Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
File: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft (raw, json)
Hash identifier: rgE3P9v7YVGz/rrFLkUmcdggxM7/R/AkjMDQ4Ncg2Jo=
Subject key identifier: 07:FE:09:4B:7C:AD:C8:41:7D:E4:F4:8C:52:94:A5:27:2F:53:AE:3F
Authority key identifier: 96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
Certificate issuer: /CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Certificate serial: 01935952D26F019FBFBE21C458D50B731D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
Manifest number: 1303
Signing time: Sat 23 Nov 2024 14:00:20 +0000
Manifest this update: Sat 23 Nov 2024 14:00:20 +0000
Manifest next update: Sun 24 Nov 2024 14:00:20 +0000
Files and hashes: 1: lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl (hash: 1x/TKo8Hmj5Z4FSLLU+ruPntFHoPWWRqKOlvEYrwVeA=)
2: qv5Eypl_M9NfA-7sbSKNxh214Wc.roa (hash: 7iotyk17UfzVuS9BpxS1b59UAXsD4n9NBEzaMpvTzUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:52:d2:6f:01:9f:bf:be:21:c4:58:d5:0b:73:1d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9611264bb9e4e6fa99449ee456c5d053f3ad01c5
Validity
Not Before: Nov 23 14:00:20 2024 GMT
Not After : Nov 24 14:00:20 2024 GMT
Subject: CN=07fe094b7cadc8417de4f48c5294a5272f53ae3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:e8:8d:61:51:c0:7e:4f:b3:aa:6c:84:86:
2f:98:61:c8:4b:bf:29:c2:d5:ed:b2:84:38:1c:8a:
bc:63:3c:5d:33:18:13:16:e0:42:43:bd:59:33:04:
1d:af:50:31:de:80:71:49:e3:75:e1:e5:72:37:0c:
9f:6b:d6:3f:d9:f8:0c:61:6a:b9:1d:f1:28:f0:d5:
7f:a2:32:2f:6f:2b:18:6c:26:74:91:fb:b0:24:ba:
2c:12:9d:f3:cf:52:8d:02:fa:ce:a9:b1:f0:0b:d2:
3f:94:12:95:98:11:f7:77:cb:90:3f:3d:04:5f:dc:
5c:d2:25:48:10:3a:3d:29:70:15:8f:2e:6d:6f:cb:
29:37:b6:d2:c6:6a:b0:dd:26:6a:59:cd:a9:8b:b7:
38:36:9e:9d:4b:29:d0:5a:20:f4:3e:50:df:e6:08:
35:5f:ec:dc:d1:60:2a:0f:1c:c6:00:c6:5b:dd:ad:
88:b0:84:e8:c9:1d:b6:02:35:ae:2b:1c:e0:3d:e8:
f6:4f:8c:0a:1c:ca:c1:bd:12:24:b5:05:c9:85:77:
07:1e:71:b2:0a:4e:c3:63:f9:55:d6:8a:6a:6d:5a:
d0:c5:7c:01:b0:47:f1:aa:27:5a:c9:95:54:67:2f:
a0:34:7a:25:10:a4:87:97:f1:d4:9e:95:bd:3c:fa:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FE:09:4B:7C:AD:C8:41:7D:E4:F4:8C:52:94:A5:27:2F:53:AE:3F
X509v3 Authority Key Identifier:
keyid:96:11:26:4B:B9:E4:E6:FA:99:44:9E:E4:56:C5:D0:53:F3:AD:01:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/60e9a0-c9c1-41e9-89fc-24b676b56783/1/lhEmS7nk5vqZRJ7kVsXQU_OtAcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f9:ea:d8:c7:77:04:f1:46:16:43:10:bc:7d:fa:c4:74:42:
b8:e8:55:31:12:09:1d:21:53:16:b1:4a:8b:9c:a9:f7:76:2b:
86:0f:d1:4d:8d:29:aa:f1:d4:4a:39:af:48:db:bd:f8:da:c4:
16:78:5a:a4:d2:42:39:76:05:8a:61:de:e9:e0:0c:a9:89:f4:
61:80:d9:26:c5:a7:9e:f0:b9:7c:54:d7:bd:79:68:99:ec:31:
21:7a:d1:f9:71:e8:aa:a2:6f:4b:2f:62:f2:4d:9e:4b:da:e8:
c3:9a:9f:04:8d:ef:8f:99:3d:c1:6a:fc:3e:af:2b:72:e0:5f:
bc:62:8f:40:77:4a:a3:81:2f:c4:6f:e9:52:19:70:18:68:cb:
35:bd:1e:8b:ed:f7:56:5a:b0:6f:7f:d6:97:fc:c4:99:2b:5d:
41:2e:7c:07:e7:aa:fa:7b:45:1c:bb:62:6b:6b:14:58:1a:fa:
7b:48:c6:4e:8d:74:f1:8b:ea:f9:2e:b3:8a:93:c1:14:6c:b5:
fd:ff:6b:99:51:a5:01:cb:e7:a0:70:22:3c:99:74:db:93:30:
e2:19:60:bb:2f:82:bf:5b:23:64:4d:f5:f3:7d:0f:4e:05:87:
b0:41:6c:db:60:6d:02:c7:2c:04:f0:8f:b9:a4:e5:20:72:f9:
88:41:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:13:45 2024 by rpki-client on console-ams.rpki-client.org