Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File: 2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier: 7u7Zk3A+JleBljhhZBlG7qa7xDB4t0hxP/EILcqLRbQ=
Subject key identifier: 8E:DB:7A:2E:C4:0A:66:86:62:B9:FE:92:A3:01:3B:2D:85:05:58:A5
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer: /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial: 01935877A8BD74E4B6D05D5B87CE937F5D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 10:00:57 +0000
Manifest this update: Sat 23 Nov 2024 10:00:57 +0000
Manifest next update: Sun 24 Nov 2024 10:00:57 +0000
Files and hashes: 1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: 6iArXFOMy0dxQz7eiRFhMZtR0IOBBJ46woS88tYkEa4=)
2: tvayssX4BkVuOTR3Z86IM5an3Tw.roa (hash: uc8D3rH13XfEFv2tga+qVGDnFDUb6Ec+6MFs3c3gHgw=)
3: xP3Ekp7iuh7CEU4mY0UItPgXYsM.roa (hash: /XKjvsHxJBS7+sgUeYPBqID/xLDCyR93mn+RHGeynGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:a8:bd:74:e4:b6:d0:5d:5b:87:ce:93:7f:5d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d894365b28a082834a751a97771b791124524dec
Validity
Not Before: Nov 23 10:00:57 2024 GMT
Not After : Nov 24 10:00:57 2024 GMT
Subject: CN=8edb7a2ec40a668662b9fe92a3013b2d850558a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7b:37:af:b2:4e:c0:97:24:ee:ad:c5:4d:38:
80:28:b2:a4:3f:77:83:b4:4b:6e:d5:b2:ac:be:ce:
07:6a:8e:65:8e:25:8c:cc:1b:aa:58:68:89:99:6d:
65:b9:48:94:6a:99:a4:e0:6c:25:c2:37:d3:1e:10:
1d:c2:6d:71:1d:62:45:9b:c0:14:5e:11:41:3c:78:
02:df:4d:68:70:bf:b2:05:aa:ce:2e:2b:8d:ef:ec:
40:24:6d:72:84:07:2f:ca:19:b2:9c:d5:73:31:d6:
38:cb:e1:ee:68:78:70:14:70:65:7f:17:e3:04:15:
dd:c5:82:c1:8a:cd:5a:71:ba:ae:a5:7f:d1:1e:61:
9a:67:f7:f9:52:bd:3b:d3:52:67:ae:55:0f:30:9e:
f7:0b:3b:2d:0c:b7:02:bb:0d:5e:0b:8c:37:67:86:
4e:4c:d6:1a:b3:6b:12:4d:dc:90:57:15:b3:86:61:
f5:27:35:fa:c6:95:78:e0:bf:c7:02:08:d2:af:1b:
6d:c5:7d:4f:00:a4:e7:51:1d:5e:34:21:fc:5f:f1:
84:0e:33:9a:07:cc:a8:9d:50:73:f8:d7:0c:84:2d:
84:2f:d8:54:c4:6a:32:aa:e1:f3:c7:46:a5:8b:ce:
a5:1d:96:cd:ae:de:73:20:06:62:9d:b7:dd:00:7a:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DB:7A:2E:C4:0A:66:86:62:B9:FE:92:A3:01:3B:2D:85:05:58:A5
X509v3 Authority Key Identifier:
keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9f:f2:43:de:45:05:f5:ce:5e:c8:18:2d:65:c9:bd:96:5e:
f0:6f:a7:d0:d7:a4:77:c0:b0:a2:ae:96:64:5b:98:9a:37:d7:
c1:f9:8b:3d:ec:35:9b:cc:18:05:2b:7a:8a:ad:34:0a:15:eb:
8a:f5:d4:3d:f6:95:bf:f9:0a:cf:56:4c:4e:41:7a:61:10:39:
5a:01:f4:8a:d5:5d:12:6c:4d:3b:81:b7:8c:c3:68:f4:35:d2:
32:77:26:0f:29:49:0a:c8:03:c4:0b:c7:fa:45:e9:a5:fc:5b:
f2:39:34:af:bf:d4:ce:6e:8e:41:ad:39:5d:6d:b7:e2:42:72:
05:eb:78:ec:83:1c:95:24:6f:77:04:6a:72:4c:06:3c:40:0a:
c1:d6:a2:33:fe:49:6b:ef:ef:d4:35:94:00:f7:de:f8:97:5c:
7e:93:e4:15:25:5d:d8:34:d5:5e:8e:ab:61:ca:c0:b8:1a:b5:
0f:48:1f:22:52:2b:12:7b:5e:be:2e:28:82:66:f2:0c:85:71:
5f:e5:e9:8e:dd:b1:15:df:96:1e:ae:2d:d9:66:63:bb:62:fe:
33:8b:fe:c2:a5:b8:f0:8f:b3:bf:ee:c5:9b:52:70:c7:d1:d7:
a9:b3:4a:52:38:18:8b:74:03:b8:ae:54:15:89:86:e2:9a:94:
30:a7:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:18:36 2024 by rpki-client on console-fra.rpki-client.org