Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
File: cKdpKcviHO3ZTAErpYuwtvEpci4.mft (raw, json)
Hash identifier: MFE84IKI5TdvoQsNmj9iWNOpDWqg9HSj3GqZClyXE0I=
Subject key identifier: DE:57:05:17:7A:C2:45:62:F1:B8:F7:8A:20:66:E3:36:AD:BD:FC:97
Authority key identifier: 70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
Certificate issuer: /CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Certificate serial: 019369D98E37E9534AC41EB194A2F917A9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
Manifest number: 1378
Signing time: Tue 26 Nov 2024 19:01:25 +0000
Manifest this update: Tue 26 Nov 2024 19:01:25 +0000
Manifest next update: Wed 27 Nov 2024 19:01:25 +0000
Files and hashes: 1: 5bIxkTT4ZuVKHmsUf2LjqOCQ8cM.roa (hash: r5XUfzzHcur/gnxXxGhTGluWLHJHqVgpbyQJEnNA4VE=)
2: cKdpKcviHO3ZTAErpYuwtvEpci4.crl (hash: HhDSc1+XJQYhuVrvaUDe/CJ/MzGkWeZXUJy0Dlbs+tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:8e:37:e9:53:4a:c4:1e:b1:94:a2:f9:17:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a76929cbe21cedd94c012ba58bb0b6f129722e
Validity
Not Before: Nov 26 19:01:25 2024 GMT
Not After : Nov 27 19:01:25 2024 GMT
Subject: CN=de5705177ac24562f1b8f78a2066e336adbdfc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:23:a8:2a:61:2e:57:43:fc:b6:82:16:34:
f8:d6:ed:cf:09:51:5f:5b:6a:37:de:ca:e8:aa:9c:
5a:66:85:ab:d0:c0:6f:4f:7f:fd:10:0c:3f:51:48:
34:a2:8e:7b:2b:02:b3:fa:5e:a0:f6:c5:c7:3d:9d:
1d:8c:18:b2:dc:6b:0c:37:1c:8a:b3:97:c6:fb:d0:
68:89:88:05:92:3b:f2:51:f8:30:50:ea:5e:dc:dc:
0e:f2:ae:a9:d8:e3:b9:27:37:27:f1:54:61:07:23:
6a:c4:d7:23:f6:ce:ca:d6:6f:d4:c5:d8:94:ed:96:
44:ac:2c:5a:6d:cd:59:45:25:60:45:7d:ae:9c:cd:
36:12:3d:b1:eb:30:38:5c:54:0a:8a:90:58:76:89:
18:95:35:fe:53:4f:a1:c1:e6:28:28:0b:c8:2e:f7:
dd:16:8f:b0:47:0c:25:06:fa:0e:ab:a5:90:5e:7d:
b9:29:86:79:b9:d9:9e:1c:07:ce:dd:36:ea:da:22:
06:69:a3:65:79:40:63:0c:fd:6e:2f:32:3b:ee:69:
cf:d9:d0:3b:2b:4b:12:9f:19:86:de:c8:83:51:dd:
98:3b:c6:0b:02:01:39:99:fa:c1:98:e1:6a:f4:be:
99:be:3b:7a:50:c2:18:fc:d1:a7:29:d2:c5:8e:6a:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:57:05:17:7A:C2:45:62:F1:B8:F7:8A:20:66:E3:36:AD:BD:FC:97
X509v3 Authority Key Identifier:
keyid:70:A7:69:29:CB:E2:1C:ED:D9:4C:01:2B:A5:8B:B0:B6:F1:29:72:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKdpKcviHO3ZTAErpYuwtvEpci4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/014f47-628b-4fb8-b344-a409e22a243e/1/cKdpKcviHO3ZTAErpYuwtvEpci4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7e:33:24:81:87:18:45:be:67:e3:27:21:4d:8a:cd:80:8c:
ff:e9:31:51:60:83:e6:ac:81:f9:e5:c6:b7:4a:13:eb:4b:5a:
95:97:58:f6:c0:23:fe:ca:35:dc:71:b2:dd:67:cc:2f:b8:c8:
c3:fe:8f:75:0b:0d:1f:52:30:08:f2:c2:7d:29:2b:fd:e4:7b:
38:00:56:24:0d:f5:39:1d:d7:84:99:91:45:21:14:ec:9c:e6:
ee:e1:dc:fc:5e:b3:84:a3:34:59:c3:d8:eb:8c:19:32:05:f3:
77:1f:e8:a3:83:ba:a7:34:38:df:0c:a8:17:9d:08:99:d2:58:
e5:5f:71:11:ff:10:c4:8a:47:b6:4d:98:2b:1d:c8:88:30:20:
da:af:43:63:84:4e:ab:9e:c0:e3:91:e0:ea:4e:97:8c:f4:0d:
4a:a1:59:4d:8f:02:c7:42:bf:c9:35:31:90:37:51:00:03:79:
68:27:d0:33:a2:2d:ef:6e:bc:98:c8:dd:df:5b:fa:a9:67:e8:
3a:c0:28:54:4e:28:73:7b:c9:e8:cd:42:a1:9b:44:cc:d7:2a:
c0:61:29:fa:35:b4:57:80:65:98:d1:b6:e6:67:05:42:33:11:
86:5b:6c:99:17:de:d7:5a:80:2a:df:67:d7:fd:13:d9:5f:d9:
91:64:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:31 2024 by rpki-client on console-fra.rpki-client.org