Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: vNA/7mTb6220OURRb2WgKCPQoHEoOYrei+9mmvtf5d4=
Subject key identifier: 3C:17:6E:8C:63:B9:BF:79:09:62:CF:4D:CF:97:99:A3:AC:ED:D0:A9
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 019239CB46FBD73521B582606C3D1AF136AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 01A3
Signing time: Sat 28 Sep 2024 18:01:16 +0000
Manifest this update: Sat 28 Sep 2024 18:01:16 +0000
Manifest next update: Sun 29 Sep 2024 18:01:16 +0000
Files and hashes: 1: _-NFwzI2xGfyJvGLH9WaFm823Dk.roa (hash: RucIHj0PwZdgvfceYQaphYIXSd4VxMjes371/qIo/GU=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: xQfjoPb3YuVYkP0u97bBEwjEA2vOYx62LTjvAc3C09c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:cb:46:fb:d7:35:21:b5:82:60:6c:3d:1a:f1:36:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Sep 28 18:01:16 2024 GMT
Not After : Sep 29 18:01:16 2024 GMT
Subject: CN=3c176e8c63b9bf790962cf4dcf9799a3acedd0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:37:4c:9f:ce:d4:7d:c7:60:cd:67:f8:11:
4f:58:ed:14:6b:0b:94:b8:ce:d5:34:e3:86:83:aa:
61:81:e2:87:12:5f:1f:0a:c6:9c:b0:96:a9:a5:ab:
fe:27:3a:bb:ae:09:10:81:8f:24:a8:37:e5:32:77:
ec:fe:fb:7e:93:46:47:71:45:e9:6a:a5:ec:09:c2:
42:f3:ae:d0:46:f9:29:15:c9:61:68:59:65:2b:d5:
f7:ac:b3:1a:80:1d:33:e4:cb:a7:3f:44:34:50:af:
c9:68:52:6a:aa:d4:d2:c9:6e:ba:14:ea:56:07:de:
64:75:84:57:d0:05:7b:d4:ff:12:e0:1a:d8:2d:74:
39:33:e4:e2:a5:e6:7f:ef:cb:d0:8a:39:37:4f:96:
8e:aa:ef:13:cf:bc:73:ac:27:96:5e:71:5e:50:01:
bc:d1:38:ed:4e:a2:18:3c:66:8f:c8:4e:3d:f4:40:
9f:0c:82:71:ea:d0:a4:a2:93:e7:7e:81:a7:21:b8:
89:71:32:50:29:b7:84:bb:0d:f4:c8:eb:97:75:57:
54:09:c1:53:3b:66:28:38:40:6f:56:55:09:f9:c8:
6a:38:22:1e:9c:72:e4:75:49:b3:2d:ad:7f:a5:79:
85:d5:a2:a6:e3:65:2a:ee:f9:73:b7:9f:75:4e:b2:
fc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:17:6E:8C:63:B9:BF:79:09:62:CF:4D:CF:97:99:A3:AC:ED:D0:A9
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:8a:6c:c6:bf:87:73:c0:ce:81:4d:af:df:64:2c:96:d8:cc:
95:40:bf:cb:79:b2:fe:44:24:eb:dd:99:3a:02:dd:69:95:ae:
98:13:a2:26:64:cd:dd:87:20:0a:e0:4b:6e:de:8b:38:04:bd:
57:47:56:6e:99:d0:9c:51:33:0b:e6:f3:88:63:66:d0:07:65:
e5:1f:7d:8c:be:01:24:19:35:d6:58:4b:ed:4c:a6:d7:c2:73:
8a:fd:d4:93:ff:3a:ff:7a:2d:11:2e:31:92:32:1a:32:50:63:
84:6c:15:43:9a:05:0d:1b:ec:3b:e0:da:02:4d:c5:8d:90:ce:
ca:24:b0:95:45:b6:f3:1c:e6:fe:11:dd:dd:ec:25:d9:2d:41:
90:1f:a8:75:92:99:ab:c8:9d:72:51:96:f2:fd:e3:a2:ca:3a:
62:17:cb:59:43:28:b3:3c:34:ae:71:46:c5:f9:f6:96:7b:9d:
b6:09:37:2a:0e:ab:26:c0:ff:38:68:45:b5:91:54:fa:44:e0:
15:12:10:16:44:e6:1b:fc:a3:67:99:63:b7:c9:55:39:73:63:
97:5b:b3:e7:fd:8e:20:c5:3a:13:37:85:ec:d9:0e:e8:c8:5b:
22:b0:d4:6a:92:f7:58:31:16:86:89:90:43:8d:a3:76:f4:0e:
dc:66:78:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:24:58 2024 by rpki-client on console-ams.rpki-client.org