Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: AnFKYxNwzRrpeHxtUCcr3hvxKYY8u8VYkE2BbWMqzvE=
Subject key identifier: 74:03:F3:FF:45:28:35:5B:2C:17:99:9C:09:36:AA:A5:61:1D:FB:E6
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 01935207C0350758F0591B3D8A342BD46762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0A50
Signing time: Fri 22 Nov 2024 04:00:59 +0000
Manifest this update: Fri 22 Nov 2024 04:00:59 +0000
Manifest next update: Sat 23 Nov 2024 04:00:59 +0000
Files and hashes: 1: 3cQZPfHrEF0ghIG24gBDtcjaezw.roa (hash: yBLIW3nF7xejMtDR40pyJu77Hq4IB55mP7q4vrswIQ8=)
2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: AMZm/3+zDS5hda2trjA3dCJwu/vamKFPC3C40uVPPs8=)
3: rYdRq5RTzZifkGgAtto1CocgyRE.roa (hash: KnfDnVyY4opx9ZRFCOe1u8iEEM+apklBuv2YWbj4GZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:c0:35:07:58:f0:59:1b:3d:8a:34:2b:d4:67:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Nov 22 04:00:59 2024 GMT
Not After : Nov 23 04:00:59 2024 GMT
Subject: CN=7403f3ff4528355b2c17999c0936aaa5611dfbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:b4:80:da:54:43:bc:ab:c6:32:66:4f:a1:
39:87:df:d1:4e:9d:c5:a6:d7:4f:d1:98:f2:23:ba:
80:e3:49:9a:b6:4b:97:77:e9:f4:c5:ba:31:48:25:
0d:a2:38:a5:83:68:80:ed:a1:2e:de:d1:b7:38:92:
e4:32:bd:a3:21:25:7b:15:e3:1b:c5:51:3b:77:d1:
c7:2e:a7:d7:c3:2a:61:3e:49:59:ab:ee:62:cf:5a:
03:20:e9:4d:02:4f:26:30:b2:52:8e:93:4e:86:f5:
5c:3e:e6:dd:b3:b1:f9:a9:ac:ec:f2:04:0a:c0:f4:
9c:42:b7:1e:89:44:14:97:a7:85:5d:b4:45:a0:36:
4b:b0:a1:43:74:8d:58:cf:0f:25:c7:61:72:3c:a8:
9f:f0:b4:8e:3c:05:45:63:e0:66:80:33:ee:23:91:
66:37:9a:3c:3b:1e:ad:f8:16:f9:32:a5:fb:d8:86:
be:b8:c0:84:5c:75:c1:5f:fc:b0:d2:f9:18:c5:db:
1f:3b:d7:17:ab:70:16:97:dc:92:a9:2f:48:34:1b:
18:43:fb:85:6f:7e:8f:ab:6a:07:12:68:8b:bc:c8:
73:c5:96:41:11:9f:8e:c6:44:4a:01:06:1d:d1:73:
2e:90:89:8a:80:e8:71:5d:4c:bf:bb:29:98:b9:28:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:03:F3:FF:45:28:35:5B:2C:17:99:9C:09:36:AA:A5:61:1D:FB:E6
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:61:ce:1e:ad:17:de:99:b4:cf:46:38:8f:ff:e9:e9:89:67:
94:02:0d:2b:8b:7c:a8:ee:de:3d:38:71:cf:99:77:ab:9a:90:
c0:a4:d1:00:da:04:1b:85:59:d6:e7:9c:2e:09:24:5e:d7:c1:
db:3c:47:ce:97:77:cc:1e:d2:94:2f:2b:b1:83:f0:e6:9c:9d:
80:a8:cb:8a:01:ae:6f:c3:20:ae:09:de:38:ac:71:85:f4:16:
93:fe:28:36:13:fe:a0:f8:09:83:58:26:b3:f9:40:69:cd:20:
cd:bb:c3:28:36:d8:b1:7d:79:9e:e3:e7:e7:10:bf:5f:7c:37:
e9:3e:3b:e0:7e:16:f8:71:7a:b0:e8:a8:f3:79:d1:51:da:ea:
67:bf:49:db:ae:d7:55:5e:e9:bf:05:76:6e:95:2a:b6:b9:62:
2d:f7:72:d4:ca:ed:c6:7b:e3:70:46:35:53:37:49:7a:63:8a:
25:50:42:45:5e:c7:6d:e4:c6:9f:b4:84:bd:be:6c:7a:d7:e5:
64:0b:e9:c9:27:bc:46:b6:d0:87:8f:7c:82:2e:b5:0e:47:b8:
bd:f0:7b:3f:84:f1:8f:84:a0:b1:38:57:c8:a1:37:bf:44:9e:
59:b7:66:ba:78:29:96:a2:af:5e:0a:f8:47:cb:11:2e:ef:ed:
86:9a:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:52 2024 by rpki-client on console-ams.rpki-client.org