Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: 5qzrAj3VS2qjgmEbWaOv6haStjsQ/PRGmc0onjKPQMs=
Subject key identifier: D6:CA:9E:44:EE:9F:30:A9:4B:40:52:6C:AF:5F:A1:C7:6A:DC:C1:37
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 019357646AD1222E5934ABE88AD849A71500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 0A1E
Signing time: Sat 23 Nov 2024 05:00:18 +0000
Manifest this update: Sat 23 Nov 2024 05:00:18 +0000
Manifest next update: Sun 24 Nov 2024 05:00:18 +0000
Files and hashes: 1: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: qtZPbVzyOLjtocv3Oak5Y7NDLpJGN92OjYTJqfgQLp0=)
2: GgGUXgid9IV23BUdM80QD6QPK60.roa (hash: WfFWzn13/mIu03ttr5mntkNty8v4lAW6X/3zFagPLvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:6a:d1:22:2e:59:34:ab:e8:8a:d8:49:a7:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Nov 23 05:00:18 2024 GMT
Not After : Nov 24 05:00:18 2024 GMT
Subject: CN=d6ca9e44ee9f30a94b40526caf5fa1c76adcc137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:17:b6:2f:af:41:74:fd:11:f2:50:51:f0:
51:88:28:b2:c8:c8:56:ca:a1:f6:65:53:9b:84:a5:
0a:86:32:9f:67:bd:5d:22:b4:43:7c:59:6c:74:23:
79:62:76:1e:b0:87:c2:75:02:05:3d:01:f0:b9:4c:
83:84:27:eb:4d:0b:3a:98:a6:5e:82:25:a7:1b:0c:
87:60:36:fd:0e:8b:7e:d1:f6:7b:88:6e:e4:ae:40:
ad:29:e8:30:4f:eb:26:39:af:71:55:16:5a:7c:f4:
71:65:f2:0a:d6:ec:7c:6a:4b:58:4f:d2:a5:10:be:
86:ac:0b:62:64:3c:2f:41:42:0b:fe:5f:9d:e4:14:
ed:3a:4e:8c:ac:43:2a:dc:4c:65:66:f8:28:2a:49:
1c:2a:96:35:bc:1e:f6:6a:9d:8f:df:0d:3c:c8:dd:
72:11:02:57:de:ad:96:06:10:b4:12:37:6a:e6:7d:
af:d5:7f:40:df:4f:80:8d:81:d8:fa:4c:7d:86:33:
a2:40:00:d6:86:46:7d:2e:e2:bf:73:c3:6a:fe:a6:
97:e8:76:5b:31:db:f9:e7:30:05:1f:66:22:25:6e:
58:96:83:6d:17:70:d8:4d:71:9b:97:f2:10:3a:5b:
1f:31:9e:6b:6d:74:33:d1:4d:e6:97:5c:84:2a:df:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CA:9E:44:EE:9F:30:A9:4B:40:52:6C:AF:5F:A1:C7:6A:DC:C1:37
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:48:75:b7:6f:e0:f3:a1:93:70:49:63:5e:27:ef:a7:ee:78:
2b:da:1b:cd:1a:1a:9b:e7:1a:af:07:fa:16:30:d6:e1:83:66:
bc:5c:75:05:71:ef:79:d8:c9:28:04:dc:f6:b5:ae:b7:d6:0d:
1e:b9:e0:6d:5e:e5:3c:b6:70:6d:28:2b:f1:83:3a:df:22:e1:
31:a9:3a:eb:2e:63:98:2a:44:88:dc:bc:72:c8:f7:00:9d:92:
64:a3:27:93:5f:38:d2:05:3a:63:a2:96:fa:04:2a:f8:27:81:
ca:64:cf:a3:00:f1:07:5e:bd:89:dc:cc:88:1f:2d:66:5d:09:
de:89:a3:ac:d8:95:60:c5:a0:53:fe:88:d8:49:a2:be:85:ce:
40:c3:6c:89:8f:29:e5:42:8d:c9:43:ce:34:35:95:40:3b:7e:
3d:be:8c:83:88:6f:bd:c7:dd:24:ab:26:23:bb:f9:c3:4c:f2:
04:4e:ea:e2:92:6a:6a:8a:b5:75:eb:0f:c5:3b:db:ea:e6:90:
35:3d:cf:fe:65:06:cd:6c:83:5d:50:2e:73:58:57:e8:d7:d8:
99:85:d6:fc:3b:dd:2d:d7:90:53:9b:2a:d6:64:ce:b9:71:ed:
93:ed:a0:e9:da:29:55:89:9c:46:d4:e6:d7:bd:3c:ee:9f:87:
ab:7e:ab:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:06 2024 by rpki-client on console-fra.rpki-client.org