Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier: 3d2Cr7BeiN5s3BmRZecQXVQM4Dhd9XA9NOHs9SwbcAA=
Subject key identifier: F0:EA:5C:57:61:46:81:FD:65:53:F7:9A:DB:62:D4:AE:6D:62:10:FD
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 01935576987EE2C031406FBD36F2E335B137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number: 1374
Signing time: Fri 22 Nov 2024 20:00:55 +0000
Manifest this update: Fri 22 Nov 2024 20:00:55 +0000
Manifest next update: Sat 23 Nov 2024 20:00:55 +0000
Files and hashes: 1: 879jn0UTXUNv42ptZa7tBU-pS1o.roa (hash: DFqpnPGNkpcP3hz7LazfblQ3dtPnGvnWwFjIqZvX3Tc=)
2: HuqTWswe34-6MbCLsbaHFL4HKQ8.roa (hash: PrAiXv88A54m6WaRL3Dl4+3a6+icI69Mqwe3/+kjk60=)
3: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: QeBmlwhVNsnm0qc2+CYLoHoS11+599XowStwQYoXYhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:98:7e:e2:c0:31:40:6f:bd:36:f2:e3:35:b1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Nov 22 20:00:55 2024 GMT
Not After : Nov 23 20:00:55 2024 GMT
Subject: CN=f0ea5c57614681fd6553f79adb62d4ae6d6210fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:a3:16:5f:16:0c:0a:1e:31:f8:c8:28:30:
be:02:ca:5a:cf:d7:e1:c2:10:8e:b9:32:74:48:d1:
0a:5f:4f:d0:18:96:b4:0d:ba:78:03:d0:ef:6d:67:
e2:fa:b7:65:b4:d1:1d:1b:71:ff:29:e7:0a:a0:0b:
95:6e:ed:3a:0f:53:02:a3:9b:d7:44:d8:e3:1d:49:
9c:5b:50:f2:a9:d7:89:52:31:aa:cd:24:39:10:6e:
d1:b2:67:f3:3b:4b:f6:98:5b:ac:11:55:0f:7e:c2:
ee:59:be:42:5f:a3:9c:18:60:89:f4:ba:07:bc:ca:
f0:28:79:22:e3:96:5d:9b:9c:91:fd:18:84:d2:62:
72:82:65:46:92:8c:53:fe:83:c6:bb:3b:a3:68:49:
74:24:15:eb:9e:fa:57:63:6c:bc:c5:b6:3f:cc:13:
5d:80:5f:d1:f3:69:dc:1e:29:97:ab:4d:68:94:cf:
f6:69:15:91:22:49:73:5d:72:d8:57:78:1e:bf:71:
4e:99:95:47:2c:6e:72:8a:ee:c2:e1:da:8c:ee:ba:
40:23:4a:66:91:0a:3f:b9:80:73:dd:2d:10:3e:ee:
f4:1d:e0:5b:d4:a6:7b:8b:80:14:3d:5d:8b:fb:5c:
28:2d:26:09:cc:7b:1b:0b:2a:3d:c1:8d:4f:ca:fc:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EA:5C:57:61:46:81:FD:65:53:F7:9A:DB:62:D4:AE:6D:62:10:FD
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:48:46:84:f2:da:17:61:25:11:0f:a3:26:55:2c:84:0e:c0:
87:c1:7b:a4:14:5a:48:4f:48:56:16:0c:a6:05:f2:d3:49:f2:
1e:d3:90:4c:e8:d2:49:4e:35:e2:74:fa:c5:d5:9f:5a:e6:7b:
90:34:67:4a:96:8f:a4:d1:73:0e:bf:21:8f:38:ba:f6:66:41:
ce:0f:89:63:27:63:41:3b:a1:01:eb:cd:d0:80:8c:e8:74:b0:
38:33:34:68:70:e5:2e:f4:9f:d8:43:88:13:03:6d:23:aa:d3:
d3:16:8c:78:23:ad:54:59:d6:45:d0:97:0e:61:0f:02:1f:b5:
7c:60:6a:6f:c3:4e:62:3c:1c:04:2f:ff:e6:81:bc:e7:72:25:
ff:c5:99:95:57:cb:df:cb:fc:63:74:72:0f:78:44:0b:1a:3c:
f2:98:c0:ae:f2:ab:83:10:1b:6d:13:de:cb:90:0e:e4:35:fc:
22:41:f7:d5:34:c9:90:db:0c:f7:19:5d:92:7b:e9:d0:23:80:
f1:a9:c9:e6:ec:43:c2:7b:49:dc:40:83:91:cc:81:e5:ae:2f:
5a:11:8f:8f:9d:5c:32:50:0c:91:30:55:64:84:2a:06:06:21:
01:e1:17:64:f0:d1:65:c3:83:3c:87:97:d2:7a:9e:40:07:da:
18:92:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:15:54 2024 by rpki-client on console-fra.rpki-client.org