Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: 0+y+bEVNNn7z8FmHPEUpRaBS2XU8/C82ZJxeagCGrnU=
Subject key identifier: B3:63:6C:4C:2D:A6:52:27:28:CF:E3:C6:8C:16:70:82:90:53:6A:EB
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 019352E2F047DEFD0568ACD0403BBD9D11BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 0282
Signing time: Fri 22 Nov 2024 08:00:24 +0000
Manifest this update: Fri 22 Nov 2024 08:00:24 +0000
Manifest next update: Sat 23 Nov 2024 08:00:24 +0000
Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: 058nh498xCV1IFaFoYEbzU/ZyEAMBSEqp9Lrrj8tzFE=)
2: RMtRh7hA4Izv7CELZYhidM87M9I.roa (hash: qbI3+tlLk7l8eSeB/X1zjpiNeq2nSp1gn7t3ApZ0Mn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:e2:f0:47:de:fd:05:68:ac:d0:40:3b:bd:9d:11:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Nov 22 08:00:24 2024 GMT
Not After : Nov 23 08:00:24 2024 GMT
Subject: CN=b3636c4c2da6522728cfe3c68c16708290536aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:06:d9:c8:06:1a:80:6d:70:72:28:0b:27:
1e:3c:a8:65:07:e5:d5:af:7a:83:8b:4a:59:c0:67:
1c:d3:5a:8b:98:40:45:ac:c8:f6:7d:50:47:c6:b2:
7e:ec:32:c8:da:ba:88:76:49:7b:a0:19:78:55:b2:
dd:02:e6:5b:2a:6c:c4:fa:3d:9e:59:d1:70:ef:2b:
d7:e8:15:58:be:52:be:fa:fd:e7:96:48:9e:c6:81:
ef:d9:68:fa:3c:f0:34:bf:4f:ce:2c:17:2f:d6:7e:
4f:f6:99:bb:24:03:3e:e7:ea:58:9d:e3:d3:f6:74:
f7:48:89:d9:25:93:74:64:40:06:7b:93:69:57:76:
a7:64:76:4d:6a:02:fb:e7:8f:2b:21:30:5d:e4:a9:
d9:f8:ce:57:fb:74:33:dc:91:50:8f:92:ea:8d:1d:
29:64:1c:9d:20:96:95:25:17:cc:a0:ab:b6:a7:6d:
0b:45:79:93:4e:75:33:c2:4c:6b:77:3a:e5:ea:dd:
19:0f:4e:fb:23:18:c3:29:c2:96:54:b9:96:b1:b9:
03:95:4f:6f:2b:53:76:43:9e:41:62:db:70:ee:35:
01:41:24:69:a2:39:a8:71:d8:06:10:43:4c:da:a4:
4f:69:12:7f:72:57:b1:e6:38:20:df:7d:20:02:af:
d2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:63:6C:4C:2D:A6:52:27:28:CF:E3:C6:8C:16:70:82:90:53:6A:EB
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:08:56:17:b9:63:50:22:10:98:ee:9e:32:fd:26:54:40:71:
f7:73:b3:7c:98:ab:4e:2c:ca:45:58:03:6a:37:d9:22:43:f5:
d5:ab:23:86:21:2b:0f:e6:f3:13:ee:f6:3f:59:1b:04:2e:70:
a4:da:f1:e3:c9:c0:77:9c:4c:70:9b:5c:6c:e1:1d:01:0e:fa:
6e:56:56:a9:5e:99:9d:a0:a4:21:c0:d6:64:97:2f:b3:d5:ee:
96:9d:6f:79:a4:2d:fa:12:b5:b0:3c:31:48:09:4e:a7:ca:0e:
2b:b2:0a:b2:88:7a:95:5e:84:a0:a4:ba:20:81:a8:56:17:21:
3e:79:2e:f1:f6:e8:7b:01:6a:2c:4b:db:c7:26:d1:7a:76:d9:
be:31:6c:a2:fd:45:91:74:30:58:01:29:ed:09:48:15:b2:6b:
0c:57:71:dd:c9:4c:f6:23:6d:20:4e:6e:1b:3e:96:63:4e:00:
21:45:c9:9a:47:1f:b7:72:33:aa:54:4c:46:ba:14:5b:d5:1d:
d2:e3:38:72:69:69:0a:9f:b6:16:8d:a1:63:f9:26:07:23:ec:
81:99:f4:28:80:bb:25:32:87:11:6f:5a:a9:76:9c:30:90:14:
51:c8:fe:42:ee:3c:f2:31:28:f5:e5:79:1d:c9:6b:61:4a:ed:
de:3f:b5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:08:24 2024 by rpki-client on console-ams.rpki-client.org