Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: 7wZ/g4c5hP9E2esHF7k2wMIuW0bhFPX5mY/2EBf0mKs=
Subject key identifier: 08:47:D2:4A:BA:80:58:B1:36:A9:79:67:8E:D1:A6:E9:7B:54:33:A9
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 019355AD780A74F8AB2D33491AD4778FA4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 0E98
Signing time: Fri 22 Nov 2024 21:00:52 +0000
Manifest this update: Fri 22 Nov 2024 21:00:52 +0000
Manifest next update: Sat 23 Nov 2024 21:00:52 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: WMkR+LN2/cwhfFTleAHB9eUi14l7/GaJ6O3fzq2eCs0=)
2: _OOqOvv2tnmm40HheICu6KlwTNA.roa (hash: 9Ftqc71I9jvMFmbevg66LwFq+W4fuDly3UPB0uWA5Gk=)
3: eIsbAVTtvwjbzODn5iVrkC-Xyy4.roa (hash: Iy9diirHOT9W9+mSq6ZMYdx2BoEK27CWCCpzZEWki0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:78:0a:74:f8:ab:2d:33:49:1a:d4:77:8f:a4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Nov 22 21:00:52 2024 GMT
Not After : Nov 23 21:00:52 2024 GMT
Subject: CN=0847d24aba8058b136a979678ed1a6e97b5433a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:1b:4a:c4:6f:9a:cf:8d:f3:7c:ea:74:bf:
85:17:33:c3:ca:79:da:82:35:cf:39:ef:3c:93:35:
5d:c2:d8:bc:49:52:f9:93:1e:81:d9:46:03:ff:cb:
2b:82:e8:f7:30:52:d7:e7:b8:16:c9:5b:9d:db:70:
a5:3d:aa:a0:42:ba:6b:96:4f:98:66:f7:1e:af:19:
bc:f9:63:35:f3:37:64:22:a2:90:92:72:b5:d0:ac:
a3:17:74:74:96:a9:d5:6f:f8:37:b7:cf:6c:a3:60:
ba:05:f8:f9:d7:94:e1:65:4e:0c:da:20:9d:b3:4f:
27:2b:1f:c1:3c:01:58:b5:4a:6a:bf:5f:cc:2d:73:
e9:87:3f:a2:08:b6:39:bc:10:e1:20:74:21:6f:d3:
62:1e:7b:1f:96:80:00:ad:86:8e:3a:64:bc:fa:b1:
a0:92:02:b7:29:5a:96:f8:ba:06:7d:3c:c0:5d:38:
68:be:d7:af:03:07:6b:8c:33:d8:ab:ba:f2:6e:a5:
47:e1:25:da:d4:92:f1:31:8d:d7:a7:21:c5:e4:02:
ac:77:63:a4:b1:bb:db:f1:e2:69:26:5c:a2:f7:b4:
0c:34:6e:48:ce:2b:7c:9f:35:8f:66:c2:a3:57:ec:
97:33:b7:25:47:fc:76:5f:b2:7c:a0:bb:5c:dc:6c:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:47:D2:4A:BA:80:58:B1:36:A9:79:67:8E:D1:A6:E9:7B:54:33:A9
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:87:79:20:47:3c:99:25:e0:a5:9d:50:28:ef:c4:95:99:73:
d8:94:e5:f3:1e:f4:60:a3:c3:f0:cb:49:c8:ee:7f:73:78:37:
84:bf:ad:bd:f2:41:f0:ef:1a:51:b4:1a:17:e5:23:3d:8b:b0:
ef:ae:3b:67:86:86:49:7e:c3:4c:cb:09:89:e7:7b:70:1e:66:
67:13:36:55:d7:0a:83:ad:f8:c4:7f:fa:b9:d8:a6:4a:38:e5:
5b:07:a9:fc:ca:8c:1b:05:ea:e0:d4:60:fc:90:61:76:fa:0b:
0a:8a:03:a7:d0:96:57:52:70:24:23:0c:39:8f:e4:5b:2a:ab:
37:f1:aa:28:7c:0a:c3:fa:de:aa:93:c4:1a:c7:28:27:8f:3b:
96:e2:01:1e:b6:23:44:fa:af:9f:01:44:00:19:6a:0d:f8:12:
3a:2c:ae:80:b8:57:94:14:a5:86:1a:52:3a:5d:5f:a6:c3:34:
ba:7e:b2:b2:28:4b:60:0f:38:3f:48:4f:da:0e:65:48:0b:c5:
01:b5:f5:6b:65:08:d1:8d:35:6f:0d:1d:34:fa:a8:34:cf:25:
89:44:4b:25:f5:8b:ae:e1:e7:75:17:b1:cb:0d:69:36:87:47:
54:8f:fc:65:cd:6a:67:a1:c2:58:8a:3b:53:79:e9:1d:78:59:
b5:d6:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:59 2024 by rpki-client on console-fra.rpki-client.org