Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: LJumkrQxRam2KCKvE1HAfEujKcXI4nGFciqwlNRxBBE=
Subject key identifier: C5:2B:E3:90:CF:07:92:22:38:1B:E2:C7:68:63:CB:B0:A7:00:F5:85
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 0193561AD71147A4E4E707F3CA75C8A439AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 3C
Signing time: Fri 22 Nov 2024 23:00:19 +0000
Manifest this update: Fri 22 Nov 2024 23:00:19 +0000
Manifest next update: Sat 23 Nov 2024 23:00:19 +0000
Files and hashes: 1: DrQ5GC-ImZiQFtgjdrt9OxFP7yU.roa (hash: AMlOfLIQauhyf1FlxSp9UWQYrmS9WPjvUq/Fri2X9lI=)
2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: Ximc9px6hFQfhzwoV0+NDjbCwVqfe9IH6aT5LHa0x0Q=)
3: wjTkK7GHc66DVEOqN89sdlE2lBA.roa (hash: oZai4+GhNQMgMEn0j9Sa2DF43h8kTcynxxFW1G2umZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:1a:d7:11:47:a4:e4:e7:07:f3:ca:75:c8:a4:39:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Nov 22 23:00:19 2024 GMT
Not After : Nov 23 23:00:19 2024 GMT
Subject: CN=c52be390cf079222381be2c76863cbb0a700f585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:0d:11:b4:87:7f:19:2c:84:82:0d:98:a1:
a2:c8:3e:63:f3:cf:de:b1:cf:c4:12:58:bb:0d:9c:
0c:fc:22:68:d1:27:d7:e7:ed:77:5a:54:ed:34:a9:
dd:bd:e9:c2:c1:90:c1:b1:d6:ad:1e:51:19:b0:65:
04:5b:2f:53:3b:35:96:b6:53:a5:f0:31:f6:f3:9d:
95:2f:09:e0:55:75:fe:fd:d8:e4:33:7a:98:d0:bf:
9d:79:f0:b5:ed:3e:6f:3c:ec:85:54:a8:92:a8:9d:
b1:43:56:1a:cb:80:69:ca:9a:99:97:2d:12:5b:81:
42:35:25:42:04:5a:a2:9d:7d:63:8b:4f:82:36:74:
9b:3b:17:37:36:46:7f:ad:c5:52:c0:32:85:be:eb:
aa:b8:51:18:49:4a:7c:71:d1:b3:87:e1:e1:18:2d:
32:f7:37:76:63:d0:9e:19:fb:44:80:5b:d3:8e:84:
d2:ce:f2:9d:d6:bc:31:47:c0:4d:14:41:6d:d5:db:
d3:a5:e3:6e:fb:fd:71:c6:f2:b0:1d:2d:5a:9d:79:
7a:14:75:d4:b5:11:b6:18:71:cd:1f:8c:6f:e4:4b:
fc:f6:5e:13:7d:6a:66:29:9d:05:1d:9b:5e:5e:a9:
b2:39:6e:a8:49:c5:43:bb:68:01:ed:2a:ee:d7:68:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2B:E3:90:CF:07:92:22:38:1B:E2:C7:68:63:CB:B0:A7:00:F5:85
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:5f:a6:95:0b:13:5d:e0:83:81:9e:68:02:22:45:49:7c:1d:
33:f7:cd:bb:95:61:ec:5d:29:d7:ec:aa:7d:5a:8b:45:2e:93:
9e:e1:40:1e:bf:9b:21:13:8f:f4:55:4c:83:5c:bd:6c:ab:6d:
d2:c7:97:79:58:0a:5f:44:00:58:7d:c2:59:8c:0c:bb:35:50:
29:9f:c5:46:94:8e:a6:1c:12:f2:64:f7:cd:77:e3:7b:d3:41:
b6:13:10:28:99:c2:38:bf:15:0c:86:a8:68:4a:ac:ca:55:22:
d1:b9:c1:e0:84:b8:36:a0:3a:7a:77:b0:4a:8a:c6:84:c6:bd:
4b:ee:ee:c8:59:7e:d2:59:17:c6:5a:ae:15:bd:f6:91:37:87:
ab:54:e8:3f:b9:fb:a8:cf:db:02:c2:d7:08:a0:0c:2b:79:a7:
0e:ec:19:9b:2c:4b:9d:19:c0:2a:ce:16:46:45:9e:d1:9d:67:
e1:f1:7d:1e:e2:8e:47:9e:ec:f6:f0:ea:fc:b7:0e:1d:3a:5e:
97:fb:a4:92:07:93:34:1b:4b:62:78:e8:ff:33:b8:16:d0:8c:
9e:3b:72:1d:63:1f:2d:65:14:1b:0d:99:cd:33:0c:08:1e:9c:
e2:79:ec:3e:00:74:bf:cc:d5:f7:5d:00:6f:a5:23:73:db:d8:
a1:84:7d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:17 2024 by rpki-client on console-fra.rpki-client.org