Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: ZahzSJMvRyDrgtcqwe90/uCc2/iFW6ujjd99JnE0pkA=
Subject key identifier: E1:BB:05:9A:8D:88:1C:8D:1D:D1:D4:FD:1C:59:7F:E7:7A:D1:20:4F
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 019358774790F3CA2AE0BB722EB5EE13A369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 10:00:32 +0000
Manifest this update: Sat 23 Nov 2024 10:00:32 +0000
Manifest next update: Sun 24 Nov 2024 10:00:32 +0000
Files and hashes: 1: 5onkI_FTgFI-xCtdG2qaHWygYTU.roa (hash: LDEAYx3QJizv7oRBCAR7df9sA0yXPbR4/nnnRb2y+gs=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: 2R88i8s50umD8fsNJ8K3CF+xvQiu9SItNiNnXvlJQbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:47:90:f3:ca:2a:e0:bb:72:2e:b5:ee:13:a3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Nov 23 10:00:32 2024 GMT
Not After : Nov 24 10:00:32 2024 GMT
Subject: CN=e1bb059a8d881c8d1dd1d4fd1c597fe77ad1204f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:92:41:e2:76:b0:8d:6e:64:ac:20:3a:86:
54:e9:e6:44:84:7f:5e:8f:4f:1a:91:a9:b1:22:0e:
bb:6a:55:a1:4f:82:cb:a1:64:9c:58:e6:e4:39:e6:
db:79:9a:5d:5e:08:2b:aa:fc:85:7c:2e:27:a7:84:
ed:22:07:28:d6:81:80:d7:3b:43:08:92:c3:c5:d8:
31:6e:86:0e:da:93:24:fd:d3:c8:ce:b5:ea:84:5e:
e6:22:4d:9e:80:7b:d9:ec:37:d5:88:0f:e3:e0:89:
cf:ca:2d:09:75:b0:80:46:ea:38:28:32:fc:d8:1a:
b8:ff:03:de:d5:6c:f3:fc:01:81:57:ef:87:91:be:
ea:06:2a:fe:4e:78:22:5e:ba:91:8f:b9:99:28:44:
89:f7:f1:90:34:d6:df:6a:69:02:8c:21:c6:d6:eb:
56:68:ad:46:96:1e:45:3e:7d:a2:47:d7:55:8c:fb:
06:72:c0:4f:c6:5d:77:50:26:a2:a5:f8:25:e7:00:
0c:43:b8:4d:03:ec:06:a0:40:76:77:04:e7:c9:6d:
c1:1c:ea:53:7a:66:20:b3:3a:c8:1b:c2:22:d2:95:
35:61:ab:97:2a:af:56:d7:97:d7:87:29:b1:99:f6:
fd:ce:84:37:18:ab:3a:5c:13:cb:f3:18:f0:6f:28:
82:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BB:05:9A:8D:88:1C:8D:1D:D1:D4:FD:1C:59:7F:E7:7A:D1:20:4F
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:44:8d:59:b5:e9:4d:30:2a:47:5f:16:c1:6a:04:77:49:24:
e4:01:d8:be:8c:9e:4d:75:95:fe:50:c5:b0:e4:eb:cf:d2:c2:
78:02:f4:8c:d5:1f:ee:cd:63:ca:15:f9:d1:b3:71:f3:94:32:
67:0f:8b:9c:ea:32:0d:a5:86:9a:b5:b5:09:b2:79:fd:3a:a3:
31:f2:27:6d:7a:8a:b2:a1:c3:4a:a4:c1:01:0e:bf:57:7f:af:
b5:25:fc:5c:c5:4f:70:84:9d:e8:0b:67:ed:23:ea:f7:aa:2e:
ab:3d:cf:fa:17:c6:24:bb:36:ec:29:49:06:da:6d:fd:75:ed:
07:e4:c7:8c:5d:f5:fd:77:c9:dc:d2:78:7e:95:44:5b:f5:24:
eb:85:a6:62:74:a3:73:26:12:3f:1f:ae:1b:13:39:78:7a:a4:
12:c3:80:f0:42:6a:0b:a7:bf:e6:26:df:e0:80:4b:8f:26:29:
8a:43:ab:e8:3d:5f:8f:05:f7:b2:63:8f:8d:a2:a9:b0:a7:e0:
43:ff:5e:08:44:7d:33:39:81:4a:72:0a:27:3e:7e:b8:68:9c:
5a:ca:ee:21:6b:eb:f9:f6:ea:80:25:37:f2:7a:8b:68:54:d4:
e7:eb:8d:a5:57:f3:a7:d9:3d:37:18:e7:d6:60:b9:21:17:49:
81:c2:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:38 2024 by rpki-client on console-fra.rpki-client.org