Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
File: lQCCqFlGcix_wchk8PvYDcVNzSk.mft (raw, json)
Hash identifier: Haliv/lnstNzTo3krPAbbjddiDksKu9NFPLBsP1ke4g=
Subject key identifier: 7A:DB:AB:C5:83:6C:F5:6E:5D:4C:83:3C:3A:CB:A0:B3:A7:9F:EC:18
Authority key identifier: 95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
Certificate issuer: /CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Certificate serial: 019351626B374585BD370BA249215C1EB250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
Manifest number: 05AE
Signing time: Fri 22 Nov 2024 01:00:24 +0000
Manifest this update: Fri 22 Nov 2024 01:00:24 +0000
Manifest next update: Sat 23 Nov 2024 01:00:24 +0000
Files and hashes: 1: l3E023J2mm3ufQ5qi4a3A4aztKY.roa (hash: UIDxudwS9OImTd8c0fponA0kEz1988CchPP+gRJHwr0=)
2: lQCCqFlGcix_wchk8PvYDcVNzSk.crl (hash: ftjQmrWi8kbOdNSAFNIAJXMe7VK0exWm2p4MrLXOiFE=)
3: rWU7qyJuILHz8HxyVvNjc7ZbA4U.roa (hash: JHTuyBo8nc6fcgqCOMQOAw2Q1Zo6OC6QKWRVcOvsTTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:6b:37:45:85:bd:37:0b:a2:49:21:5c:1e:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950082a85946722c7fc1c864f0fbd80dc54dcd29
Validity
Not Before: Nov 22 01:00:24 2024 GMT
Not After : Nov 23 01:00:24 2024 GMT
Subject: CN=7adbabc5836cf56e5d4c833c3acba0b3a79fec18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:68:b2:65:d0:e2:c6:8d:06:74:69:20:28:
64:c0:8a:ad:88:51:14:bc:a2:a4:85:89:a9:2a:0d:
f7:eb:b5:be:f7:2b:5a:1b:74:ff:1c:31:9c:05:84:
35:58:3d:bc:36:a6:9a:9e:e1:80:54:29:31:c5:01:
6f:13:60:5a:81:3c:b1:3b:c8:51:0c:ff:4e:22:a6:
fb:53:9b:6c:29:d7:82:58:cd:0e:f8:14:47:5b:69:
4b:86:9c:2e:07:c6:4f:5c:ba:e9:5a:4f:0d:d4:3a:
55:e3:b3:d4:f3:41:7a:90:36:0f:ad:31:8b:db:04:
07:94:7b:ac:ae:74:66:94:e4:ce:65:d1:de:0a:00:
c7:0e:d4:87:96:a8:9c:9c:d4:a8:2c:83:22:d6:ab:
20:39:e3:3f:81:6f:78:8b:fc:11:6e:8e:f4:4d:37:
33:0b:53:cf:4b:1b:45:db:da:57:55:99:d7:a5:21:
ca:13:97:c0:75:4c:ac:f7:b8:8a:f3:c6:2a:cd:33:
71:81:1c:5e:18:b3:d3:81:84:6a:41:57:18:24:34:
b9:40:c0:c7:52:97:d1:6f:0a:e7:65:21:5e:23:72:
65:07:24:6e:d2:58:9f:06:fe:79:e0:91:f9:08:f0:
02:6c:98:f1:d5:0b:51:b0:ee:c0:2e:9f:3a:04:88:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DB:AB:C5:83:6C:F5:6E:5D:4C:83:3C:3A:CB:A0:B3:A7:9F:EC:18
X509v3 Authority Key Identifier:
keyid:95:00:82:A8:59:46:72:2C:7F:C1:C8:64:F0:FB:D8:0D:C5:4D:CD:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQCCqFlGcix_wchk8PvYDcVNzSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/34e40f-e1d2-4d29-89c5-c69a7f03e18f/1/lQCCqFlGcix_wchk8PvYDcVNzSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:32:98:04:a6:7f:92:ca:f9:8a:a0:51:e5:e9:a4:68:d5:9e:
90:0c:38:8b:92:e6:24:16:60:13:dc:f3:28:75:2c:94:3a:68:
15:06:70:a6:94:43:31:4d:e0:fc:2d:6b:52:7c:6a:bc:0b:a2:
4b:ed:98:12:37:57:86:38:94:69:3a:79:62:34:5b:d7:36:8d:
9a:5f:a2:f7:ed:f1:eb:89:6a:7f:7f:34:42:00:75:6a:f3:dc:
b3:24:36:6f:b4:1c:ab:22:91:4a:08:93:ee:49:20:df:e4:a1:
87:df:b0:cb:df:26:e9:34:97:2c:3a:04:78:58:6f:52:57:cd:
d6:25:6d:c5:c1:76:3e:da:9b:c3:cf:53:5a:0d:98:1d:4e:63:
54:e9:de:69:83:14:b5:a2:e0:d6:f8:59:47:76:ca:4c:81:d1:
16:16:f3:ee:79:af:44:c4:75:00:eb:a9:31:a6:00:0f:2a:87:
52:ef:1e:24:1f:96:84:ba:00:7f:f3:dc:cf:54:ef:bf:e1:66:
e9:39:ff:6e:12:12:bd:57:8d:84:f4:87:e9:2e:40:a3:d9:30:
a5:f4:bb:7a:38:82:30:60:f5:cf:62:92:62:5e:89:4d:3c:1f:
91:31:b6:4b:22:5e:a8:26:ad:09:ef:9d:8c:e4:a5:4b:b5:ed:
46:7b:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:01 2024 by rpki-client on console-fra.rpki-client.org