Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: 2u/9oT7PHFfOnNDudYyLt5hL6/ahYzBcXcdZT6jZMFA=
Subject key identifier: 4B:DB:0C:95:EF:9A:71:25:BC:01:08:79:A3:B1:92:46:15:79:73:A9
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 0193658DFCE0DF32D19983223B9AF6279341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 137A
Signing time: Mon 25 Nov 2024 23:00:24 +0000
Manifest this update: Mon 25 Nov 2024 23:00:24 +0000
Manifest next update: Tue 26 Nov 2024 23:00:24 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: QLdmkGvLMD0q8MUVguA5hVmHdTlBXnU2qkXViQmIS30=)
2: VbTT5KgG0WXOj8pBcAwZ-ueri94.roa (hash: Zr+4MWG1jiJ0tfiDnsxm7NZ/VEkBwJXAl6KErYiAzuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:8d:fc:e0:df:32:d1:99:83:22:3b:9a:f6:27:93:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Nov 25 23:00:24 2024 GMT
Not After : Nov 26 23:00:24 2024 GMT
Subject: CN=4bdb0c95ef9a7125bc010879a3b19246157973a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:72:39:1c:10:30:f2:d2:66:57:30:ce:5c:
19:19:ac:61:5d:dc:c3:dc:b6:da:88:2f:8e:ac:83:
c7:37:da:b9:57:e7:cd:23:27:bf:ab:5d:6b:be:33:
65:2c:3d:4b:ef:62:b0:03:a0:c3:a6:5e:74:c1:a7:
74:2b:c1:9f:3b:9f:7a:7a:b4:35:9b:ed:f2:4b:25:
c1:21:8d:fd:55:23:be:c8:93:7a:c2:a9:cf:60:6d:
3c:96:0c:29:93:53:85:9d:a6:09:f2:72:51:35:87:
e9:42:f3:08:5f:e2:7f:59:32:8d:79:b1:eb:97:02:
f2:81:0f:4e:56:15:6b:26:a7:69:fe:de:f2:b7:c0:
5c:4e:fd:35:26:db:f3:80:57:69:72:de:07:b4:1e:
57:d5:36:72:3a:9a:fa:bb:c8:f7:38:27:91:e5:ad:
76:23:d4:45:c5:96:b7:06:8e:e5:81:92:16:97:4b:
18:77:f6:a0:69:52:57:52:52:be:87:c1:ab:fb:17:
7a:83:27:b0:73:13:4c:ec:03:82:0b:df:38:99:b0:
48:14:fb:56:8c:93:d9:0b:37:84:69:01:5f:24:6d:
fe:80:e1:b1:9d:05:6d:42:4d:0d:5c:b1:a7:20:ba:
e0:c4:9d:fb:f3:a2:84:d0:d3:e6:cd:d3:2f:d8:7d:
ca:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DB:0C:95:EF:9A:71:25:BC:01:08:79:A3:B1:92:46:15:79:73:A9
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:60:a6:e9:35:42:4e:e6:f4:c0:f1:96:d5:7b:5b:49:ac:5d:
4f:3d:df:b4:ec:29:8d:c5:5e:2a:ae:fc:a8:63:1e:78:5b:bc:
81:66:a8:c1:c0:82:53:02:dc:b5:a8:72:d0:31:4c:4e:93:a9:
ff:bb:c7:cf:0d:a7:22:a1:99:9a:78:0e:f3:71:17:41:b3:c1:
7e:26:82:e7:49:85:64:eb:ec:c9:a6:50:05:26:3a:ad:fc:7f:
1c:93:ef:28:aa:0f:bd:19:2f:41:b5:c9:19:c6:6c:51:fb:d9:
24:f0:c5:af:f6:7a:d2:53:15:b0:0d:95:32:5f:b0:4e:e5:f7:
06:dc:c4:a3:24:e9:39:54:52:2b:3a:a5:9f:58:49:1a:d3:35:
be:be:09:dc:ba:bd:05:d5:b1:ef:e7:53:5c:e0:3b:21:40:8f:
d0:15:57:3c:aa:93:c0:81:78:52:bf:b0:97:ca:83:88:70:88:
56:fc:5e:8d:3f:87:5a:fb:d9:c3:3f:2d:68:a6:58:23:1b:99:
a2:29:50:8f:68:82:91:54:0f:b3:c4:e9:ab:15:64:e2:6e:99:
11:04:d2:be:e9:52:ac:28:7c:91:a1:e2:d0:a0:d9:6e:2e:b8:
fd:9d:88:e4:5e:2a:68:3a:81:4d:a3:b3:53:5e:b9:ad:80:8a:
0e:7a:da:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:55:22 2024 by rpki-client on console-fra.rpki-client.org