Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
File: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft (raw, json)
Hash identifier: 3jwofe5eKkYnUxUtHN8aTEhpSO/6LLbG062edxe1TKQ=
Subject key identifier: CD:70:1B:CC:52:88:AC:3A:5D:6B:EC:5C:8B:6C:87:91:DF:6C:CD:91
Authority key identifier: F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
Certificate issuer: /CN=f159077e043877059603caa0e3e584b1626e8f7b
Certificate serial: 0193549A38D12071EBD2A374B03937073EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
Manifest number: 0DBE
Signing time: Fri 22 Nov 2024 16:00:13 +0000
Manifest this update: Fri 22 Nov 2024 16:00:13 +0000
Manifest next update: Sat 23 Nov 2024 16:00:13 +0000
Files and hashes: 1: 8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl (hash: XKvcQenLjCLzakRqCdL6eFKA7Vl0YMZ0cYNFV4rAs2M=)
2: Q7IfWocra-mTc3cj3Yz03mwL_HQ.roa (hash: d6XrVutZZsMBkcJIr5SxkjADv/dlXFtXWPt/2zl7zgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:38:d1:20:71:eb:d2:a3:74:b0:39:37:07:3e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f159077e043877059603caa0e3e584b1626e8f7b
Validity
Not Before: Nov 22 16:00:13 2024 GMT
Not After : Nov 23 16:00:13 2024 GMT
Subject: CN=cd701bcc5288ac3a5d6bec5c8b6c8791df6ccd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:0d:67:32:46:ff:85:68:7d:60:22:30:83:
8f:4b:44:7c:fe:08:f7:19:51:27:2f:4e:cb:f4:df:
63:51:79:6b:f2:7a:15:be:20:8a:a9:cf:6b:0b:a4:
9f:9a:65:90:79:9c:96:06:b4:84:88:95:44:d3:8d:
36:b9:ff:43:34:da:60:c2:7f:3f:f5:19:73:73:17:
51:28:f1:cf:b8:63:f5:f0:3b:d4:eb:92:cb:94:e2:
49:14:8c:f1:01:d7:0b:df:b7:92:9c:e4:d7:29:fd:
b8:6b:2e:d6:b6:66:3b:18:c8:d3:00:3a:c1:3c:2e:
b9:27:79:60:7e:0f:74:ec:1c:60:74:44:1d:a2:e1:
82:75:f8:35:84:da:fa:4c:3f:76:c7:0e:1d:dc:6a:
49:08:1b:f5:0a:7b:96:f7:e4:31:20:d2:a2:64:9a:
b3:d3:85:93:88:c4:0a:14:0e:58:9b:80:15:b7:ca:
5b:5e:af:a8:ef:ac:ec:0f:99:69:2e:42:f6:2f:1c:
f8:e4:01:c9:4c:3e:e2:2d:da:d5:65:7d:06:6e:41:
0b:df:61:f7:a2:f3:2f:3f:ea:b4:ba:56:1c:2c:32:
d5:ba:93:79:bb:57:7c:03:07:7f:e7:62:c7:c5:6e:
c2:1f:9a:d2:af:ac:31:92:3b:02:85:cf:cd:af:06:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:70:1B:CC:52:88:AC:3A:5D:6B:EC:5C:8B:6C:87:91:DF:6C:CD:91
X509v3 Authority Key Identifier:
keyid:F1:59:07:7E:04:38:77:05:96:03:CA:A0:E3:E5:84:B1:62:6E:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0aa541-e90f-46fd-a0dc-03d904c802ce/1/8VkHfgQ4dwWWA8qg4-WEsWJuj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a4:30:d6:4c:b0:e8:9a:c9:27:20:7f:6c:84:93:4e:62:85:
d8:55:00:85:62:c7:45:eb:97:0c:ef:9a:41:98:0d:aa:18:53:
cb:67:42:f8:73:53:21:5c:e7:1b:54:3a:84:91:f4:84:fd:e4:
7c:af:3b:ab:b7:98:40:32:e1:d3:3b:74:99:63:5e:ff:25:e3:
2a:bd:14:db:01:4c:c4:a7:36:68:4a:39:43:98:4f:d3:4a:00:
27:79:58:d1:88:51:8d:28:dc:57:0c:11:cb:e1:ad:25:73:9b:
08:13:af:e4:a3:26:3a:71:b7:03:97:aa:ae:81:01:33:1a:69:
07:3f:d6:85:1a:c6:d1:d4:0b:a9:d9:e4:d4:0b:5f:e2:aa:18:
e2:c4:2a:87:02:e5:3b:c6:b4:47:bb:a0:db:3e:36:bf:8e:f1:
fd:4c:4d:4b:25:1e:eb:73:68:b4:d8:86:1e:16:f5:83:9e:0b:
d5:1b:76:f2:51:cc:ca:9c:dd:20:54:3b:27:22:46:87:ae:f6:
f3:44:c5:c3:9e:51:99:fa:71:8d:02:3a:36:2c:d0:c7:10:41:
75:92:87:44:bb:61:79:b5:52:d5:ca:ac:06:c0:79:65:f9:4a:
f9:36:a5:73:f4:03:01:50:00:1a:07:2a:cc:9c:38:4c:66:b4:
61:4e:91:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:24:55 2024 by rpki-client on console-ams.rpki-client.org