Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: Qg4Ramg6r0A6HtnIvksm9h1Xc7SEgobL0zKQyzzjJN8=
Subject key identifier: 8F:9C:BA:E4:2F:42:D4:59:CA:84:A7:E3:DD:1A:0A:80:FD:9B:91:BE
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019351D059474F91FEE72A7E56209D65BE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 0243
Signing time: Fri 22 Nov 2024 03:00:28 +0000
Manifest this update: Fri 22 Nov 2024 03:00:28 +0000
Manifest next update: Sat 23 Nov 2024 03:00:28 +0000
Files and hashes: 1: KLU1VH4Jh-n9IFmJ8n7LS39oL-k.roa (hash: UQl4lmXYeUmYKdtW7BuYhLz+Aq8UnXtrwx+I6E6jrlk=)
2: cb8nhkZY_9yAxbVBw5sRMfI8KMY.roa (hash: Ozqhxr+VZTfcUSaFQbBOYxrG70wwDQ1u1G3x50R7hX8=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: I2N/ILgPP96w0y7OTOaaeS7QQdTlKpwHJQs0IVgK15g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:59:47:4f:91:fe:e7:2a:7e:56:20:9d:65:be:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: Nov 22 03:00:28 2024 GMT
Not After : Nov 23 03:00:28 2024 GMT
Subject: CN=8f9cbae42f42d459ca84a7e3dd1a0a80fd9b91be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:3e:9d:3b:c6:01:f4:2f:c6:e2:eb:f3:02:
06:b4:56:5e:bd:9c:62:0a:85:3c:25:8d:ea:65:79:
85:0f:e7:02:42:81:8c:a9:b6:8c:60:3d:0c:f4:36:
89:38:bd:59:9b:e6:86:b6:45:31:ef:03:7e:3d:9a:
ae:8a:4b:50:c0:9e:1a:c8:c9:fd:80:d6:fe:be:8b:
76:9b:96:a6:e4:29:e4:ef:e9:ac:b8:ca:9f:c3:d6:
f5:4f:0b:87:96:8c:0d:c8:2b:18:2b:de:01:81:2f:
8a:b7:ca:86:3d:78:2a:d8:6f:8f:7d:74:7e:1f:d9:
2a:43:2f:85:bd:b0:9b:18:ff:37:ed:12:4b:46:c5:
12:05:a6:8a:7c:6c:9c:77:a0:da:57:a0:a8:c0:1f:
17:29:0b:92:bc:61:19:ca:65:f1:68:86:21:a1:6f:
61:a2:a0:16:61:d8:43:44:0d:4a:0e:54:d5:57:62:
71:8b:cf:76:14:52:1a:82:ed:ac:e6:82:44:56:0d:
d3:75:74:dd:4d:ad:9a:fc:8f:43:fd:4a:2b:f1:e7:
b4:b5:6f:b8:70:14:3b:ee:ee:d7:66:51:aa:c7:f6:
65:9a:ad:1b:06:65:93:c0:03:42:13:ec:4d:c1:a2:
1f:4b:23:1f:07:fe:89:61:ae:49:5a:9c:27:c6:8c:
c4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9C:BA:E4:2F:42:D4:59:CA:84:A7:E3:DD:1A:0A:80:FD:9B:91:BE
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f1:c0:3d:87:38:de:57:c8:d3:ee:8e:39:67:01:67:ca:2c:
ce:dd:21:0e:60:b1:0e:cb:91:91:1d:df:b8:25:00:35:9c:95:
3b:80:60:e3:48:d1:f6:11:0a:72:b8:10:17:0e:bb:aa:9e:ba:
22:2e:3b:75:26:b1:42:7e:01:17:b1:79:e0:47:40:8f:4c:ca:
83:86:ee:c7:c4:da:d2:c7:5f:95:ed:da:1f:50:24:68:9c:8a:
66:e3:31:46:36:9b:93:01:d9:8d:54:29:9b:36:0c:89:7a:4c:
ff:43:1b:d7:14:e0:f2:71:9f:11:9b:44:f2:16:14:34:9f:53:
c2:6b:ad:17:67:b6:dd:68:d6:1d:ce:a1:21:30:05:c6:12:b4:
13:5d:d5:db:be:8f:7c:94:64:23:3d:b3:34:fe:6a:3b:f2:0c:
d8:23:4d:fe:f0:fe:df:7e:7d:26:5d:15:ac:7e:78:d3:78:cf:
f3:ba:be:73:98:3c:60:4a:24:f0:53:a2:ec:4e:cb:6d:4f:4b:
9b:38:74:17:f0:2f:8b:ac:0c:5f:4b:3d:6c:93:00:cb:c6:b9:
50:be:55:83:ca:83:03:f6:98:34:4b:7e:ac:d8:bb:52:14:be:
79:fc:69:3e:1c:6a:9b:bf:17:0c:2e:4d:d7:ca:bb:2d:fa:52:
d2:db:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:31 2024 by rpki-client on console-fra.rpki-client.org