Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json)
Hash identifier: B5Yo7IgWizRiUSZt1CyPC8sAL9otRjaH1bp347KnIIU=
Subject key identifier: F3:81:13:54:27:E5:6A:D8:39:EB:D1:D0:FD:7D:99:85:06:E9:FA:27
Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Certificate serial: 0193553FA814F682D191399EBF4A3EB33B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 19:00:55 +0000
Manifest this update: Fri 22 Nov 2024 19:00:55 +0000
Manifest next update: Sat 23 Nov 2024 19:00:55 +0000
Files and hashes: 1: R9gXxxia-Kyo6Lx4zwwcEBIRSjA.roa (hash: WDT7vIyGkStdwLTFXtWEG+ywBX0tZfiTjFaUjf7I0jM=)
2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: emKaqrLxa/nOMKGV9wFwaS2eeotO/4uGZ2B7Y15YlqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:a8:14:f6:82:d1:91:39:9e:bf:4a:3e:b3:3b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c
Validity
Not Before: Nov 22 19:00:55 2024 GMT
Not After : Nov 23 19:00:55 2024 GMT
Subject: CN=f381135427e56ad839ebd1d0fd7d998506e9fa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:d2:e1:96:5c:f7:b7:22:a1:e7:be:6a:cc:
45:0d:38:04:f4:ef:b9:2c:5f:9f:ad:34:09:da:41:
bb:9c:fd:f0:88:e7:26:9c:46:42:8c:fe:25:bf:11:
33:5e:1c:48:12:40:60:8c:45:8e:60:e4:e9:5c:36:
d8:dc:91:99:a1:1a:db:28:d9:61:e5:74:30:28:c3:
5f:d1:0d:94:20:fc:27:29:9c:ab:d0:e7:ed:44:e2:
c2:d5:7a:62:a1:5b:5f:a9:6d:bd:20:e8:ad:a1:aa:
57:40:08:0e:2f:2f:c3:63:8b:ad:db:6f:11:d7:f9:
61:2b:08:57:8b:02:09:a4:39:5a:9c:2c:50:35:2e:
2e:63:56:61:f5:03:28:50:6f:0c:f9:d1:62:9d:3a:
68:10:c0:fd:8b:66:35:0d:6f:be:ab:dd:50:dd:db:
f6:dd:da:e8:66:7d:49:69:2b:37:45:4a:23:7f:e1:
6a:d3:c1:bb:31:37:d4:26:b4:c3:21:7b:bc:03:35:
2f:36:ae:06:80:c6:9e:fa:56:96:ce:ae:9d:76:5e:
f3:3c:cd:f3:b5:6f:7f:15:41:97:8f:d1:24:b1:9b:
2d:7c:88:77:5a:0e:07:22:37:4a:76:f3:9f:9e:9f:
3f:48:71:84:c1:3b:b4:da:5a:b6:be:d7:0d:65:9f:
8c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:81:13:54:27:E5:6A:D8:39:EB:D1:D0:FD:7D:99:85:06:E9:FA:27
X509v3 Authority Key Identifier:
keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:69:fe:55:03:b3:f9:15:58:87:06:ff:11:45:82:dd:70:db:
31:f7:86:ca:c0:13:ca:4d:b1:70:3e:df:b9:c2:ea:94:f6:e0:
b4:98:b5:d7:1c:dd:95:d4:a5:2a:e9:6c:97:25:8e:85:f6:47:
e8:27:6f:c0:08:48:4d:6f:eb:bf:25:54:cd:a4:c0:03:e6:16:
f2:f4:23:32:67:09:21:82:01:be:58:f1:58:45:c0:b9:c3:85:
a9:a5:03:50:73:d6:14:a4:76:3a:7b:c7:b4:39:4c:96:da:de:
4d:76:68:f2:4b:ac:39:28:e7:53:50:22:6b:db:18:04:a1:ca:
dc:1f:09:76:81:b7:87:d9:b9:26:77:44:9a:ef:d4:78:40:b7:
ca:7e:bf:d8:8a:95:02:1c:91:45:ef:d2:d7:f7:7c:15:c6:4c:
3d:3b:d9:b0:8f:09:38:77:87:4e:d3:48:6f:fc:c1:7e:33:8b:
77:66:9d:74:7d:f4:c5:31:83:56:14:1e:38:dc:8f:51:b8:3c:
b9:24:8a:6b:0f:f3:70:eb:9d:1f:76:1b:4d:19:46:55:cb:29:
46:91:2e:ff:5e:cb:28:d1:50:2b:3d:b7:bb:44:a5:1c:59:48:
77:b4:0d:f2:ed:7d:5b:d1:ff:0c:b3:91:1f:f4:6c:21:de:2e:
93:80:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:36 2024 by rpki-client on console-ams.rpki-client.org