Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: zOno+fumgxwxblqmeUN8TRSakN31RNjJNKadT3wOd7Q=
Subject key identifier: 42:F5:FB:89:C8:8F:DE:A8:CB:24:0A:E6:7D:C6:C4:6E:93:91:E4:C1
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 019355ACFE2B3F29705C372783294EDCB81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 0D63
Signing time: Fri 22 Nov 2024 21:00:20 +0000
Manifest this update: Fri 22 Nov 2024 21:00:20 +0000
Manifest next update: Sat 23 Nov 2024 21:00:20 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: NQoeh077xuHAHMzTdPt8SS+VfraY+uML5l1MRhbhniE=)
2: DugZSIywv-aykGs08d6SFaW2LYk.roa (hash: RY89hPM7XNzDa91cfspENoZbc/SIN4rE3y+rF3uqINQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ac:fe:2b:3f:29:70:5c:37:27:83:29:4e:dc:b8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Nov 22 21:00:20 2024 GMT
Not After : Nov 23 21:00:20 2024 GMT
Subject: CN=42f5fb89c88fdea8cb240ae67dc6c46e9391e4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:8a:bf:75:ec:8e:a3:bd:65:5f:18:72:e8:
26:a1:b9:d7:a7:ab:df:a8:1b:fa:d1:8e:6a:0f:21:
0a:c0:f7:7d:5e:02:26:1e:6f:52:69:92:be:fd:79:
5e:db:4d:ac:07:d1:df:e4:c5:fd:ec:da:8c:2a:a5:
ba:dd:4e:d5:c2:08:f6:63:4f:3f:7e:6a:73:67:3b:
41:c3:d4:10:83:f7:eb:72:d6:72:99:f8:f5:2d:2b:
2d:d3:ea:9e:0e:7f:4f:4d:b3:f5:52:c3:a0:3f:c3:
57:d9:5f:94:11:1f:50:82:73:ff:95:74:95:8f:ea:
0d:9e:76:c8:9e:4d:c2:ca:61:6e:fc:4e:33:e6:3a:
2a:6a:73:42:97:d5:dc:92:ba:00:90:eb:2e:12:64:
fe:15:74:d8:26:14:7c:8f:97:2c:62:e9:84:59:fd:
d1:08:0f:c8:22:f1:60:42:e8:0d:63:5b:9e:1e:d0:
80:13:03:91:39:99:c5:71:ae:88:4b:3e:a9:d8:bc:
80:48:25:2f:09:ee:ad:ce:2c:ad:78:32:dd:af:af:
44:de:cd:27:77:37:3d:8b:a3:96:20:d9:be:ed:d3:
f7:8a:15:d6:80:7b:8b:76:85:e4:af:bb:25:58:07:
49:18:8a:bf:62:80:fd:a0:50:ba:95:97:06:7b:2f:
9f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F5:FB:89:C8:8F:DE:A8:CB:24:0A:E6:7D:C6:C4:6E:93:91:E4:C1
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ba:60:7f:cb:e8:16:ec:17:73:2d:e9:33:3c:f9:6f:22:68:
4a:31:0c:3e:d2:71:8a:36:92:36:ce:86:27:3a:fc:6c:b3:87:
56:9e:ad:fa:49:01:fe:39:11:4f:59:9c:c8:b5:57:41:1d:73:
cb:e3:70:d3:b2:00:78:b5:e2:e7:77:32:26:14:5b:f4:01:48:
c7:3b:41:1b:a2:06:ec:f7:6e:66:57:ae:3b:c2:df:97:a8:0f:
7b:7f:ec:6c:e3:28:db:2f:fe:e2:f9:9c:67:ba:1a:40:cd:33:
32:63:f1:f7:dd:3f:dd:85:74:a7:a0:c8:f1:8f:dd:e6:29:9c:
f8:1f:c1:15:16:3d:9a:9a:39:ea:03:5b:9f:e7:cd:1c:1a:66:
41:fc:0e:75:df:58:5d:91:21:1f:c4:c2:30:2f:cb:ed:2d:00:
09:a1:20:98:a9:51:12:7f:ff:3e:6b:b4:f1:81:03:83:30:b2:
42:10:dc:1c:bb:bd:c1:e4:a5:03:57:09:0d:24:9f:f7:80:1f:
9f:72:03:0f:53:bf:14:01:8f:3f:eb:8f:42:8a:b6:83:2b:e4:
55:2d:a7:40:52:ec:8c:eb:b9:09:1b:15:0c:9f:07:85:1b:cd:
d1:a4:01:02:2e:8e:be:3d:24:9c:cd:64:f3:71:c3:7d:31:6b:
a8:22:d4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:25 2024 by rpki-client on console-fra.rpki-client.org