Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: eYVypmkYYTW+c34F2vZOSPl5QTvjcs+uDTBVjPLc2Fc=
Subject key identifier: C1:19:AB:6E:30:F2:F2:E9:36:C3:E9:66:77:BD:F5:4D:8D:37:11:16
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 0193572D9F7307160BBD676DFD0102DCD7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 04:00:27 +0000
Manifest this update: Sat 23 Nov 2024 04:00:27 +0000
Manifest next update: Sun 24 Nov 2024 04:00:27 +0000
Files and hashes: 1: K9O_AUAjluDbeKtudj19f-t7EVc.roa (hash: OU0eez9gPmMhzMQhPUFhmYrJEMpOaT65EQovM9Ubnjo=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: tFmGn7ocUQyrjWZNeXWvMOGD2MEaFMbXyxwCnozJghc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:9f:73:07:16:0b:bd:67:6d:fd:01:02:dc:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Nov 23 04:00:27 2024 GMT
Not After : Nov 24 04:00:27 2024 GMT
Subject: CN=c119ab6e30f2f2e936c3e96677bdf54d8d371116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:ad:cf:70:78:42:8e:1b:2c:c6:0b:a7:95:
a7:6f:e2:87:35:55:55:fb:fe:1e:06:10:35:9b:57:
71:42:13:01:41:d2:88:ed:57:a8:2e:98:6a:cd:25:
ce:14:f8:68:75:de:95:2c:10:1f:58:37:8d:de:6a:
95:9b:75:fc:01:17:b4:d5:1b:29:41:5c:69:dc:58:
e8:19:e3:05:f5:22:ec:d1:c3:8d:74:31:2c:37:d2:
ff:70:d2:4c:11:78:8f:0e:fc:df:8a:c0:8a:2a:20:
dc:0c:67:c2:83:41:99:e0:25:89:6d:01:ff:8e:b3:
ac:fc:75:10:62:75:e2:1e:ca:ef:11:32:eb:ed:0d:
bf:b1:4d:14:5e:99:7b:5b:6b:d6:6c:7b:d0:96:99:
30:0d:ea:89:6a:1c:eb:e8:a7:fb:83:1c:82:b2:53:
68:dc:61:53:c5:56:2a:74:ed:2b:33:58:20:2d:ca:
dc:be:5b:27:7a:4b:f8:cb:ea:c5:ed:c8:9c:a3:67:
c1:aa:bb:0a:36:85:c7:94:81:55:62:7f:a4:e2:d4:
53:fc:5c:6e:c0:45:cf:73:3b:fb:fc:5e:dc:d2:48:
b3:9d:de:0c:45:70:bd:ee:df:12:00:7f:f4:71:2a:
9f:38:40:2d:7e:7e:49:98:82:62:ca:3b:46:2d:cd:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:AB:6E:30:F2:F2:E9:36:C3:E9:66:77:BD:F5:4D:8D:37:11:16
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:44:34:df:ea:34:a5:52:82:29:70:0c:93:04:cb:28:ad:8d:
63:0a:cd:7a:ef:92:07:9d:71:8b:5f:99:e7:45:c3:81:2f:b6:
b5:31:2a:20:3b:36:3e:12:ae:d9:5c:6e:64:9a:d1:23:ec:d6:
18:4b:34:c3:94:90:aa:41:2c:b0:ba:92:84:55:76:4a:c3:d4:
7d:eb:1f:a9:7d:4d:5d:93:ec:61:6c:26:b2:6a:36:75:6c:28:
6b:89:9b:25:84:e3:30:af:8b:12:ba:83:12:c0:91:5a:05:57:
80:6a:2f:33:36:f7:6d:4d:e0:95:5b:bb:26:4c:ac:3e:2b:88:
41:cb:d6:d7:91:1b:5b:eb:ec:6e:75:bf:00:90:11:c0:f0:40:
af:50:8c:00:f8:ae:ee:f7:41:57:52:52:31:b7:d7:3c:b3:42:
c8:2a:2e:18:16:e6:be:16:80:c1:f5:d4:94:e0:69:a4:b6:36:
26:f0:19:a5:17:e5:1d:e9:ec:62:50:c6:e0:de:fc:41:6e:df:
1d:7d:b5:d7:e9:ee:21:df:a7:37:cd:71:13:d0:60:ae:c7:a2:
12:d6:97:17:ae:c7:24:83:7d:69:92:68:66:cb:64:cd:44:29:
4a:e6:cd:a1:d3:45:b5:ba:81:63:bd:ec:35:8a:dc:24:f7:ce:
38:8f:88:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:41 2024 by rpki-client on console-ams.rpki-client.org