Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: dU1xqbnSFZLIwwlLaP2CHoDG1S7Ycs5ImOf+Et3xG8k=
Subject key identifier: 45:B0:13:CF:4F:4C:5A:CE:9D:71:1C:C0:48:0F:94:3D:BA:EC:71:64
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 019356F73157F8EED82F62207C03CCE013EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 0FD0
Signing time: Sat 23 Nov 2024 03:01:00 +0000
Manifest this update: Sat 23 Nov 2024 03:01:00 +0000
Manifest next update: Sun 24 Nov 2024 03:01:00 +0000
Files and hashes: 1: 1TAkStDu-6UTcpJPXyS3gsBqI-M.roa (hash: nfBp5nDTqP5pIKwE6RqCENFkjDydCk2rs/BYrGvnLNA=)
2: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: +fDKHDfQVHNiAAAerH4/kJYC49S/nBJstKi2Ga/UI8E=)
3: QDbz92ELyqCHD7fQHSpvP83o2fo.roa (hash: 0fo6yFs7GvpBlN5pzSvnUGEhFyGFMQBl78TlFIvkkcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:31:57:f8:ee:d8:2f:62:20:7c:03:cc:e0:13:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Nov 23 03:01:00 2024 GMT
Not After : Nov 24 03:01:00 2024 GMT
Subject: CN=45b013cf4f4c5ace9d711cc0480f943dbaec7164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:a4:bf:54:d8:2c:4e:d8:2b:13:a1:c0:51:
68:95:1d:e4:e1:55:03:fe:12:4f:8f:76:eb:45:02:
7e:94:54:8e:89:ac:04:30:80:ce:0c:97:d6:8e:f1:
3f:9a:1c:e2:77:d1:4a:e5:e6:1f:cd:46:8c:4c:7d:
89:66:cb:2f:9a:12:6d:75:cb:db:1c:be:82:a3:3e:
ae:80:d0:42:ad:d4:58:d0:32:76:78:6e:5b:d6:78:
33:f0:05:b1:77:9e:d5:1a:64:3f:61:66:a7:d1:1d:
bb:25:79:dc:6d:35:ee:84:10:55:29:4b:4c:dc:58:
71:a6:1e:05:28:ab:f6:a1:23:b0:53:3e:30:5d:c2:
9a:dd:7c:0b:20:ca:68:45:8e:aa:06:15:77:56:3b:
76:df:a6:24:22:a3:ae:f3:92:3e:6c:5f:b0:84:d7:
46:bf:4f:a1:5a:60:f6:81:43:70:a7:97:cb:67:6a:
b2:e4:67:1c:3b:4a:2b:63:a4:f4:45:c5:bc:c2:16:
19:3b:05:c5:01:f7:69:d1:ff:7f:18:ab:e6:56:21:
26:73:77:5b:cb:12:c1:69:17:86:46:52:65:82:79:
8e:9c:b3:61:bc:40:03:eb:0f:19:7f:c5:6c:0c:99:
a6:12:1a:3c:09:e0:ba:0c:e9:37:6a:2b:eb:69:de:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:13:CF:4F:4C:5A:CE:9D:71:1C:C0:48:0F:94:3D:BA:EC:71:64
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a0:ab:e6:8a:ad:f7:a8:54:0a:ab:e7:ff:18:f1:59:12:36:
f5:da:64:de:18:a0:6c:58:59:d8:07:61:94:79:cd:e6:47:de:
e2:57:7a:e2:ea:31:da:fb:08:a7:06:61:23:f6:45:f4:fe:d9:
73:80:12:09:47:52:e8:0c:eb:fd:d6:f0:b1:59:55:55:d3:39:
82:b7:f7:19:24:61:d8:74:58:60:62:83:ed:fc:2a:f0:08:b2:
fe:ce:1d:58:ec:c5:c3:e3:9a:41:33:cb:50:02:ff:ee:4a:fe:
ba:74:4e:8a:39:2e:6d:c5:f3:f6:88:3e:12:c9:76:77:01:1f:
86:d3:02:2d:86:65:0d:b7:5e:67:41:23:08:e7:88:91:0f:4c:
92:a6:9f:10:37:8b:e3:5a:7f:0c:65:0a:89:d9:ec:48:bd:83:
13:1a:64:79:d1:c9:bd:0a:f1:d7:07:e0:86:bb:3c:a7:19:8c:
8a:a8:39:55:ce:8a:ca:6d:19:fe:9e:80:85:e5:d0:dd:de:d3:
fc:82:17:da:51:90:0d:a1:dc:b2:80:ce:1e:d9:2b:33:f2:e0:
51:27:5c:de:38:94:01:f9:1c:3b:af:b8:50:17:71:66:8a:07:
3a:e7:a5:11:0f:1d:b6:de:eb:c6:b0:7e:57:ac:04:d7:79:83:
a4:34:fd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:41 2024 by rpki-client on console-ams.rpki-client.org