Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json)
Hash identifier: zIaYzc7JouCnRR5NdWPWaUT5Dmo0a4cFGmjBDLvP2N4=
Subject key identifier: 1A:A5:0C:E0:97:4A:16:31:0B:C8:B9:A6:65:42:C8:32:20:6B:D5:B3
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 01935A9C68DD90306909D6C2B2317D5B7A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
Manifest number: 137D
Signing time: Sat 23 Nov 2024 20:00:20 +0000
Manifest this update: Sat 23 Nov 2024 20:00:20 +0000
Manifest next update: Sun 24 Nov 2024 20:00:20 +0000
Files and hashes: 1: 06ZZAbYBxsAybGZzNY9v5iOyBBc.roa (hash: 7HHHI2HYbd2PmsR09uzVbc/w/8vqp7VvwcZcQ2Mv500=)
2: 9GHdqTxj75VIdr6Bbig7lXdoTLg.roa (hash: w2EslLHVOiy/Lm3S3Zwel1Dq8dr0WZhz6zZpzlMFZmo=)
3: IBNkZ4EMc2viDUo-HbGEavEfZnA.roa (hash: /NckOHBkrhTp5T9Sdk5fJJF7jbGrjtNX+tAnSTfvYRQ=)
4: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: EjLIq/aVS3IOsgrE2yDuej81AIDzRYhzt82ZMjtvmSc=)
5: PbRpkZBzrxsf_TBm0j47EbF_j4E.roa (hash: B5RcS3KwpsZGqeilXAyA4giQes1Bj7p8G5s8GLThElQ=)
6: eiQfLMhmN_e3SeEWjwsVCRKKf9w.roa (hash: 1Jl8XCkofNDKsx/9OzkemLSQKymPpmBBmAyvUwKEsBc=)
7: jz7apMfMwuc83lJSMsDxLNOrBI4.roa (hash: 82h9SBM9UGGzxVjeSr6nW485JluqbBLPpM4zMAIFOsk=)
8: ny2y6e6a0AStSdzyIVZyzfutHJs.roa (hash: jSuLH8mDoEhBjMZSk+vBpu8aDbqlHtwI8qV8S9whA4o=)
9: ps3Qcq_lOz7K9_i1UYg5sICdMj0.roa (hash: HCx8K1SuhC43HVoLs2EsEaCbVvSXWx9mQ7z7TTZQgg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:9c:68:dd:90:30:69:09:d6:c2:b2:31:7d:5b:7a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Nov 23 20:00:20 2024 GMT
Not After : Nov 24 20:00:20 2024 GMT
Subject: CN=1aa50ce0974a16310bc8b9a66542c832206bd5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:b2:ea:40:78:0b:90:08:92:26:86:55:6c:
fe:c0:0f:70:8d:18:af:aa:db:5b:9d:af:7b:58:2d:
23:e4:d1:8f:d5:91:4d:fd:30:18:00:dd:bc:9b:1d:
92:65:48:76:32:27:03:2d:57:92:a5:f2:56:89:64:
19:50:79:0e:be:f3:20:75:2b:9f:ac:cd:7d:81:fd:
28:09:0a:4d:2a:22:5c:c4:a1:5c:d9:21:e5:33:74:
8b:a8:7f:72:0a:01:eb:96:d3:b7:4c:f9:f7:4a:f8:
57:29:66:dc:4e:64:b8:8f:02:0c:0c:e3:5e:eb:e0:
fa:6a:85:0b:7d:e0:51:89:ba:be:75:ba:3f:b8:8e:
03:9a:cc:d2:f1:76:e1:2c:db:47:ec:de:ac:06:4a:
66:d3:35:a9:b5:5f:73:4c:5c:79:53:17:63:f0:b4:
a7:bb:48:d2:e0:dd:5d:1d:69:d5:01:28:15:5e:31:
4d:95:ab:3f:5a:a4:7f:15:20:99:4b:82:fc:66:84:
dd:a7:c0:ae:8d:1a:f8:bc:c3:fd:23:58:d0:c7:c0:
7f:eb:a5:c9:9c:c8:7a:0d:e4:d2:bf:e3:92:23:0e:
c6:71:4a:65:3b:9b:ad:36:99:c4:0d:74:43:0e:d3:
61:52:c8:77:0c:b9:a8:7e:48:6d:22:a1:1b:4d:45:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:0C:E0:97:4A:16:31:0B:C8:B9:A6:65:42:C8:32:20:6B:D5:B3
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:59:b6:70:18:a1:77:b7:b0:9c:5d:6c:7e:6d:80:1a:f8:8d:
27:d2:7f:cc:0c:b0:92:c3:62:32:06:78:db:7a:aa:d9:63:a8:
9a:4d:4e:b8:c1:b6:6b:23:61:fc:08:ac:1f:95:90:fa:70:80:
19:3c:d8:21:f6:b0:33:f4:6b:58:5b:32:97:79:f9:35:11:34:
cc:7d:ea:f0:cd:2f:ee:d2:99:c6:0b:c1:d6:fe:52:90:14:ea:
76:f7:0a:e5:ca:29:1f:48:74:bf:49:90:60:dd:03:dd:a9:91:
9a:5b:e6:80:3a:f7:2d:55:d9:dd:4a:92:4f:94:54:f9:60:6b:
5e:70:dd:b6:8c:8b:d0:9c:a2:76:c2:a3:94:72:13:55:7c:a1:
f8:ad:49:6c:fc:1e:c2:50:11:af:58:28:7f:d7:88:b2:63:82:
a1:0b:fc:fb:bc:1f:6e:cd:8d:b5:d7:40:e5:aa:6a:44:3c:12:
73:8f:e0:73:99:e2:25:d2:13:ab:63:0e:ce:c8:42:c3:ea:7b:
f6:f2:ca:74:eb:51:c3:fe:2d:d0:dc:fd:9f:72:46:e0:4f:62:
80:e6:ed:ca:a4:3e:b3:0e:19:66:22:63:f6:55:83:c6:cf:27:
cc:c2:0a:a4:8e:15:19:49:ca:58:ff:38:3c:e7:00:f4:08:69:
ba:cf:b5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:00:44 2024 by rpki-client on console-fra.rpki-client.org