Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json)
Hash identifier: IoYNXMTyVfpJtTVg6LW1IKXK29FEhi4H+YSxob4YoB0=
Subject key identifier: 49:E5:F9:FD:70:10:B5:BA:01:46:EA:D5:63:11:B2:45:72:95:BB:93
Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Certificate serial: 019355AD2EEC8DD3D1B97CD36179FDA0FC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
Manifest number: 43
Signing time: Fri 22 Nov 2024 21:00:32 +0000
Manifest this update: Fri 22 Nov 2024 21:00:32 +0000
Manifest next update: Sat 23 Nov 2024 21:00:32 +0000
Files and hashes: 1: 9BrWMaEzArCGFZABN-AnokGRM0w.roa (hash: XdA7YFFUZ3GewQ5UyDVXDaGwyuoB7Vm8CsHlAb1HNdk=)
2: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: CkUATFpAoC7Vmkp6OHLbO8ojbIlZrSANAy1uGDHaTjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:2e:ec:8d:d3:d1:b9:7c:d3:61:79:fd:a0:fc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2
Validity
Not Before: Nov 22 21:00:32 2024 GMT
Not After : Nov 23 21:00:32 2024 GMT
Subject: CN=49e5f9fd7010b5ba0146ead56311b2457295bb93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:ea:a7:66:8b:dc:d8:11:2a:5d:43:e3:a4:
1f:44:2f:f9:c0:8a:b5:d9:41:6e:12:87:a0:68:68:
ea:fe:ba:1a:7d:2f:da:44:a6:8a:ce:a4:8b:e8:a6:
ac:ed:24:4b:15:79:d6:3c:6f:24:31:71:79:8d:e1:
2d:df:9c:1b:4d:66:f9:a6:4a:24:b5:d6:a7:0a:97:
06:09:7b:3f:1f:30:0e:28:30:b6:7f:07:3b:5c:60:
ac:5e:c5:86:94:c3:3e:a5:a8:22:20:26:b2:5e:ef:
76:88:0a:7f:ed:49:ee:e8:17:87:7c:e2:7a:80:43:
24:db:bc:ee:5f:3f:1c:34:9d:86:14:83:a3:e7:0a:
d1:c4:4c:ed:44:15:6e:dd:09:91:9f:6c:b4:1b:cd:
77:d9:ea:89:77:7c:0e:c6:f4:12:a8:50:7d:77:f1:
64:6c:eb:49:22:d8:c3:c3:85:bb:77:4b:74:40:73:
51:dc:f2:8c:70:d9:63:53:67:01:66:39:63:07:a8:
95:cd:7b:02:e2:5b:4c:ab:c4:ff:8d:57:cc:a2:6b:
c8:74:de:b0:4e:53:1b:c0:25:ae:ef:e9:2f:4e:00:
ac:8f:df:8f:59:f7:c6:e1:6b:05:eb:33:fb:e9:ea:
7d:f9:3b:c9:05:13:be:3b:39:31:25:b6:93:e7:35:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E5:F9:FD:70:10:B5:BA:01:46:EA:D5:63:11:B2:45:72:95:BB:93
X509v3 Authority Key Identifier:
keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:89:30:51:66:46:ca:73:0f:7f:ee:2e:ca:64:ba:d6:86:59:
9d:89:39:6a:fa:13:d0:25:0d:d5:dc:8e:3a:4a:39:22:ac:23:
fd:97:ef:80:44:c0:e5:5b:fc:31:ca:7f:c9:ea:e2:e4:0f:6c:
6c:fc:26:b9:6c:e6:c2:04:c0:eb:21:10:01:47:9d:6e:a9:b7:
dd:19:c7:8a:77:15:b4:1d:e9:8a:9a:36:4a:56:18:d6:0d:63:
9e:a7:28:bf:bc:ca:25:d2:69:d8:76:d8:67:c4:cb:ed:08:24:
05:53:c0:c1:02:3b:f0:b9:0d:d9:b9:ec:6d:41:f9:ef:2e:cc:
f7:d3:f4:75:07:65:f2:a6:ff:fe:49:9b:49:9d:08:e1:97:42:
8f:fb:1e:e6:68:f6:79:f8:aa:c4:5c:35:bd:eb:bf:8f:27:19:
48:df:e5:3c:03:99:59:00:11:4f:4d:3e:6b:10:ee:2b:b2:fa:
f7:da:b0:96:35:e4:b1:e6:d8:69:c4:db:f5:2a:16:a4:61:ea:
3d:a0:44:54:96:eb:35:bc:aa:2b:06:c1:c1:18:73:be:3c:53:
cd:06:df:1a:1a:f8:a1:a1:97:5d:bd:0e:d8:70:64:2c:5f:d4:
a8:b2:b8:c5:ac:b0:04:cd:ee:d8:35:fc:a8:8a:36:f5:d8:8c:
95:73:e7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:35:10 2024 by rpki-client on console-fra.rpki-client.org