Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: 4AYakrVNhZhLAAgZ6limI0JKRkDV4b6VqZyh22gAbiA=
Subject key identifier: 1F:2E:66:27:44:4F:16:C7:E0:18:87:7C:4B:0E:15:97:C5:D8:99:33
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 019369DAE03E8890100730BE6EF31F16B979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0A71
Signing time: Tue 26 Nov 2024 19:02:52 +0000
Manifest this update: Tue 26 Nov 2024 19:02:52 +0000
Manifest next update: Wed 27 Nov 2024 19:02:52 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: h+3VrXa/WyJ1z//kVB1tPUgsHiAFf+4wiLo1KKLrKlI=)
2: bJANR4ytovfJLhvG4EiaYAYNPjs.roa (hash: OFg8kG+fQKMYh4rX2fqOW4e/rNmJdVC/iTSXNA40AH8=)
3: dgo-TxTjRLaR6GUujA1pI5Y6j4s.roa (hash: BAP+ozcRBETR+bjceVisJN7OKxr37zVeHbxNSzHwRQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:e0:3e:88:90:10:07:30:be:6e:f3:1f:16:b9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Nov 26 19:02:52 2024 GMT
Not After : Nov 27 19:02:52 2024 GMT
Subject: CN=1f2e6627444f16c7e018877c4b0e1597c5d89933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:8a:69:03:50:26:25:78:53:9b:91:51:d2:
d2:ed:3f:c6:a4:10:c4:61:e2:02:58:51:a8:33:4a:
65:38:99:84:55:c7:e5:0c:ac:04:e5:a9:54:50:9a:
5d:fe:80:90:0f:a9:2f:7e:77:47:0e:98:ea:29:db:
0e:7b:88:99:39:cb:1d:f8:d8:05:97:5c:fb:5c:79:
03:6d:87:52:ce:2f:d0:b0:2b:1c:b8:5d:16:53:bb:
79:79:43:2e:d7:ac:ec:ee:6d:46:63:8e:fe:0a:d0:
dd:a7:4c:7b:4c:17:4f:30:e8:31:6d:8e:31:15:47:
90:b1:4c:44:da:03:a9:57:8d:14:9f:76:d5:50:58:
3e:18:0e:15:01:20:7a:91:ee:60:1a:d6:8b:06:98:
07:17:48:fb:95:d1:49:c2:fa:58:de:5a:b5:7d:44:
23:e5:4e:c7:5c:09:49:7c:9a:8e:29:b5:ac:d6:d6:
ed:b8:9a:54:2f:5f:34:42:48:50:c1:a8:76:0e:21:
af:14:ff:da:0e:92:de:6e:8c:f0:a8:f2:30:11:ab:
2c:fe:56:1b:59:14:cf:a5:bf:ec:bf:e2:32:95:a5:
e2:f4:61:d2:fd:aa:ee:8e:97:2c:1f:f1:a0:5c:0b:
21:62:6a:ad:ac:bd:45:d6:23:64:f3:1c:3b:f5:e5:
1e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2E:66:27:44:4F:16:C7:E0:18:87:7C:4B:0E:15:97:C5:D8:99:33
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ca:85:d1:38:75:ec:39:3d:c5:2e:db:c2:eb:66:e5:da:b8:
04:89:b9:c7:df:a6:0c:3e:bf:43:9d:a1:00:1c:96:f8:d2:37:
23:e3:8b:38:ba:ba:8e:39:d9:0b:a6:27:aa:65:28:e2:23:70:
6a:62:24:86:ba:57:80:e3:3f:55:89:4a:d0:b2:26:d6:86:cc:
4a:f6:d4:f5:b9:b8:b3:be:09:05:a7:5d:8c:10:5f:88:b4:3c:
a6:4b:dc:a1:7c:24:c0:ae:85:ae:48:83:83:0b:ba:e9:18:3c:
45:30:64:69:89:d8:12:56:dc:e1:cd:2b:b6:ba:f4:c1:48:34:
27:1d:a5:56:b6:5f:6d:e0:4b:21:d1:ef:f3:58:14:42:6f:62:
1f:f7:78:cb:4f:f3:85:6e:f8:e7:83:5d:63:3b:36:b7:30:ce:
7f:8b:29:64:48:2e:7f:0f:7d:98:ea:f3:f7:75:fe:94:c7:28:
9d:58:2b:3b:76:9a:56:36:aa:99:54:09:20:dc:aa:c4:1b:93:
64:36:f6:ee:23:07:d9:13:b8:77:1b:97:c5:13:fb:ce:00:18:
ab:71:b1:82:f5:79:47:05:dc:24:fd:ee:59:d2:a2:ee:b8:60:
7d:2e:86:f6:a5:5b:a3:45:48:04:b2:50:3a:04:42:a8:0b:a7:
90:54:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:04 2024 by rpki-client on console-fra.rpki-client.org