Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json)
Hash identifier: mDxL9e76Yyby5FfS5mfYn0P/JG/2lB+iXGDuq9FOJA8=
Subject key identifier: 68:47:04:B5:EB:29:22:50:25:E7:E9:4D:EF:83:B4:ED:68:75:DA:46
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 0193568A5C55DAB692B6669236E44E7BB1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
Manifest number: 0325
Signing time: Sat 23 Nov 2024 01:02:08 +0000
Manifest this update: Sat 23 Nov 2024 01:02:08 +0000
Manifest next update: Sun 24 Nov 2024 01:02:08 +0000
Files and hashes: 1: OmE3GOI9hj9pxGtiqvBr0BPiTsM.roa (hash: q6ywsEsbxUqA6CibLBVz87aJSZWE9f2llE9frOa7oXQ=)
2: sX3t04XQh4WQ4mGT9ge8qnq9HMI.roa (hash: GBrHl+oXjdm/bJDrCgfvUExXMODnZCwi+Rc4IGo2XGs=)
3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: CIzIqtXFPQhxYVvExK+dn/0ULwYWCHGy8V0ql1aVU5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:5c:55:da:b6:92:b6:66:92:36:e4:4e:7b:b1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: Nov 23 01:02:08 2024 GMT
Not After : Nov 24 01:02:08 2024 GMT
Subject: CN=684704b5eb29225025e7e94def83b4ed6875da46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a2:40:db:67:89:0e:9b:94:38:f8:64:fe:00:
d1:4f:06:f0:1f:56:52:e6:92:f4:8f:4e:73:80:27:
f1:10:3e:6d:c0:81:64:04:10:14:e6:06:f6:07:db:
a5:cf:0a:4f:10:e8:b1:1a:99:cb:88:4b:15:03:9a:
a1:b2:af:c7:35:97:c8:9b:5d:28:22:33:4a:f1:f3:
8c:5e:67:d8:8f:18:2c:74:37:95:db:32:a5:6e:e9:
58:eb:42:e5:2a:ca:35:06:43:f0:c1:f8:57:21:4a:
21:70:59:9e:5d:4a:94:dc:0b:fa:8d:91:7b:9d:c2:
70:65:e9:34:7b:68:54:57:d0:60:bc:16:e5:c6:bd:
66:4d:6d:f6:1c:57:4f:b2:6d:a9:78:c9:d4:e2:a9:
bb:fb:6e:08:0e:2e:7e:a0:08:9b:2f:72:b1:af:17:
55:96:77:82:6e:7b:ee:20:8b:b7:ba:96:42:61:3b:
34:ac:fa:e4:b9:be:a1:5d:c4:12:af:09:bd:90:66:
80:b2:30:46:74:f3:04:e7:a9:e5:79:9c:b7:dc:55:
99:ad:0f:9c:0f:23:8e:9c:b1:d0:64:ef:2f:88:49:
45:f2:18:de:23:6c:6b:98:37:f9:07:97:6e:e9:70:
98:ba:e1:88:09:fb:31:5e:53:06:91:0f:a4:c8:dd:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:47:04:B5:EB:29:22:50:25:E7:E9:4D:EF:83:B4:ED:68:75:DA:46
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:99:2a:59:02:18:63:90:90:75:f0:f4:e9:b1:4c:f5:24:7e:
15:9f:06:f4:b1:02:d9:3a:a9:96:63:7e:68:38:b0:e8:f6:0f:
19:3c:d8:e1:a4:a6:4c:e2:9e:37:cb:cf:20:05:c6:9a:31:11:
b5:4f:5f:9b:3d:70:7d:da:b0:51:bf:7a:71:69:63:d9:cc:6b:
69:1b:6b:8c:bd:a7:76:a0:39:8a:9f:c0:0d:21:fb:e1:2b:d0:
1e:4f:8d:de:a0:92:60:9a:81:78:f6:fe:fa:7b:af:74:36:bf:
dd:54:e3:49:fb:d8:b3:8f:bb:7d:0d:71:35:a7:4f:9a:92:36:
ec:a3:c6:cd:75:51:c6:d3:03:d0:6a:b3:c2:fa:12:2d:ac:86:
d9:98:49:1a:55:15:e0:90:39:e9:4c:bc:4d:95:72:67:60:29:
c8:25:de:e0:e1:c5:d7:0a:02:93:51:4a:79:f8:3a:a2:fa:a3:
e1:c6:4d:6e:b3:15:77:83:bf:a3:0b:e2:b2:ec:04:47:2f:1a:
33:d8:ec:d0:6d:8d:c5:0a:71:f8:49:a8:97:f5:52:2b:21:da:
3d:d1:04:d9:02:58:fe:ae:0c:7f:4e:05:e1:56:63:3c:34:16:
9f:54:c4:45:55:45:11:9a:c4:08:41:54:b6:0e:ee:34:59:9a:
ae:32:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:09 2024 by rpki-client on console-fra.rpki-client.org