Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: nE911Esr4gINlxq1TEc5BU89OHvGaYtQP1Dzfv51fok=
Subject key identifier: 0C:68:5E:C3:DA:E4:1C:94:88:95:97:00:68:4D:52:06:58:79:E4:92
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019358793CB59B69F079CC0112C7786656B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 10:02:40 +0000
Manifest this update: Sat 23 Nov 2024 10:02:40 +0000
Manifest next update: Sun 24 Nov 2024 10:02:40 +0000
Files and hashes: 1: 7PIP1FWXYDN1Eo6TpaT8Kz61Oe8.roa (hash: N4ORB3w7i0PmLXtF0Zpga/yxQAOvg4Gw0jXb4k2m+0s=)
2: cMdj0P88JQ_n0sb97lOA61ny7JY.roa (hash: ozBMQKtipt9ETXeR2bLNBJ5Byygr7vHSkCp4wVTZw/Q=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: 3eq5pHbLkJC0y+/gNfBlotQl4g+sYsboz8+epQHXR9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:3c:b5:9b:69:f0:79:cc:01:12:c7:78:66:56:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Nov 23 10:02:40 2024 GMT
Not After : Nov 24 10:02:40 2024 GMT
Subject: CN=0c685ec3dae41c9488959700684d52065879e492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:73:6d:23:41:62:5b:d9:32:ea:d7:b5:77:94:
d4:b6:b5:0f:c4:a5:71:6e:8c:3a:5b:5c:a8:ad:4f:
53:ab:81:43:f0:eb:00:20:42:f3:86:01:43:28:fc:
71:15:ed:0f:52:a8:e6:3c:00:23:8b:32:29:dc:80:
5a:da:a5:a3:5f:6e:84:6c:bf:5b:eb:72:4f:7d:e4:
92:d1:40:90:b5:91:8d:65:e9:0f:5a:29:58:38:92:
55:97:02:9d:02:26:2c:80:9a:86:17:d9:52:11:ee:
dd:53:84:de:5e:48:0b:d0:2b:2f:3f:c1:47:09:87:
d4:36:25:98:97:07:0e:12:14:96:84:58:2d:fb:cb:
d5:d1:59:c1:a9:4c:2e:4b:7f:a5:c1:49:b2:03:5d:
31:67:3c:a1:29:f2:e4:15:27:ac:49:a5:0c:5a:85:
f7:11:16:dd:f2:a1:28:90:db:c8:54:aa:19:d4:be:
54:18:28:4e:db:50:cb:9c:4f:69:71:09:34:1c:2d:
3a:c5:5c:d9:10:a9:c4:a3:af:d2:55:ac:c5:4f:b4:
d2:23:02:35:40:d4:1e:9f:14:41:bf:15:c3:75:b5:
e0:da:2f:d1:60:bd:5a:c2:bf:70:5e:65:7b:54:36:
88:6a:d6:7f:d0:88:aa:b0:5c:07:e0:f2:ee:1c:73:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:68:5E:C3:DA:E4:1C:94:88:95:97:00:68:4D:52:06:58:79:E4:92
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:de:83:9a:bb:60:11:78:5f:bd:74:96:87:6b:74:ba:c2:74:
33:bb:92:61:f4:e2:31:90:fd:d5:10:86:ee:c2:b2:44:90:eb:
ff:e7:b0:1d:05:ed:42:51:0a:68:cf:c9:83:62:1f:bd:56:2f:
e7:db:42:88:de:4b:f6:9f:5c:39:be:58:a9:5b:89:07:62:02:
ff:38:9e:02:81:69:0f:1d:1b:7a:99:0b:5c:ba:46:c5:58:74:
0d:e6:40:b4:00:53:b0:56:73:1e:44:14:bb:13:d2:a8:80:b0:
a0:ea:fc:da:69:bf:61:ba:9e:07:7b:83:37:b8:ab:3e:75:86:
60:21:e3:83:35:3a:86:3a:8b:a0:1d:9f:29:85:0e:4e:1a:64:
25:d6:86:ca:9b:dd:15:fc:4e:73:66:37:66:ff:cb:e0:23:21:
83:ac:46:da:31:27:74:58:c8:6a:a3:0d:b9:38:77:5d:9a:b5:
ab:e8:99:df:81:f2:39:e2:62:31:ff:a0:1e:9e:d7:47:6f:8e:
5f:f0:24:61:a2:de:08:7f:3b:e7:2a:bd:69:52:52:ea:cd:10:
14:f4:ff:87:3c:98:c4:49:b6:9f:28:11:d6:7f:e0:cc:94:4e:
16:a9:bf:db:94:d3:73:b5:a8:85:f4:99:e2:9e:57:e8:0d:13:
06:92:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:51 2024 by rpki-client on console-fra.rpki-client.org