Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
File: 4npTBThB5i83hzAr07PcF66DR6M.mft (raw, json)
Hash identifier: /E8esfIDSDMyrmwDI4WeRw1gZESMPd2Qopo0yc5ch9E=
Subject key identifier: 3E:FB:55:B2:75:0D:F2:E4:35:89:9E:48:35:C2:70:B1:B4:52:82:FB
Authority key identifier: E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
Certificate issuer: /CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Certificate serial: 019358778A5C8D848AC9303F812BF399F1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
Manifest number: 06D1
Signing time: Sat 23 Nov 2024 10:00:49 +0000
Manifest this update: Sat 23 Nov 2024 10:00:49 +0000
Manifest next update: Sun 24 Nov 2024 10:00:49 +0000
Files and hashes: 1: 4npTBThB5i83hzAr07PcF66DR6M.crl (hash: 34z0IDe97+zVytuF9+MVrJ5aWzmdY1DyLieSb0Ft3s4=)
2: micTPlmNj-YitEVk0mo3whydCKA.roa (hash: X1vt3MCAXoi3FR5hhk4aoaMi+A+Y9nfZknAZ7Ivw3EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:8a:5c:8d:84:8a:c9:30:3f:81:2b:f3:99:f1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27a53053841e62f3787302bd3b3dc17ae8347a3
Validity
Not Before: Nov 23 10:00:49 2024 GMT
Not After : Nov 24 10:00:49 2024 GMT
Subject: CN=3efb55b2750df2e435899e4835c270b1b45282fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fa:d6:89:a8:b3:7c:69:6d:bd:d3:31:e8:0b:
88:ec:71:af:b3:ae:e4:02:20:3a:57:12:b9:57:a2:
1f:b3:65:ea:b7:91:1e:ea:aa:30:ff:a3:d3:3d:59:
e2:95:51:02:fb:d7:89:4d:c7:59:11:cf:dc:2a:50:
8b:bd:6d:5f:ba:af:96:e1:12:30:73:14:6f:4e:9b:
06:3e:b2:bd:fe:59:75:fd:02:e0:ae:bc:0e:7a:3c:
52:2b:c4:e4:9b:35:71:ce:63:f2:a8:2a:90:da:60:
52:03:77:27:f4:04:ea:bc:d4:1f:f4:da:6c:b5:55:
b7:4a:a9:a8:0a:aa:82:75:3a:43:78:2b:ca:ab:08:
cd:d7:ff:0a:be:17:58:2e:82:6a:5f:c9:55:75:e8:
73:09:40:27:59:5f:1f:5b:f9:9b:c2:92:ec:6e:fb:
b2:1e:52:f8:d8:d0:d9:9f:4d:e6:35:0d:77:60:3e:
ec:2d:4e:f5:08:05:f9:a7:ef:6b:a3:18:15:1a:1a:
05:1f:ab:67:bf:b9:34:05:41:97:d1:e5:6e:6f:e5:
10:41:1c:11:4b:be:d2:2d:1b:38:ec:4e:2b:39:f9:
d6:78:6a:3d:1a:6d:52:ce:3d:fa:a6:f9:64:2c:95:
46:2d:bc:99:b5:a3:b5:b6:89:c8:cc:10:82:17:5d:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FB:55:B2:75:0D:F2:E4:35:89:9E:48:35:C2:70:B1:B4:52:82:FB
X509v3 Authority Key Identifier:
keyid:E2:7A:53:05:38:41:E6:2F:37:87:30:2B:D3:B3:DC:17:AE:83:47:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4npTBThB5i83hzAr07PcF66DR6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8762f5-fae3-45f6-a79b-caedbd7140e9/1/4npTBThB5i83hzAr07PcF66DR6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6c:9f:da:6f:fd:37:e3:be:5b:1f:4d:38:b2:09:83:1d:8d:
e5:df:10:b3:fb:01:e5:a8:a2:60:40:a6:9f:b8:a7:1c:57:63:
b8:e5:5c:8c:d2:9f:fa:dd:08:ca:d6:e0:8b:c4:5e:94:42:b9:
e9:04:14:68:a3:8f:cd:79:e6:35:99:84:85:a5:27:c7:5f:37:
a7:91:93:07:c4:c2:7a:9e:21:ff:0a:57:f1:6a:85:65:15:c3:
06:a8:1d:20:a2:87:b3:1b:b1:25:f3:8a:96:25:e0:97:68:5a:
69:a8:37:8d:61:f0:15:54:a0:d8:72:ef:e5:97:97:e5:f1:d3:
cf:e2:f1:99:0a:ee:c9:a5:b9:49:38:47:40:ff:36:5a:e7:02:
2e:0a:57:d8:96:6d:de:66:10:9a:07:8b:52:20:13:7c:1d:64:
c2:d0:43:8f:76:4f:bf:7e:39:00:93:da:a7:4d:fd:11:3f:e0:
18:4c:a7:92:e4:d2:5b:6d:7a:c5:e0:26:af:91:87:2f:ef:5b:
28:06:ce:ab:d2:1b:ff:0c:56:fa:23:2e:75:ba:00:4e:d8:8c:
59:c7:8f:b4:cc:b6:57:fe:af:f9:48:bd:fd:e0:c4:8e:d1:4c:
ff:dd:79:4f:08:f2:84:00:dc:82:3d:9f:04:62:db:7e:95:61:
15:fe:ce:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:33 2024 by rpki-client on console-fra.rpki-client.org