Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
File: EJsFo11BCaHkqDTMrazdLG9WsFo.mft (raw, json)
Hash identifier: 9HUf0zjwRzYlzbMepzO0YNj9OfJofF0tJRzyvdE5Zug=
Subject key identifier: 8F:2B:CA:3A:F3:B7:97:3E:60:9C:7B:F3:18:63:34:3F:72:41:DB:71
Authority key identifier: 10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
Certificate issuer: /CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Certificate serial: 019369DA1EAA25E9C0034E7283C9724CD409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
Manifest number: 137C
Signing time: Tue 26 Nov 2024 19:02:02 +0000
Manifest this update: Tue 26 Nov 2024 19:02:02 +0000
Manifest next update: Wed 27 Nov 2024 19:02:02 +0000
Files and hashes: 1: EJsFo11BCaHkqDTMrazdLG9WsFo.crl (hash: Sa5eatTOXIh2ENmvCFiIcu8SAY7CgAinqng8EW96oNo=)
2: oCX2I8DK9iprDPDB2ySN-0pfhxs.roa (hash: YwqQXmWxHAEkUq2k0oeta+pssG6f92R7DD9Ifnrrovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:1e:aa:25:e9:c0:03:4e:72:83:c9:72:4c:d4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109b05a35d4109a1e4a834ccadacdd2c6f56b05a
Validity
Not Before: Nov 26 19:02:02 2024 GMT
Not After : Nov 27 19:02:02 2024 GMT
Subject: CN=8f2bca3af3b7973e609c7bf31863343f7241db71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d1:27:e8:6d:f3:43:3a:c8:a4:8b:14:bc:ed:
44:14:4b:70:fd:eb:be:0d:43:64:c4:b5:43:7f:3a:
65:c0:93:cb:32:64:e3:8a:2f:bf:1c:e8:e3:af:dd:
69:99:8c:c6:d3:95:3e:bd:d2:f5:90:04:da:ac:a7:
a3:32:9b:a7:36:b4:7f:48:93:b3:79:c4:76:d3:1d:
f0:84:d0:85:29:7e:05:88:bc:18:51:93:44:74:cc:
9d:53:c1:9b:27:e9:7e:fa:4f:54:75:c5:69:57:8e:
56:5e:b6:98:2b:81:e8:2d:fb:89:7a:36:89:97:f6:
fe:66:ae:26:3d:23:f5:d3:be:cd:ba:ad:6c:e4:80:
22:f0:eb:3d:74:36:48:fd:84:c2:fc:85:a6:b8:42:
63:35:ef:6d:a7:58:94:b5:7e:11:0c:db:b4:68:22:
e1:68:06:bf:d5:65:12:c9:d0:26:69:61:d3:00:64:
cc:d8:7d:67:b3:63:14:15:ca:72:a1:dd:1d:cb:2a:
35:57:cf:2e:09:31:98:ed:12:e5:20:60:bf:a5:7f:
10:db:0b:6a:c2:c3:ed:8b:26:18:90:6f:b0:97:fb:
70:37:f5:9a:d6:91:1a:88:45:17:4f:f9:dd:50:9c:
33:ad:5a:de:25:ae:0d:46:bf:25:41:08:c1:aa:f4:
53:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2B:CA:3A:F3:B7:97:3E:60:9C:7B:F3:18:63:34:3F:72:41:DB:71
X509v3 Authority Key Identifier:
keyid:10:9B:05:A3:5D:41:09:A1:E4:A8:34:CC:AD:AC:DD:2C:6F:56:B0:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJsFo11BCaHkqDTMrazdLG9WsFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/caac0e-5268-423a-afb0-449152f1d3b7/1/EJsFo11BCaHkqDTMrazdLG9WsFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:92:b9:06:27:d6:f0:27:0d:cc:d8:0e:99:44:e0:47:e5:e7:
e8:48:60:68:51:83:e7:9d:69:1b:4b:b6:a2:b5:b8:5f:b8:a7:
ad:7a:90:a7:b0:19:12:45:b4:0f:2f:a7:ec:7c:a0:fe:06:8c:
fe:d3:fd:9e:f5:75:47:53:21:09:43:03:6d:56:15:dd:47:5d:
22:f6:55:f3:37:f3:07:d2:44:56:be:2e:9c:0a:72:4b:10:ce:
1a:e1:ab:a0:af:6d:48:b7:b4:b7:4a:e8:a3:23:19:f1:75:c4:
47:71:27:a9:72:ff:08:a9:2b:62:54:e8:e0:2d:c0:70:d7:2f:
18:a1:5f:d9:1f:2b:0d:a6:0d:19:d3:a2:e0:60:c4:ab:00:62:
6b:98:bd:47:c3:c0:b6:72:8d:1c:a9:f7:59:e5:65:a9:2e:43:
bc:c4:77:43:c3:3e:08:d4:13:a3:7b:8b:84:8d:71:c7:47:4e:
aa:41:3d:93:ca:ad:a9:45:98:c9:97:d9:84:98:64:1e:57:f9:
77:f8:3f:9b:66:43:41:6e:30:f1:f7:bd:32:81:37:05:fa:4e:
47:a4:97:2d:6c:2d:26:5e:44:4d:3b:48:c8:cd:6a:4e:3e:c2:
38:ac:84:7e:ff:29:15:18:7b:54:ea:58:7f:90:00:b0:00:b6:
ec:fe:ce:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:23:34 2024 by rpki-client on console-ams.rpki-client.org