Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
File: SkCVVRBQQFeMspYHAHT0UQclLus.mft (raw, json)
Hash identifier: JPmMmPNGXbkjJFDPbVDAMUexpT1J7spwYybiunUye+I=
Subject key identifier: F2:58:90:9E:6E:CC:27:A6:A8:5F:ED:3D:F6:4E:B7:CE:35:0A:95:E8
Authority key identifier: 4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
Certificate issuer: /CN=4a409555105040578cb296070074f45107252eeb
Certificate serial: 0193568A6144BB7F277358228EE48F9F63EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
Manifest number: 0C23
Signing time: Sat 23 Nov 2024 01:02:09 +0000
Manifest this update: Sat 23 Nov 2024 01:02:09 +0000
Manifest next update: Sun 24 Nov 2024 01:02:09 +0000
Files and hashes: 1: 5_w_xHo6Z8m68Z-lx21GLpiwHvM.roa (hash: 43OOLtB6qO/hoQfINJeCzlCQfGxhnpaGrP2302mIWGQ=)
2: 9cuSe6EQduTFmDUrAlabNAoNJyY.roa (hash: gX+mcDMtiTlq6Qo5aYpLscccvibmfhdOls1LnB45EsQ=)
3: SkCVVRBQQFeMspYHAHT0UQclLus.crl (hash: YHlTIoT35G7NG0mqgY7llPYmNUafJL9PELaO3R3FqlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:61:44:bb:7f:27:73:58:22:8e:e4:8f:9f:63:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a409555105040578cb296070074f45107252eeb
Validity
Not Before: Nov 23 01:02:09 2024 GMT
Not After : Nov 24 01:02:09 2024 GMT
Subject: CN=f258909e6ecc27a6a85fed3df64eb7ce350a95e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:b1:25:2a:f2:6f:1c:c1:87:4f:78:0a:c8:
0c:2d:6f:99:bf:a2:f1:43:34:a2:95:c8:68:11:37:
b4:43:9e:72:1d:d6:89:f5:aa:f8:aa:04:d2:cd:e6:
e2:ba:e6:a8:6c:9a:09:1f:bf:ba:fd:3b:48:d5:c5:
19:2c:6a:8a:bf:dd:46:89:ed:d3:85:8b:65:e7:b6:
48:8c:c5:ee:3f:26:8b:8c:00:2d:58:8c:16:b6:36:
37:d4:f2:67:92:e8:de:f5:eb:a1:4f:21:17:d9:5c:
8a:13:d0:7e:d2:db:34:67:52:c8:b0:48:e2:b4:9f:
7e:bc:51:2e:8f:c7:5f:6b:44:b0:f0:49:f9:84:25:
d5:fa:c7:a6:e4:55:39:96:bb:f8:67:7f:58:c2:c6:
b0:47:c1:a6:61:1c:7c:f1:cf:5d:1a:e9:b0:bd:68:
83:5e:ba:8f:cc:15:ef:44:5c:e4:d7:d9:3d:e4:72:
92:92:bd:cb:d9:d1:07:43:cc:3e:6d:cd:5f:96:ab:
09:4f:f7:82:a9:66:06:34:53:72:4d:22:92:11:9f:
83:d3:6e:a9:07:95:51:5a:0c:dc:96:8e:b1:25:71:
ee:e3:5e:f1:59:05:f3:a1:29:57:9f:bd:e0:1a:cb:
01:c2:d5:2a:49:5a:0c:c0:1f:af:2e:a7:d0:e0:27:
9b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:58:90:9E:6E:CC:27:A6:A8:5F:ED:3D:F6:4E:B7:CE:35:0A:95:E8
X509v3 Authority Key Identifier:
keyid:4A:40:95:55:10:50:40:57:8C:B2:96:07:00:74:F4:51:07:25:2E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkCVVRBQQFeMspYHAHT0UQclLus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5731da-6665-4161-80c1-5e79b4435e2c/1/SkCVVRBQQFeMspYHAHT0UQclLus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3a:c6:cc:2a:6f:69:13:50:5a:cc:36:b1:e0:e1:c0:7e:81:
8a:95:a2:3b:52:cf:dc:a7:8f:be:d1:c7:ef:52:6a:39:b8:b4:
00:94:17:94:9e:ba:45:0c:d8:dc:a7:a7:56:db:f4:cc:b6:8a:
03:4b:7f:f4:b3:64:e2:6b:7d:68:79:bd:db:d1:cb:09:5b:f7:
a3:1b:bd:cc:f0:6b:03:8a:ab:b6:21:0e:5a:21:16:26:95:d4:
45:47:ec:af:0d:0f:ac:3d:47:e3:13:af:fc:48:ee:3a:7d:41:
e9:f7:52:45:e2:c1:7d:b6:78:59:5b:bf:65:5d:df:a5:cb:f1:
33:3c:b4:10:4b:4c:77:c4:f6:03:d0:be:f9:c8:51:4c:2d:30:
21:f0:a7:c4:66:0a:20:29:ad:18:74:47:86:99:26:ed:29:26:
55:b3:09:c9:23:f6:b9:93:1f:3c:58:54:a3:b5:da:7f:22:e8:
35:3d:78:f6:ef:e6:ed:62:fb:dc:e7:f2:91:4b:74:e0:94:6b:
9c:a2:e2:f8:61:db:a9:6e:b9:38:0d:69:7b:96:ee:c6:63:c2:
db:f6:73:66:55:2e:07:39:05:6b:c6:63:4a:d4:1c:e3:40:c4:
09:57:54:7a:3f:ed:14:32:80:c8:ab:bb:00:a3:47:f3:b6:fa:
4e:29:d4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:42 2024 by rpki-client on console-fra.rpki-client.org