Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: uhGKiMQRuVWrtk2UJCKw+FAp/cTsneYS/ILfuv30la0=
Subject key identifier: 2E:58:EC:E9:B2:B8:A9:12:80:D3:CC:D4:1B:82:6C:B7:D5:90:C6:F6
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 0193549A5A7F5D724BD2F70A96A4BF07D97B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 16:00:21 +0000
Manifest this update: Fri 22 Nov 2024 16:00:21 +0000
Manifest next update: Sat 23 Nov 2024 16:00:21 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: VoSC9GmrNhtglk4khixaleUQVgloDLrNHwlbZmxURWw=)
2: Dev76wqFx3e01cvB7tF4t_4UoR8.roa (hash: 7dATm7/QGlBIvPtlpTxLo/02+ZH05lYpgVFauXVWlRY=)
3: IQYaVRY2tkXtKCUmRU_jpkZNYY4.roa (hash: aKHy2MFSUytl79JnzWwvKjUGlm58eMlCEv5tUz3IQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:5a:7f:5d:72:4b:d2:f7:0a:96:a4:bf:07:d9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Nov 22 16:00:21 2024 GMT
Not After : Nov 23 16:00:21 2024 GMT
Subject: CN=2e58ece9b2b8a91280d3ccd41b826cb7d590c6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:f8:a0:12:60:da:a3:54:aa:66:49:f0:ae:
ce:81:a2:58:ec:f6:31:e8:81:e2:f6:11:a1:20:a0:
a0:a4:36:ea:c9:fb:74:b7:86:09:20:e6:d3:16:b7:
43:6b:ea:c8:f9:1f:b3:bb:88:ab:16:da:d6:8c:08:
0a:d7:52:35:ab:07:56:2b:de:a7:7f:8e:5a:d0:34:
dc:eb:80:d5:25:51:61:af:9a:ce:72:f4:50:fd:d4:
14:5e:46:e9:0e:dd:8b:ca:3c:bb:82:46:29:26:05:
92:af:ee:05:7a:34:4b:d3:92:02:3c:f2:4e:08:a4:
57:79:e5:89:a8:d5:48:89:b8:6f:da:7c:ff:07:13:
68:41:64:a7:70:b8:c5:76:83:5a:8f:f1:dd:1c:23:
a4:10:2b:3f:21:cc:90:d9:fa:28:d9:94:63:7b:4a:
ce:80:43:9a:71:6e:24:f9:24:ad:a4:50:f8:bc:39:
10:10:d1:46:20:a0:d7:96:b2:22:a5:96:67:b7:ca:
d8:0d:2a:25:5c:08:26:7e:00:60:b3:90:54:24:ce:
d0:c5:51:14:5d:f5:ec:73:31:27:a1:37:45:5c:86:
dc:12:0f:61:a3:8b:4a:34:f4:02:0f:99:fc:07:aa:
f2:87:1a:18:50:a6:c2:10:8d:73:6b:17:e9:bc:1e:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:EC:E9:B2:B8:A9:12:80:D3:CC:D4:1B:82:6C:B7:D5:90:C6:F6
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:88:16:8d:f0:cc:05:1e:34:c6:42:0c:ee:64:65:b5:05:
99:90:8b:cc:b3:59:ac:ac:c5:06:94:5f:3c:cc:80:14:bd:66:
fd:93:ee:b5:b1:89:94:f7:20:ad:86:32:45:67:bf:71:1b:fb:
81:fc:b3:aa:bd:ef:62:06:3b:8c:3f:3b:bf:8a:55:fa:ca:79:
9e:e5:7c:ac:66:11:52:98:f0:75:2f:44:c7:27:2a:bd:c6:c1:
81:61:b9:b5:0d:f4:f0:8c:7c:a8:02:eb:10:ad:b4:df:ef:d5:
db:21:24:af:72:ae:6a:7b:58:bb:20:38:ed:96:79:49:22:9f:
24:90:6b:0e:f8:d1:82:ec:89:e9:66:ae:37:32:f0:f5:10:f3:
fe:e4:92:f3:58:10:12:4c:9b:9a:65:09:ff:87:61:bf:ef:47:
60:c3:b4:73:38:21:6f:07:05:44:07:6f:a9:e2:0c:68:b9:80:
e5:8c:dc:93:e9:41:f8:fe:26:84:cc:56:a8:1f:e4:16:92:46:
33:a3:5d:df:de:51:bb:8f:07:68:65:65:e6:e4:36:bc:ae:55:
7a:6e:69:dd:fc:ff:8e:b9:4d:3b:cb:a0:9e:f6:16:43:0e:c8:
d9:62:e0:04:ca:02:92:6e:58:0c:a3:54:ac:75:cb:2e:5f:34:
d6:46:e4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:26:31 2024 by rpki-client on console-ams.rpki-client.org