Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier: q30ELxuEmN+51eIk6e8p/dQ0cclT2nrZwECaRE6yRGA=
Subject key identifier: 3A:5B:2C:4E:1D:7C:E8:A1:69:26:A3:FC:52:54:95:18:92:F1:27:44
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 019351999EC92067D26B06F66475FB04AB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number: 12FA
Signing time: Fri 22 Nov 2024 02:00:42 +0000
Manifest this update: Fri 22 Nov 2024 02:00:42 +0000
Manifest next update: Sat 23 Nov 2024 02:00:42 +0000
Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: EUFl5qHRQ/eMdDOXH9HUHwCZcZ355q/+ogeIZvi/GXs=)
2: gOUjL799efDvGwFQ3R7wFigXr2E.roa (hash: p0H0VcDwL3ugXMERCAof0gT7zKPIuVPZIcKRLnoAKMM=)
3: uT-2gi5O6BudCqlsLZ0EvbxHpTY.roa (hash: QsUH2mO5Ag1ywRgCHXB4SpYQ6M75Ggifk+fyFH+RlZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:9e:c9:20:67:d2:6b:06:f6:64:75:fb:04:ab:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Nov 22 02:00:42 2024 GMT
Not After : Nov 23 02:00:42 2024 GMT
Subject: CN=3a5b2c4e1d7ce8a16926a3fc5254951892f12744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:f4:e9:c9:17:2d:12:c0:64:e9:f9:72:0d:
b3:a0:79:a8:72:6e:e5:d2:5e:8f:52:30:d6:76:b0:
01:93:8f:76:7c:59:79:e5:0e:ab:7b:a3:55:86:68:
b2:d8:f3:a9:0e:c3:58:2a:3d:7d:64:3b:33:b1:6f:
a8:38:3d:24:b7:72:1b:d8:fe:5d:3f:47:2d:6e:b9:
44:c9:e1:90:c3:14:55:33:e6:b1:f8:37:13:33:9e:
e0:c9:92:1f:2e:6a:7e:1f:2e:af:3a:26:50:e3:55:
a2:db:6c:1b:ee:e3:f9:6f:08:c0:42:12:3b:8b:88:
25:ae:41:c9:57:7f:ae:de:20:d6:92:92:12:a6:56:
aa:5b:3d:7a:a9:84:b3:d3:26:a8:94:3a:8b:af:e1:
48:be:b2:c0:4c:c4:ea:6b:0e:f6:ef:68:bc:3b:86:
16:f2:ec:e8:23:c0:5e:d2:8d:cc:ff:01:74:b2:9a:
9b:87:03:77:ad:17:e6:cd:fd:0d:18:c6:24:4d:67:
b7:43:68:c2:38:db:c5:b3:ac:17:cb:3b:6d:79:4e:
2f:ff:a4:3c:a7:60:85:75:39:95:dc:5c:d7:6f:91:
dc:57:f8:f6:76:34:36:61:4b:8b:28:57:22:c3:02:
49:81:a4:eb:b1:a6:e8:15:89:ee:ef:be:8c:14:18:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5B:2C:4E:1D:7C:E8:A1:69:26:A3:FC:52:54:95:18:92:F1:27:44
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:60:47:4f:14:cb:07:a7:1f:66:89:a6:88:83:c1:32:e8:36:
27:ca:63:33:07:6d:e0:9b:b3:9d:45:1c:5f:a4:f9:0f:2e:0f:
b0:9b:a8:27:d3:fb:b6:56:ad:ef:2b:b9:9e:0d:e7:9a:87:e1:
1e:0a:25:1f:9e:83:e7:0f:21:95:f6:0c:33:4f:92:b7:01:db:
9a:d8:62:66:c0:0e:ba:3b:4b:db:b8:29:8f:c3:67:72:55:7f:
e4:17:b3:d9:42:a1:54:25:ca:78:17:7d:aa:6b:67:20:b4:35:
bc:73:aa:a6:8f:3f:5d:95:4c:b7:ad:da:28:8b:e6:b2:92:c9:
69:b5:59:10:53:8f:da:85:11:a7:98:d4:45:c7:af:72:dd:2f:
98:ea:4d:9f:07:dd:2c:a5:ed:6d:0d:10:44:9c:42:03:3e:6d:
0c:f1:7a:62:2e:6e:d1:52:9e:89:92:f0:81:47:60:02:b6:ba:
f2:47:a5:68:ae:cd:ce:4a:05:b1:97:01:43:72:89:42:48:ad:
f6:67:9b:aa:d7:70:44:49:49:8a:4d:8b:9f:69:77:46:9f:86:
55:cb:1b:ff:ec:94:3a:62:7a:13:2d:f8:e0:fc:79:cc:05:ab:
bf:2b:be:4a:6d:cc:4a:dd:81:7a:35:5d:30:9f:9b:93:74:1f:
79:b3:aa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:54 2024 by rpki-client on console-ams.rpki-client.org