Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: nVH48iNPMA26B4XvX830xCADqttodl4426u3JjtP17g=
Subject key identifier: 74:29:97:E0:DB:FC:C7:D7:61:BD:5B:69:78:D1:F7:F0:E1:3E:24:D6
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 019358E5558F57F3BEFCEA2FA66AE2764ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0C34
Signing time: Sat 23 Nov 2024 12:00:44 +0000
Manifest this update: Sat 23 Nov 2024 12:00:44 +0000
Manifest next update: Sun 24 Nov 2024 12:00:44 +0000
Files and hashes: 1: 02u4PN8vTV2Ha0mP9vjfkcZUX00.roa (hash: PUjoWymbVBiy90QHISqzivHb8J8X7UyTKc8QpGLCNGk=)
2: 6AM8y_dMjP48BJUqzQRGoOjTUqc.roa (hash: oFRfiyi6Q70rs3mjQuvmw7EDRFzpqA/2oNZ183ASnnE=)
3: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: r/fE5KzLM4C/FKZBPQUa0gYW71WLe+IaAREsgneICqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:e5:55:8f:57:f3:be:fc:ea:2f:a6:6a:e2:76:4e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Nov 23 12:00:44 2024 GMT
Not After : Nov 24 12:00:44 2024 GMT
Subject: CN=742997e0dbfcc7d761bd5b6978d1f7f0e13e24d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:c7:c2:f4:71:db:34:ed:15:a9:0a:2a:77:
ab:d2:9b:03:52:0b:89:3e:a7:c7:01:ef:43:82:80:
9c:39:5d:dd:cd:5f:7b:eb:37:55:e9:1b:6d:3a:06:
76:ef:63:c9:75:a1:28:77:bf:35:56:de:95:9a:ed:
a3:42:98:cb:f1:c1:ca:d0:88:82:82:db:43:a3:32:
68:7b:5c:16:5c:33:fe:4a:42:61:77:18:25:d9:22:
88:0c:5e:89:e5:fe:14:59:37:9b:9d:d8:1b:e6:24:
eb:92:4e:1f:31:e4:89:73:9a:a7:4a:aa:99:65:2f:
4b:ff:6f:3b:a4:9a:12:a0:fd:67:a1:06:cd:c9:bd:
bd:89:54:b3:a7:25:ba:df:bb:28:50:d3:b6:73:92:
a8:90:22:f8:1d:75:6a:ee:00:f9:d1:42:f5:3a:49:
2a:17:7f:23:08:65:5c:d3:bc:97:f0:10:6d:99:1c:
fa:95:ee:0a:f8:66:fd:72:80:2c:32:81:4c:3a:43:
6d:34:d8:03:b9:d1:46:36:d5:48:b9:fc:f0:54:66:
b5:df:49:e4:17:7b:fc:63:7a:1c:fb:93:f1:11:19:
b9:b6:f8:0f:80:c8:9e:66:4f:4e:f5:fa:0f:18:53:
bc:a4:b9:d5:f2:bb:c5:4a:86:c1:a2:fc:1c:c2:d8:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:29:97:E0:DB:FC:C7:D7:61:BD:5B:69:78:D1:F7:F0:E1:3E:24:D6
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:12:55:10:dc:3c:d5:9b:cf:75:eb:20:14:b0:54:29:92:7b:
11:c5:96:88:3c:54:2e:20:1e:c4:50:96:a5:7e:6e:be:46:54:
d9:7c:61:40:9b:8d:71:1e:7d:6d:a8:4f:77:03:cd:d3:41:10:
36:98:4a:bd:96:b0:98:e0:77:0b:07:e1:63:42:12:a6:52:ad:
52:c9:29:b7:1f:97:ab:5c:4b:e1:b9:8d:b3:46:d1:8a:fe:94:
40:f8:b1:bb:c0:42:e7:2b:c5:34:b4:76:40:14:87:44:2e:79:
73:7b:89:6e:36:65:c0:70:52:09:fb:25:aa:a9:0f:35:51:67:
e9:a0:00:b1:d5:a3:d8:2c:90:70:55:58:bd:b3:d8:36:ff:17:
ab:c6:be:f5:79:e1:ae:4f:a9:a3:c3:5d:77:79:a7:15:61:3a:
58:84:8d:f0:66:3c:0a:eb:81:d2:d3:21:60:02:9c:3e:7c:24:
da:76:a6:5c:34:5c:4e:f8:d2:9e:53:c4:b7:d3:90:dc:f7:17:
07:73:7e:2f:aa:d1:59:9c:41:94:45:84:b5:1b:79:3d:9c:c9:
a3:66:97:8c:16:18:32:43:08:50:4d:d6:57:e2:db:cf:3e:a2:
6a:29:bd:e7:2c:78:59:55:2f:4b:a8:e7:16:57:ca:d5:48:c5:
77:37:00:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:21:20 2024 by rpki-client on console-fra.rpki-client.org