Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: aNPQ3LVbTQVG1k8WZfsHMTsfUHEP5yr92MSIu9O6X+4=
Subject key identifier: 35:72:E5:EF:A2:5B:B1:B3:F8:67:68:8D:07:61:8D:69:1B:D6:39:67
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 019366D80BCC951DEBC4CFE18A1EF3228D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 0183
Signing time: Tue 26 Nov 2024 05:00:55 +0000
Manifest this update: Tue 26 Nov 2024 05:00:55 +0000
Manifest next update: Wed 27 Nov 2024 05:00:55 +0000
Files and hashes: 1: 5k5MJQ3oDrpAWvHisiqHB1KxzkU.roa (hash: sr5zlhvZteADydXdemeMwr5hOYppa9O/htGupMnIoyI=)
2: QUfbWXrFQRLXTsfeBGtfQ5vf4vY.roa (hash: f6Ep5UMPIVSUlBwPQexjpuc7MSPN5ZTBvzRAPmNAPE4=)
3: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: UQbqaHn+KcbhMg4u/B21PRLr4euhlofHMRw3nzvbJZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:66:d8:0b:cc:95:1d:eb:c4:cf:e1:8a:1e:f3:22:8d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Nov 26 05:00:55 2024 GMT
Not After : Nov 27 05:00:55 2024 GMT
Subject: CN=3572e5efa25bb1b3f867688d07618d691bd63967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5e:19:50:af:90:b6:b9:e9:d9:cb:4d:6a:d3:
42:4b:75:5d:77:1d:77:99:34:f4:06:79:da:10:94:
a8:1e:e0:6e:6f:78:7e:2a:d9:b5:f3:26:e0:e8:0f:
86:93:81:63:f5:15:e6:89:5d:0e:84:a2:94:1f:05:
2d:0a:1c:d3:65:33:ff:cb:c9:77:cd:39:fc:3b:e8:
1e:f2:58:f6:b7:ca:17:b3:66:28:4e:1e:18:98:f2:
72:f8:9f:f1:59:fd:29:dc:b7:9f:bd:95:32:2b:f2:
02:cc:ac:32:42:28:42:ee:91:4d:fb:4f:73:13:8c:
b0:3b:70:8e:24:a3:b0:21:bf:84:b1:30:38:1a:3a:
4b:36:6d:88:92:0a:74:8a:46:4b:9e:8f:8c:56:e1:
38:b5:ad:10:a2:74:7c:09:5d:cd:01:26:f2:da:9b:
05:0d:34:3d:ea:f6:c2:e4:1d:39:ac:89:a2:89:7a:
1c:76:33:92:34:f0:d9:6f:26:ae:5f:e9:0f:1d:eb:
ea:63:3b:a2:25:3d:68:b3:58:4f:6e:6e:bc:1f:d0:
e4:17:ba:05:78:8a:03:e7:39:db:e4:6e:d2:fe:c6:
57:4e:05:43:9d:d8:1a:eb:c4:6b:9e:24:fe:b6:f7:
c3:63:da:b9:3a:94:7f:e8:92:47:0c:24:b4:c4:3f:
0d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:72:E5:EF:A2:5B:B1:B3:F8:67:68:8D:07:61:8D:69:1B:D6:39:67
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:47:8c:9d:4f:ce:8b:07:c8:05:31:b0:d4:14:d2:94:a3:5a:
d5:eb:91:35:fb:21:07:ad:1d:c0:16:04:a4:3b:42:12:82:26:
79:3c:6c:7d:3b:ff:a8:bf:4d:53:7e:a3:50:e1:53:e6:f1:ff:
e0:2d:9d:5b:08:e8:bc:59:95:fe:6f:0a:96:2d:50:e0:98:7e:
88:b2:cd:25:90:a5:2b:b2:1d:4b:73:e3:39:24:cd:fb:e8:51:
ac:66:0f:c2:fa:6b:6e:20:61:3d:21:05:1c:86:76:af:10:cf:
51:d8:6f:5a:25:48:c0:cc:ef:a5:69:39:76:69:2e:de:f2:fa:
e2:5a:81:ee:ac:48:7f:42:3f:21:d2:30:70:a6:ab:5c:37:6f:
87:55:22:95:70:2f:b8:e8:80:d8:fc:4f:0e:0f:34:14:70:ac:
6c:32:5f:c2:be:6e:32:dd:9d:2a:48:85:13:1d:4b:a0:37:39:
21:7f:f8:a4:52:a7:53:eb:5f:64:19:4f:05:58:78:2a:84:72:
92:89:b5:8d:d6:05:bd:ba:04:47:eb:90:37:50:59:99:db:66:
ed:ad:d8:8b:c5:a4:9c:0c:02:93:7b:1a:bf:31:63:68:5a:fb:
99:b5:0c:8a:b5:20:8b:62:bd:a9:af:74:ad:95:71:10:47:40:
17:2f:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:39:28 2024 by rpki-client on console-fra.rpki-client.org