Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
File: 925jlSS9okW5LbTLvKVr06ekrgw.mft (raw, json)
Hash identifier: Yey6J4y2gFzVc7GsTnWh7N0jmYokjeohh2V7QJvfbJU=
Subject key identifier: 35:23:79:C4:12:E8:48:02:E2:64:71:71:5B:C6:50:76:C5:0C:E3:58
Authority key identifier: F7:6E:63:95:24:BD:A2:45:B9:2D:B4:CB:BC:A5:6B:D3:A7:A4:AE:0C
Certificate issuer: /CN=f76e639524bda245b92db4cbbca56bd3a7a4ae0c
Certificate serial: 01936A46C723C9F7C2051CF55FF33BE98B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/925jlSS9okW5LbTLvKVr06ekrgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
Manifest number: 03C2
Signing time: Tue 26 Nov 2024 21:00:43 +0000
Manifest this update: Tue 26 Nov 2024 21:00:43 +0000
Manifest next update: Wed 27 Nov 2024 21:00:43 +0000
Files and hashes: 1: 8dny7u5gUz1Q11qFQNW4vNRdILY.roa (hash: DlDoMPutjlcMxl3gPP/fwyEvZjtLqrc0ErTlaArGTKE=)
2: 925jlSS9okW5LbTLvKVr06ekrgw.crl (hash: duRvIcX1+kzkhjngKyytuh0h5kEyfr4MhyONPn5PLso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/925jlSS9okW5LbTLvKVr06ekrgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:c7:23:c9:f7:c2:05:1c:f5:5f:f3:3b:e9:8b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76e639524bda245b92db4cbbca56bd3a7a4ae0c
Validity
Not Before: Nov 26 21:00:43 2024 GMT
Not After : Nov 27 21:00:43 2024 GMT
Subject: CN=352379c412e84802e26471715bc65076c50ce358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e6:a4:71:2d:35:ed:97:a1:0f:2c:cb:6a:96:
a4:f4:53:eb:fc:a4:fd:40:8d:62:e4:65:20:27:32:
5a:82:79:1d:0e:9a:d2:54:26:d6:46:d6:9f:6b:19:
f9:0b:cd:83:59:3c:2d:26:77:9d:e1:63:9c:13:28:
62:fd:71:7b:c8:f9:25:33:d6:46:ec:c2:ab:2f:30:
f6:fb:01:5b:5c:82:5b:57:bf:17:af:1b:da:51:2a:
18:fc:9f:54:87:64:6c:71:f5:30:ab:47:df:9d:36:
43:8b:04:32:67:64:58:8e:89:a0:7d:29:37:9e:49:
4d:7e:e5:8e:7d:8b:0a:99:03:2b:38:75:03:c0:7e:
7a:7f:cf:42:b7:13:60:9f:bc:00:f5:c7:bd:5e:c3:
20:33:32:ed:33:8b:3d:c3:a7:0e:1a:ce:58:64:32:
10:ed:9e:de:fe:ba:7d:9f:ee:95:14:0b:d7:a5:f0:
96:4b:0c:2d:e7:30:2b:9b:1e:42:bb:a6:f3:1f:2f:
05:07:a8:25:8f:b4:6d:90:80:c3:0e:a9:d7:11:c4:
b0:a7:da:7e:eb:0f:e6:0f:e6:62:d5:19:21:26:11:
cc:e7:10:ed:ae:ff:f8:a5:5d:f0:76:f6:34:71:ca:
b7:15:f2:90:75:c7:7a:43:92:94:df:8f:eb:be:6f:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:79:C4:12:E8:48:02:E2:64:71:71:5B:C6:50:76:C5:0C:E3:58
X509v3 Authority Key Identifier:
keyid:F7:6E:63:95:24:BD:A2:45:B9:2D:B4:CB:BC:A5:6B:D3:A7:A4:AE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/925jlSS9okW5LbTLvKVr06ekrgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/89b3d1-7de3-4c63-a077-82c1b65bed40/1/925jlSS9okW5LbTLvKVr06ekrgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d9:f2:3f:62:13:43:31:46:5f:e1:27:4b:96:c7:44:4c:25:
63:73:ca:5f:c0:2a:0a:3a:7c:86:30:32:8f:c9:07:4e:b4:ac:
75:0c:f0:92:1a:be:21:e6:cd:a4:63:b9:6a:79:2b:ed:94:a4:
4f:34:af:8c:60:79:f9:43:08:ac:fb:d8:56:b1:75:47:5d:1c:
1a:f6:8d:4c:44:c2:a3:b2:47:dd:2e:eb:7d:e5:26:dd:42:01:
61:47:f9:a5:87:65:f4:a4:4c:15:b9:dd:7b:09:22:c1:b2:fd:
2b:89:cf:0d:22:2f:63:f5:47:ff:d7:28:40:34:c4:6f:62:93:
7f:59:9f:a4:1f:33:94:b8:83:12:f1:d0:69:8c:69:fc:89:cd:
fc:ff:3e:6b:06:9c:3f:d5:59:8b:5c:2b:27:2e:0c:e0:da:03:
a2:66:84:38:d3:1d:36:3a:fe:ec:a2:c9:65:6a:cd:f7:7d:a3:
6e:43:cb:d8:60:58:1a:65:e4:23:7c:6a:08:92:e3:e6:c5:47:
ce:81:25:95:3d:e2:0b:9f:b3:ba:d3:2c:41:8d:c4:e2:e0:35:
c3:b7:e7:15:60:eb:84:79:62:1c:82:3a:d7:a0:03:f0:8c:ef:
d0:b1:aa:f7:85:72:ff:a6:12:a8:12:68:18:67:47:66:09:f2:
df:60:af:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:50 2024 by rpki-client on console-fra.rpki-client.org