Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
File: 76R3JGPNvhK3OxatDSUW8H1jgw0.mft (raw, json)
Hash identifier: yQndIgWxgtRRBW0zrnI828EsWFZoyfNLezpl1UFZ8OI=
Subject key identifier: DD:1A:59:B2:CB:BB:68:2C:59:C2:5D:5E:FA:6C:8A:C0:79:D6:9E:32
Authority key identifier: EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
Certificate issuer: /CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Certificate serial: 0193647B849E749214EB2930204DFE60BDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
Manifest number: 130C
Signing time: Mon 25 Nov 2024 18:00:36 +0000
Manifest this update: Mon 25 Nov 2024 18:00:36 +0000
Manifest next update: Tue 26 Nov 2024 18:00:36 +0000
Files and hashes: 1: 76R3JGPNvhK3OxatDSUW8H1jgw0.crl (hash: wfUxbnIJ7mTE+htuiBa8VvLxKPp/zCky1AeRVFHWw6A=)
2: FhQ69VG90KjPVyq5OYmdevUMLmU.roa (hash: DKdVxBbgXUFZU/obDvqJi889ocbcD7Q2TSWC/kx0zGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:7b:84:9e:74:92:14:eb:29:30:20:4d:fe:60:bd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa4772463cdbe12b73b16ad0d2516f07d63830d
Validity
Not Before: Nov 25 18:00:36 2024 GMT
Not After : Nov 26 18:00:36 2024 GMT
Subject: CN=dd1a59b2cbbb682c59c25d5efa6c8ac079d69e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:aa:82:32:13:b7:41:f9:8a:79:36:80:f8:
4e:16:0f:62:43:6b:a6:d2:83:90:20:bc:04:a9:b2:
52:ca:4d:8f:9f:d2:b1:3d:68:c4:d4:d4:85:40:c8:
7c:c1:98:7e:58:0f:31:83:c3:18:b1:32:c0:bd:13:
75:86:83:ec:b0:da:b5:44:ce:ef:0e:cb:e8:27:5c:
fa:81:18:3c:0f:e5:a6:50:6b:a1:d3:b4:0a:7e:a2:
fd:d6:91:54:12:97:ff:d3:13:69:4e:5a:ff:bf:f3:
9f:a8:bf:02:a0:b2:de:92:07:92:e6:ab:67:76:a7:
0a:15:f2:ff:b2:35:bb:36:bd:01:75:da:8f:ff:c3:
85:25:f2:a6:30:1c:a9:ad:b4:c0:b1:18:84:d7:16:
f9:7a:8b:d5:f4:17:70:3c:74:65:a6:7c:5b:47:c8:
82:0c:64:08:65:86:8d:80:06:4b:6b:aa:12:41:b6:
62:d6:f9:c4:f3:05:83:c5:65:85:e0:6f:9f:12:fa:
34:e3:f1:d0:8b:3e:2b:8c:a9:9a:37:ab:b2:fc:62:
0c:2c:a1:6e:10:1d:02:58:4d:2a:24:b5:f1:ea:f0:
ae:26:5a:c7:c9:30:3c:4b:02:28:75:50:6d:80:7d:
1a:a4:72:e5:16:47:3a:27:9e:cc:c4:97:28:64:94:
0c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1A:59:B2:CB:BB:68:2C:59:C2:5D:5E:FA:6C:8A:C0:79:D6:9E:32
X509v3 Authority Key Identifier:
keyid:EF:A4:77:24:63:CD:BE:12:B7:3B:16:AD:0D:25:16:F0:7D:63:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76R3JGPNvhK3OxatDSUW8H1jgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/76R3JGPNvhK3OxatDSUW8H1jgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5f:70:16:47:fa:ba:74:85:15:1f:92:8c:33:73:00:ee:b0:
86:e5:82:08:e2:2c:c5:39:39:23:c4:73:ad:e5:d7:70:68:57:
6b:36:6e:b4:15:68:e9:54:69:9f:dc:9c:85:41:58:8e:31:f6:
19:42:3e:58:f2:69:b6:c3:bb:3a:b4:76:77:34:6b:d2:f7:9f:
30:8a:96:c4:20:1e:4c:f5:08:7a:0f:38:26:80:c7:73:36:32:
7b:0c:f5:36:f4:13:47:0f:1b:1f:ee:4f:ee:41:91:71:14:5b:
21:40:e6:56:9b:d2:86:c5:79:14:08:1a:90:c5:c1:bf:88:70:
22:f0:8a:61:a0:f8:54:6a:44:1d:a5:90:53:b6:92:a1:f1:66:
9e:70:19:e8:c6:39:0e:dd:c0:10:4b:fc:12:c1:58:cb:86:33:
c7:4d:46:74:2f:90:5e:37:9e:e2:3a:bb:90:5e:1c:21:7a:05:
6d:38:9a:47:72:34:5b:6b:72:18:e9:f3:b7:ae:7a:ce:97:73:
ed:1b:f3:dd:b2:33:b3:ca:1b:40:8f:6f:d7:f6:28:63:7c:d3:
73:fe:c2:af:88:37:1d:24:43:30:57:0c:8e:23:37:86:c7:c9:
7f:cb:14:cb:39:42:59:55:50:e4:61:46:9a:f1:b4:d8:49:70:
a5:83:72:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:02:04 2024 by rpki-client on console-fra.rpki-client.org