:f0:
5f:c5:d2:0e:6b:fd:ba:a3:dc:e9:a4:f7:72:23:bd:86:17:63:
9e:b6:6e:82:8d:6c:a5:4f:ed:88:bc:80:8a:a4:ba:43:c8:39:
b0:68:bc:80:7c:41:0c:27:e5:00:4f:95:2a:0c:76:66:eb:19:
db:13:ad:dd:c4:b7:d4:8d:f5:d0:ce:0f:ee:14:a5:ac:00:c1:
da:e0:a9:59:1c:22:04:05:cb:44:a1:25:9f:54:67:ad:8c:46:
81:1b:38:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:22 2024 by rpki-client on console-fra.rpki-client.org