Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
File: iQxJg-4YvF4CX6r94xxkE0pGIKw.mft (raw, json)
Hash identifier: NPXGuR9fFMur0jERpgzdZUEukmQN1IcC+OgQ3sGWFlE=
Subject key identifier: 85:E1:09:9E:04:84:45:7B:F4:7A:69:F2:F9:0B:B3:70:11:EC:25:10
Authority key identifier: 89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
Certificate issuer: /CN=890c4983ee18bc5e025faafde31c64134a4620ac
Certificate serial: 01935764EBBE60934217B8BA451A9074D9AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 05:00:51 +0000
Manifest this update: Sat 23 Nov 2024 05:00:51 +0000
Manifest next update: Sun 24 Nov 2024 05:00:51 +0000
Files and hashes: 1: iQxJg-4YvF4CX6r94xxkE0pGIKw.crl (hash: jPxKIBlpFdP5N5rRJQ8JXvqx48b8LHQ06ACeyOxDJGo=)
2: le7sdmYLIG5owCxdBZbqmJlzX1I.roa (hash: ND4XbpyF4yFEBhXTEGlFYCK+2wFn5h4BP+h9U19wd88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:eb:be:60:93:42:17:b8:ba:45:1a:90:74:d9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=890c4983ee18bc5e025faafde31c64134a4620ac
Validity
Not Before: Nov 23 05:00:51 2024 GMT
Not After : Nov 24 05:00:51 2024 GMT
Subject: CN=85e1099e0484457bf47a69f2f90bb37011ec2510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:53:f3:48:27:66:f8:c0:5f:ff:48:6c:fb:
7e:fd:ad:53:ae:2a:0f:3d:ba:7b:f5:9e:2c:78:3d:
95:7d:06:88:95:e0:48:c6:1b:7d:d2:80:a7:ba:f2:
e2:9d:05:ef:ac:b1:00:40:a9:b7:25:4b:ca:9e:14:
4b:02:8e:6e:c6:28:15:d7:46:80:5b:9a:c1:dd:f8:
fd:d3:10:50:9b:bb:89:02:04:24:ab:fe:33:d2:3c:
d6:92:b2:d5:cd:f5:e9:73:32:b9:c8:46:5c:c4:2d:
9d:61:e5:56:5d:c5:b6:76:c0:14:b3:52:d6:b5:ef:
58:2b:55:3b:52:09:5a:c1:6e:6c:d2:12:32:41:15:
8b:5b:89:db:be:69:c5:7e:29:67:ce:2a:48:18:b7:
0b:32:f2:c3:41:f3:eb:ef:53:e8:81:ab:05:87:3a:
8d:ac:ee:26:f5:64:98:64:cf:7e:ba:7d:7e:67:6a:
f6:29:f3:62:b7:80:f8:ac:d1:f9:c9:67:3e:42:5a:
ea:73:4d:d4:f4:5e:0f:a0:73:1d:f2:ae:0f:41:27:
28:39:53:c4:37:67:f6:77:99:53:d8:6c:62:6a:ac:
62:5a:f1:2d:db:1c:7f:61:72:ce:19:27:03:e7:7b:
ea:22:25:6a:87:9b:52:05:cd:98:61:d6:89:93:5f:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E1:09:9E:04:84:45:7B:F4:7A:69:F2:F9:0B:B3:70:11:EC:25:10
X509v3 Authority Key Identifier:
keyid:89:0C:49:83:EE:18:BC:5E:02:5F:AA:FD:E3:1C:64:13:4A:46:20:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQxJg-4YvF4CX6r94xxkE0pGIKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/411c4b-156a-4cc0-a34e-ec19cd38f245/1/iQxJg-4YvF4CX6r94xxkE0pGIKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ac:23:b0:88:ac:1e:6c:f8:2c:38:33:5a:5d:04:c5:5b:44:
5d:09:54:93:75:2f:52:40:3e:32:4c:94:a8:b3:ea:08:f7:b0:
ed:50:f7:3a:6f:86:28:ae:e7:e2:ee:95:f6:db:50:06:bb:da:
64:20:8a:53:59:37:c9:fc:dc:aa:cf:37:9e:89:21:6d:74:61:
ad:28:6b:89:fb:24:32:01:db:61:32:d0:23:24:66:c5:e1:3a:
0c:57:9e:db:0c:5e:cb:e3:12:3f:cb:39:22:44:b0:f3:1b:9e:
58:fd:9b:b5:25:a5:4e:13:7c:48:8a:4d:15:a4:43:0c:10:ac:
dd:16:82:f8:3e:36:ab:98:a1:66:91:ef:b2:64:cc:39:f2:8e:
1f:b6:5f:a8:dd:ca:42:14:df:20:42:59:61:cf:ab:ea:f3:d1:
6b:14:e9:be:93:b6:a5:c7:61:af:c0:b9:95:52:17:48:09:09:
ef:72:f2:a1:82:e4:4d:ba:fe:3f:6f:3e:bb:dd:6c:ae:6c:5d:
8d:34:84:ad:43:24:19:31:f8:e1:b4:4f:2d:59:bb:74:90:a0:
e3:51:45:fc:64:a7:62:95:0c:5d:eb:f8:c2:d4:eb:c3:67:31:
3c:0b:f6:13:37:63:97:62:2a:a7:ff:5c:74:d7:35:56:cb:4e:
e4:ca:8d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:33 2024 by rpki-client on console-fra.rpki-client.org