Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: 7WefGZ2MvxG+5uJBvw6o1mWrP9KYDIlvPPoDusU9KlE=
Subject key identifier: 8E:30:07:25:4D:5B:C6:5C:B8:68:E6:73:3F:EF:EA:88:46:63:58:35
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019367ECBB1A346DDF43B3D9A80960A781D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0863
Signing time: Tue 26 Nov 2024 10:03:07 +0000
Manifest this update: Tue 26 Nov 2024 10:03:07 +0000
Manifest next update: Wed 27 Nov 2024 10:03:07 +0000
Files and hashes: 1: 7DiJ9K95ehnMUXD7u9LvwomDRPI.roa (hash: yHePvo0AvtTtp1CqIzen+Z0YaKjnaD10cabMMhhLxUI=)
2: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: 11upa2ol3MP4IeMbk9F1Giy3su3QM+Ktn9gK/AJ0bog=)
3: vhQJyi5d8g_phjvCa6E6ESbJ00E.roa (hash: llOlLW2/oCtn2O8r0DH7vvzrFsPSedQNTs+TtKuZ7YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:ec:bb:1a:34:6d:df:43:b3:d9:a8:09:60:a7:81:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Nov 26 10:03:07 2024 GMT
Not After : Nov 27 10:03:07 2024 GMT
Subject: CN=8e3007254d5bc65cb868e6733fefea8846635835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:db:43:22:be:d9:33:3c:d4:be:7e:ae:36:
bf:c8:89:d7:b0:55:11:9e:51:86:65:b9:5f:54:72:
4d:ff:17:2e:d8:9a:fa:89:4b:f3:1d:19:b9:5f:46:
a3:5a:51:28:50:3b:1b:95:54:10:0d:49:1e:52:c5:
18:4d:53:9a:ee:d5:73:81:5c:19:c9:2a:c5:4d:66:
17:0e:db:d6:5e:a7:5e:59:0a:21:a7:26:e8:66:6b:
7e:81:5d:25:7f:a2:33:22:ef:67:45:b1:21:5a:5b:
30:33:ca:a6:e3:04:79:29:56:82:d1:c0:1a:65:53:
3a:2d:2e:9b:42:a6:a1:76:54:20:d1:0e:2e:64:9a:
5e:f1:23:00:c2:42:9f:5d:33:24:1c:b7:6a:0b:ab:
b9:f1:60:9f:84:1f:5e:b5:0e:4e:41:5e:bf:f8:a0:
bb:a5:13:cf:8c:25:ae:24:9b:ab:6c:c0:49:8b:ed:
0d:01:62:c9:ae:f3:99:9b:e4:ce:96:6b:fe:a5:63:
40:28:a9:3f:b8:69:ab:88:07:8f:11:2c:f1:c3:bd:
59:f7:a3:ed:29:a9:be:fc:8a:1a:a2:dd:e6:59:0b:
98:4e:84:e1:bb:dc:6c:51:98:5b:cc:d1:e1:a3:f0:
f7:cb:ae:ab:15:9d:64:9d:c9:b3:af:da:ab:f0:23:
3f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:30:07:25:4D:5B:C6:5C:B8:68:E6:73:3F:EF:EA:88:46:63:58:35
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:33:0f:b3:27:eb:dc:0c:37:80:4f:83:67:cc:27:c2:e8:29:
0d:b7:05:5c:0d:d7:4d:da:56:f3:3e:b8:c7:2e:0b:36:d1:34:
1c:f3:f2:93:67:81:0c:69:19:b3:ca:f9:b4:88:be:f3:4d:b2:
5b:fa:a5:2a:30:9f:ad:c4:8c:29:c8:5e:4a:c6:be:c2:cf:97:
ee:3e:86:15:df:52:07:76:65:5d:b8:82:bc:e0:0b:76:9d:a9:
7e:df:b0:1d:b7:8e:b2:5a:9b:71:4b:fb:c9:09:bc:9e:89:a2:
94:05:3e:39:4e:a9:bc:e2:ba:1c:8d:3f:9e:c8:f9:75:b0:9f:
55:bc:d1:c3:0f:88:8e:c5:88:1a:e2:53:f8:a8:5b:7a:67:a6:
6c:3e:aa:12:e6:1f:d9:a3:39:9f:2f:be:ab:5b:53:88:ce:53:
e9:c0:ed:83:68:3a:05:99:4c:00:fc:08:a3:6e:bb:7f:ee:f5:
f3:8c:64:19:00:2b:15:03:fe:ea:f3:03:ec:0b:37:74:7b:35:
f6:8a:83:24:28:97:66:35:03:f9:d3:5c:4c:18:0b:2f:e4:7a:
fe:9d:75:df:25:ff:f8:fe:a8:f8:0d:b1:30:6b:ea:cf:3a:67:
87:db:32:34:1c:97:ee:27:5a:02:8f:f6:22:ae:2e:52:52:7a:
f7:09:77:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:50:27 2024 by rpki-client on console-fra.rpki-client.org