Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: BmgQtvCLwNz0/S8+myrRxyhkEC19elihX8/rdpfReMQ=
Subject key identifier: AE:20:D6:90:CB:A1:1B:D6:23:8D:09:4D:F9:B1:53:83:0D:21:32:E3
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 01935764DA0CB9CB1F7F6892B53F9ADE19CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1379
Signing time: Sat 23 Nov 2024 05:00:47 +0000
Manifest this update: Sat 23 Nov 2024 05:00:47 +0000
Manifest next update: Sun 24 Nov 2024 05:00:47 +0000
Files and hashes: 1: 7EDjoF5mutdcAJvIdfxor5LfZp4.roa (hash: O7ykZyXLu8J+CJMyCpWG1jkMtL50tJC56CgoAtaouX0=)
2: VqJ8qkKoUSeZMK2n0OV3oiNzk4Q.roa (hash: Fm/3JAW+LkJlCVJjJiLbVSwtKPVWANU2oe6Ari4QbLM=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: Et+wRwH2BFt1kQJl6xmKWEc+AcAuceFcRi+336emMn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:da:0c:b9:cb:1f:7f:68:92:b5:3f:9a:de:19:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Nov 23 05:00:47 2024 GMT
Not After : Nov 24 05:00:47 2024 GMT
Subject: CN=ae20d690cba11bd6238d094df9b153830d2132e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:22:49:80:ce:d4:19:1f:9d:7e:2f:76:33:
5d:ba:1e:d1:87:60:8a:4f:0f:30:33:9e:8e:c2:c7:
82:4c:60:e5:ad:5d:f2:67:c5:d8:2b:8f:5b:5d:fd:
b3:26:12:b6:bb:8c:a6:ac:16:74:da:5b:f4:13:e3:
7b:b0:b3:6b:0f:2c:f0:96:c4:44:52:f3:e6:03:50:
0f:2e:0b:d1:88:ef:b8:17:33:82:3e:de:1a:a3:92:
a9:a8:d8:83:56:86:df:cd:d0:02:7a:3d:8a:bc:bd:
6c:7f:c6:37:7d:a0:68:4f:27:d3:b6:ff:68:fc:30:
54:38:b3:ff:a8:10:c1:28:71:21:2e:92:c3:6b:2c:
ec:6f:3a:87:23:bd:4c:31:99:e5:fa:1c:e3:c1:38:
28:eb:e0:f3:a3:d7:3c:f2:44:9b:9f:14:29:85:19:
c1:a3:ea:d3:2b:9e:b9:76:1d:fc:a3:e9:fa:ff:ff:
21:5e:ac:81:af:8c:6f:6a:cf:13:88:63:5a:91:d2:
51:ef:c9:20:27:20:d6:40:79:7c:dc:3b:51:7c:03:
24:0e:ef:58:9c:3a:95:14:29:77:4a:2b:81:7c:18:
d4:77:44:38:19:ce:c3:b6:45:1b:10:df:87:0e:6f:
00:31:e6:02:a3:62:a4:c9:47:42:bf:a3:c0:18:2a:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:20:D6:90:CB:A1:1B:D6:23:8D:09:4D:F9:B1:53:83:0D:21:32:E3
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:52:27:a5:63:b2:17:f7:28:19:9c:03:b6:43:10:8b:84:b3:
50:dd:85:6a:c4:fe:e7:3c:4c:b5:3c:c6:31:90:8c:89:3a:a2:
cb:31:84:96:e1:89:75:d6:8d:c8:f4:68:59:6c:43:d8:3f:7b:
a1:5f:6b:7a:3c:47:69:01:6b:a9:db:be:d0:a3:28:0d:40:d1:
c8:72:5e:25:17:0d:3d:f2:78:a6:09:3d:f0:61:cd:3d:f4:09:
ce:22:35:f3:86:64:63:c6:b2:af:50:f9:6e:4f:59:9d:9a:c5:
5b:40:4d:ec:a3:a6:35:69:44:cd:a8:18:44:5e:43:9b:19:d9:
83:b1:58:44:62:25:5e:67:fd:39:eb:d7:5e:77:f0:12:af:f1:
0b:25:f3:5f:75:d5:02:a8:57:38:5d:be:0f:a6:45:88:87:3c:
9c:2b:56:f7:bb:41:d0:d4:37:13:eb:36:25:8f:ef:7f:a2:4b:
f3:9e:e8:2f:d6:0b:9e:df:aa:d7:f1:e0:81:a4:e0:5c:f7:e9:
c4:28:1a:d4:8d:fd:f1:a4:d5:f5:22:1f:1d:00:ff:59:18:9a:
3b:a0:cc:59:b9:2f:2b:3e:19:28:17:77:16:b2:ae:85:7a:38:
d5:a5:86:0d:bd:f8:49:f9:8a:87:dd:90:da:85:f4:02:5b:ef:
1b:c9:86:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:51 2024 by rpki-client on console-ams.rpki-client.org