Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File: rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier: +fKEm5MpQkZG1yx3c3WUbqcnCDBID5Pb2fOk+ZoDDSc=
Subject key identifier: C7:3C:CB:78:7F:44:D7:83:CC:AA:94:51:DD:C8:0E:C4:56:4B:13:D7
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial: 019365FC0B14996B9CE219FA23ADCB1B1C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number: 1377
Signing time: Tue 26 Nov 2024 01:00:36 +0000
Manifest this update: Tue 26 Nov 2024 01:00:36 +0000
Manifest next update: Wed 27 Nov 2024 01:00:36 +0000
Files and hashes: 1: 0hULTSnwFV8fFn3HXNrHVRSjans.roa (hash: s8QRjCouLCPo42I2+PMSOPVG2tklusu8cJ9rJGYO5Mg=)
2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: jwEQ0ot6Tya9Tkw2v1XZM3Yn+AcAAIlKbA3B/yCrB0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:fc:0b:14:99:6b:9c:e2:19:fa:23:ad:cb:1b:1c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Validity
Not Before: Nov 26 01:00:36 2024 GMT
Not After : Nov 27 01:00:36 2024 GMT
Subject: CN=c73ccb787f44d783ccaa9451ddc80ec4564b13d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:f6:b5:e4:d1:4d:ff:6b:f0:26:df:b8:b5:
09:f4:a7:36:f6:ab:7a:fa:87:e4:26:8d:81:96:05:
e2:4e:59:b7:66:46:a9:8c:7c:32:5f:dc:18:a5:79:
f2:b4:71:f5:aa:d8:16:1a:72:85:63:76:4d:95:88:
da:03:9f:4d:a2:c8:fd:42:ea:71:62:af:aa:79:5f:
09:67:60:af:e3:40:f7:7a:78:a4:46:36:93:75:61:
f2:c1:60:45:d2:59:81:d7:ff:6e:ce:39:cc:ff:ba:
fe:1a:67:b5:2e:c4:74:a7:f1:68:cf:bb:84:d9:f0:
4e:f2:1e:a2:29:d8:31:3e:ea:d7:7e:e2:53:0a:8d:
18:03:0f:03:b6:10:df:33:7b:7b:a8:85:5c:25:1f:
84:8a:f5:ef:7f:2b:a8:60:4e:76:35:0f:c1:b2:34:
6f:fc:a0:8f:3e:bc:26:18:44:19:40:a0:0f:c4:13:
ec:a3:54:ab:d3:7b:73:f7:d8:ed:ae:ca:0e:f9:3f:
f2:94:0c:4d:ec:55:ee:06:11:f0:af:c4:bc:e2:79:
10:c6:0f:6a:ad:f0:69:19:c4:09:ee:80:94:36:a5:
9d:ec:c1:41:2d:48:61:2f:bf:66:1a:52:0e:bc:0d:
11:b9:35:b9:a4:fc:59:19:ef:1e:28:e7:8d:75:61:
ab:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3C:CB:78:7F:44:D7:83:CC:AA:94:51:DD:C8:0E:C4:56:4B:13:D7
X509v3 Authority Key Identifier:
keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:da:a2:25:d5:1b:d8:d7:50:c0:ab:18:7b:63:d8:37:f1:96:
2d:94:1e:1c:79:0e:ef:ac:22:fc:33:04:3b:d0:cf:56:5e:3a:
9e:2c:2a:52:2a:83:ba:94:2f:e2:3f:2c:b8:49:c5:b5:6d:7b:
ee:e3:30:d3:3f:a4:5b:dd:2f:c7:c2:0a:5c:44:9c:3a:4c:b2:
cc:87:79:6c:df:48:71:ba:d1:85:3e:fa:68:1b:e9:99:4b:1a:
8d:17:e0:8f:6f:29:34:d9:cf:04:5f:48:24:2b:75:ef:01:91:
39:79:d1:99:81:80:3b:ba:ec:46:bc:7d:55:6c:5b:c7:c4:0c:
54:24:6f:8a:a8:ce:49:a0:6a:2e:52:56:cb:8f:3d:19:18:2f:
80:63:b4:18:50:de:96:2a:85:f5:f8:16:30:d2:5f:9b:e1:49:
1f:7a:b6:85:56:1d:3f:2b:4f:45:5a:fa:73:9e:b3:34:4e:d4:
2c:2b:cb:bd:ee:f0:4e:9d:29:3f:18:1f:fb:45:f0:8b:37:ee:
58:aa:43:46:34:b8:a9:c3:40:c2:80:ea:39:02:0c:8c:6e:36:
fc:db:1b:c0:5e:13:72:68:66:7a:dc:37:42:d6:a4:3d:8c:c8:
bb:e8:9d:69:7c:f7:d4:57:d3:05:3b:f4:8a:57:03:5a:05:9e:
6d:71:96:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:24:06 2024 by rpki-client on console-ams.rpki-client.org