Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: g/NvX6F0HZkZjdfApBBG3J0aFwznVUOn0B+QizDTtek=
Subject key identifier: 18:6E:D5:8C:61:91:14:C6:EA:B3:A4:67:F2:3D:E9:98:9C:D5:19:96
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 01936A7DEB9E0B49B66D4B21019D5B0B28AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 22:00:57 +0000
Manifest this update: Tue 26 Nov 2024 22:00:57 +0000
Manifest next update: Wed 27 Nov 2024 22:00:57 +0000
Files and hashes: 1: 8y8qnR73e2h5wKw2WxePeKzP140.roa (hash: dTBLHKE1+Ovn+slYv9Vmud4Zlas1QujOD24F5gLEd4k=)
2: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: fchC0eXDUeQxQNoJvSWubziSs9kArLXNxVzq7Jg4K0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:7d:eb:9e:0b:49:b6:6d:4b:21:01:9d:5b:0b:28:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Nov 26 22:00:57 2024 GMT
Not After : Nov 27 22:00:57 2024 GMT
Subject: CN=186ed58c619114c6eab3a467f23de9989cd51996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:9e:dd:89:66:ab:c5:e4:54:d2:17:46:63:
ca:72:b5:73:01:ad:b2:73:a9:f1:53:22:23:91:ce:
a8:b5:ce:af:9c:d0:ab:9d:26:62:70:77:99:e0:2e:
25:70:f4:24:bf:bc:c9:79:81:46:34:f4:e7:af:6b:
db:87:d1:c7:df:b6:33:9d:4a:6c:de:83:e6:f9:13:
c8:cd:5a:21:11:5b:15:0a:5f:a8:df:4d:43:71:15:
c4:5c:50:c8:64:51:3a:08:83:ae:4c:a6:c2:94:42:
7b:b7:8d:7f:0e:27:f0:b4:50:82:d8:8e:73:57:c7:
19:e8:6e:ca:26:97:9f:57:2c:52:97:4b:bc:17:2c:
86:47:c2:de:6e:83:be:2c:96:26:ec:9b:6d:07:3f:
d4:0b:f4:5b:b9:48:57:39:d0:1f:05:98:fb:32:1b:
02:68:36:2b:b9:95:b8:be:31:5d:fa:9b:3e:ce:79:
95:cb:64:46:66:be:11:59:bd:02:e3:92:ae:79:8f:
b6:09:60:a4:0e:da:ab:2f:f3:2a:40:fa:8e:12:7c:
fa:7e:92:cb:87:5f:48:b1:f9:a2:df:d8:54:da:16:
df:fe:22:74:90:87:12:94:85:d9:6b:d7:bc:a3:43:
c0:5c:ea:ce:0e:cf:40:64:55:b3:94:ad:f3:5b:45:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:D5:8C:61:91:14:C6:EA:B3:A4:67:F2:3D:E9:98:9C:D5:19:96
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:18:69:ae:d4:c3:b0:4d:2a:f7:ea:b5:f0:c6:79:ec:1b:8d:
6c:a7:c5:a9:48:ec:85:7e:c7:ca:ea:8b:05:cc:a6:8a:1e:05:
d2:ee:a6:b9:e0:ca:16:77:c3:66:cd:d9:1d:39:bc:ce:20:aa:
17:1d:36:d5:33:7a:17:c8:4b:95:5a:bc:51:57:ec:06:d2:87:
1f:e7:70:22:c5:d0:13:d2:8e:f5:d0:b6:7c:02:1f:ef:04:d7:
2c:70:28:d4:c7:cf:0f:9c:28:73:92:93:61:a4:8d:86:0d:f2:
62:08:cb:33:4d:a3:07:07:e8:20:39:09:a8:fd:4c:94:13:ca:
d7:09:0c:c0:f2:8d:4d:f1:8b:3f:bf:0c:23:f4:61:19:cb:8c:
84:1f:3a:16:b3:3a:ce:db:20:cf:24:f3:56:d5:70:b7:a4:b1:
25:ef:14:af:23:28:40:da:f6:23:97:b5:37:7a:1c:c1:9b:61:
ba:d9:55:fd:fe:ae:8f:7b:ce:17:00:44:c0:0e:c0:ca:d3:d8:
c4:a5:57:cb:a6:49:4f:f5:10:1f:a1:67:3f:99:b4:76:4f:3c:
d9:c8:48:67:7f:11:bf:af:fa:a8:6b:95:41:2d:da:f5:8d:5c:
10:a7:ba:c0:b8:21:ae:b7:8e:28:76:d6:2f:79:4e:93:4a:4f:
a4:89:c6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:32:14 2024 by rpki-client on console-ams.rpki-client.org