Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: dcecu9VOnYQyPdXJs/55E5sc2fs0x12bxW8vbAMV97s=
Subject key identifier: 29:2C:23:FA:C3:BF:C4:C2:FF:91:EC:4E:27:4E:48:BF:AA:B4:43:C3
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 019356F6BDD7C2A26FF552E8BAB97A83A823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 019F
Signing time: Sat 23 Nov 2024 03:00:31 +0000
Manifest this update: Sat 23 Nov 2024 03:00:31 +0000
Manifest next update: Sun 24 Nov 2024 03:00:31 +0000
Files and hashes: 1: Vj0hnlVlqpllNasabMdw_r1DALg.roa (hash: 0Es0DKQLHL/5MROE579mQjjR9NUVTWu0DXcaeu4vQ9g=)
2: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: bIaAlsqp4Um5dNziiyh6v2S5m1tr/FzJ1L9W9jxD7t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:bd:d7:c2:a2:6f:f5:52:e8:ba:b9:7a:83:a8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Nov 23 03:00:31 2024 GMT
Not After : Nov 24 03:00:31 2024 GMT
Subject: CN=292c23fac3bfc4c2ff91ec4e274e48bfaab443c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:7a:9b:90:38:dc:14:dd:ad:54:5a:3a:bc:
d4:0f:7a:36:b7:86:45:a3:1a:35:c3:0a:33:79:b5:
65:34:5a:e5:e5:6e:f0:a9:45:31:f0:71:7a:cd:59:
69:ef:01:96:c7:5d:39:a3:b4:6d:d1:0f:b5:d7:3b:
69:70:85:94:ae:6b:09:94:e3:b6:1e:82:21:d8:aa:
2d:4e:db:b2:e4:ce:04:ef:bb:bc:43:97:03:b6:b2:
d3:77:63:47:f0:f4:88:64:d2:02:04:9e:cf:38:2f:
6f:1b:d9:26:a9:dc:a6:4a:c2:c2:b8:97:49:ef:d2:
54:62:2c:df:eb:b3:23:60:d8:f9:43:51:1a:95:98:
ed:57:0e:76:00:c2:cc:4e:4a:43:42:45:09:a4:51:
ae:ee:85:92:c9:f7:09:03:96:b8:e8:30:b5:7c:30:
b7:ce:44:bb:27:4d:70:56:df:74:0d:d7:e6:34:90:
73:e8:8c:22:f0:7c:a6:7c:d3:61:2e:fd:e4:ee:21:
b4:bd:42:65:5f:d2:6b:f0:1b:cb:69:ff:ed:e9:57:
92:cb:fc:ae:86:21:c4:13:0f:96:42:56:eb:88:22:
b1:cb:04:63:f5:34:d7:35:d5:4c:8e:1e:68:aa:08:
2e:c4:29:73:1d:35:7f:73:a8:9f:33:52:bd:7f:df:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2C:23:FA:C3:BF:C4:C2:FF:91:EC:4E:27:4E:48:BF:AA:B4:43:C3
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4e:f7:c2:04:de:e6:f1:97:84:7f:65:ae:74:e3:de:a2:40:
11:f4:07:fb:69:5a:62:78:f5:3a:84:9b:6c:71:36:49:69:d9:
fb:a8:5b:4d:37:25:ec:09:05:87:cb:c3:e7:c7:96:97:42:f4:
ae:56:6d:88:db:b7:92:7b:7a:a4:66:f6:05:cb:35:58:56:08:
8b:9d:4a:b3:3c:bd:3e:52:b3:52:5d:a4:ca:81:8b:0a:5b:b9:
d1:10:a1:12:b1:51:02:69:78:16:3b:7a:e2:cf:e7:a8:03:c8:
77:ff:ae:23:46:5f:6c:5b:40:14:60:38:c3:15:3a:91:8f:f2:
01:80:60:69:8b:1a:36:05:6e:6a:52:07:3e:30:ba:69:ef:48:
00:30:c0:5f:5d:bf:cc:d4:70:10:18:d3:a1:9e:05:dc:2c:74:
b8:3b:c8:4b:db:ce:a2:e0:b3:d5:2b:a0:fb:17:91:c9:b0:ec:
7e:24:98:39:36:8a:5f:53:51:11:a5:e7:d3:60:93:21:90:ec:
19:5c:22:a5:41:c9:db:46:bc:5a:1d:11:da:fe:12:63:c8:7c:
45:df:5e:e9:99:87:87:80:aa:ab:53:7f:fa:56:ec:25:c9:8f:
5d:55:49:6f:26:4d:2c:bd:a2:3f:5d:c3:a6:a5:60:0a:5d:ed:
4c:7f:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:36 2024 by rpki-client on console-fra.rpki-client.org