Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: PGZD408FFmLSD17QX78IjJTYtvaxIIB7aARsbet5L0A=
Subject key identifier: 6A:3C:FF:89:40:9A:51:2D:D0:1C:FE:C1:40:7F:03:E0:79:A4:93:EF
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 0193512B723F142D85077497B84E160984EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 071B
Signing time: Fri 22 Nov 2024 00:00:21 +0000
Manifest this update: Fri 22 Nov 2024 00:00:21 +0000
Manifest next update: Sat 23 Nov 2024 00:00:21 +0000
Files and hashes: 1: 8mgyKL5JdoezY5GwhUoH5TtVQ6Y.roa (hash: rXB6GN58t8t0MO4+LXQp+0ETWMNh+LdAWiBythcI/iw=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: 3+uHz8nIWnOP83BiE2wQzdsegWaqxReEQ9W65z7ag5Y=)
3: YgUdbDUdyM5lUkp9odKZnQYam2A.roa (hash: UDUDReT32YKnQvlFjq9g1XwtGaZst5ZU3XfehH/3OGY=)
4: jcFI-ekKZNozOosuJR1xcS_qQvg.roa (hash: yPbX1ca3a9UwTSyn4X8m//45U9nOfK/7NbBOJdx65qs=)
5: jz5vBvgC6HuleZ6VUaz3tzuT9lM.roa (hash: TWLgCGfAGrYQphka8eJdJMEqxRBpB1E9IE2GJjgf6AI=)
6: nBJnCjb07SiLfyU-5Le2Qt5OZRg.roa (hash: aRBKEcYDkCTClqUioLLJzALVwX0+5wv4FLfe61OcUFQ=)
7: roGzy9Hh3diM6nB74033mpvoFU0.roa (hash: 3bgXUeRKM+BmH6+/kZBTTLiMoDlqx70jhCXZL96syqs=)
8: tLiRdZP522eC3NYuIzRy2QoF5H4.roa (hash: trzTZz+yqegl2GvHbTH4XX/ON0hrHMW62DxevK5rVsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:72:3f:14:2d:85:07:74:97:b8:4e:16:09:84:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Nov 22 00:00:21 2024 GMT
Not After : Nov 23 00:00:21 2024 GMT
Subject: CN=6a3cff89409a512dd01cfec1407f03e079a493ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:c9:06:f5:78:a3:48:7b:0d:cb:cf:04:da:
f5:2a:6d:5b:75:70:5d:93:f5:74:0b:bc:0b:ed:58:
f1:df:bc:0c:d7:aa:5b:5d:a1:58:92:00:20:6a:b4:
1d:f0:21:4f:f8:4b:db:59:c8:e4:2a:a2:49:62:4a:
a6:fa:e7:8b:e8:ab:59:83:c8:57:e3:a9:b2:da:a6:
a2:a8:a5:70:b5:05:3d:36:fc:92:e4:ff:14:3e:6a:
a4:f6:c5:79:14:81:b2:05:cf:33:9c:6e:57:df:3d:
44:fa:3d:6c:0c:9b:58:4c:2b:b6:54:57:56:4d:86:
71:be:31:cc:4d:9b:c7:a8:c1:5c:53:04:f0:d5:ea:
48:93:50:e0:33:bb:28:64:ca:53:ee:a6:10:93:5d:
9d:a0:4f:7e:8d:90:0e:fa:dd:ff:29:c7:d7:3f:b4:
a6:62:3a:f8:ee:ee:27:b3:cc:31:7a:4d:59:ed:39:
1a:e4:35:e0:39:34:47:1a:71:04:d2:9b:d8:78:4b:
b1:fe:85:9d:48:97:da:87:09:c0:96:39:e9:62:a6:
9d:df:e3:53:60:28:06:ca:b4:16:e7:a0:95:6e:a0:
ea:4d:6a:dc:b0:3f:a4:13:b6:f3:6e:22:7b:88:94:
8f:08:84:8e:45:6e:ff:e4:03:3a:7d:05:aa:04:e7:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3C:FF:89:40:9A:51:2D:D0:1C:FE:C1:40:7F:03:E0:79:A4:93:EF
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:18:f2:b9:c6:ef:98:4c:72:34:3c:cc:fa:f7:60:1a:33:6f:
cb:15:6e:3a:77:31:2b:68:79:28:3e:80:a7:21:56:e3:54:54:
7a:6e:77:56:e3:4c:13:ee:1a:e7:15:fe:25:48:65:57:7e:34:
a7:b8:c8:c2:56:20:de:02:32:4f:cd:d9:a1:30:93:c3:6e:ea:
61:c3:4f:1e:78:10:a8:c8:de:27:d7:02:08:b0:43:e3:4a:d7:
36:f1:34:d1:42:cf:89:07:51:67:da:99:c3:2a:0f:1d:81:66:
cc:58:67:3e:05:5f:65:8a:c0:47:88:cb:53:a5:d4:2c:ab:b6:
4f:c6:fb:a3:aa:79:1f:96:8a:77:ad:67:c0:99:8c:8e:3d:b1:
65:34:f1:b6:01:a3:d2:27:9f:55:6c:eb:41:de:d4:59:e1:57:
a2:25:02:76:d6:bb:0a:3f:03:fb:64:19:96:32:3b:a1:75:9e:
1d:fc:9f:49:48:d6:4b:b4:6f:f6:e2:fe:35:60:b8:72:3e:b9:
67:2a:d5:f8:28:57:25:00:6e:02:99:9f:60:99:13:78:b5:e0:
70:96:5c:18:a6:95:1c:b5:2b:65:44:94:18:28:a9:09:fe:a0:
e0:94:7a:f7:26:ad:42:df:99:ff:f5:f5:15:70:57:97:50:4c:
df:41:6e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:08:15 2024 by rpki-client on console-ams.rpki-client.org