Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json)
Hash identifier: jzBenFaB0rf7fPa70t/4qsGfbEL/gjH1xEBV1rVLin0=
Subject key identifier: CD:A6:83:88:EC:94:F2:E0:68:20:2E:38:C9:A1:33:D3:53:F2:60:D6
Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Certificate serial: 01935A67DEC338D5D52CE8F4660FE5DE005B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
Manifest number: 0D34
Signing time: Sat 23 Nov 2024 19:02:56 +0000
Manifest this update: Sat 23 Nov 2024 19:02:56 +0000
Manifest next update: Sun 24 Nov 2024 19:02:56 +0000
Files and hashes: 1: 3U67JVDpA8mUTURSr9Algxuc0wo.roa (hash: T4bRqefF4AWwXdi5sx0JkcVQWuufmzssf/q775taBhY=)
2: M9-ffo9RwhFqmA36fpHo5OZ0Hw0.roa (hash: oIr2si6+CLlAv7+FmXCpl42vMNAMSGzu1QhXNTPcIL8=)
3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: 9G8TroNG576Ed1Avka8yp2yX+vaf8DBmTNUS45Ib5NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:67:de:c3:38:d5:d5:2c:e8:f4:66:0f:e5:de:00:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93
Validity
Not Before: Nov 23 19:02:56 2024 GMT
Not After : Nov 24 19:02:56 2024 GMT
Subject: CN=cda68388ec94f2e068202e38c9a133d353f260d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:38:85:f8:71:a9:e9:6f:e6:f0:9a:d8:fd:
03:80:9b:c7:c4:55:b5:c9:4e:39:73:49:0b:86:bb:
87:bd:d7:4a:ec:a7:39:3d:07:c1:50:4e:b4:e8:18:
91:f8:b7:b6:a6:dd:a9:1d:aa:c7:fe:0d:e1:eb:d8:
28:31:6b:41:17:e6:d2:e4:0b:1e:38:11:58:31:0b:
fb:68:e2:da:85:49:83:0f:3e:54:29:07:79:f9:e1:
04:01:6c:5a:68:57:4f:6a:e4:32:b0:80:40:81:33:
0e:34:93:71:c5:19:73:5c:78:19:ab:4a:af:99:3f:
e3:54:b5:d1:58:93:44:3a:90:fb:2e:dd:65:2b:a8:
f8:ef:30:33:62:3a:9f:73:08:2b:a0:2c:94:7f:53:
da:ca:c2:35:28:62:f5:57:59:a0:03:39:e6:a4:1f:
e4:ad:40:35:f9:b2:80:f0:ce:71:55:21:8d:4d:f1:
df:2a:ef:10:64:76:81:b5:73:1e:03:dc:03:69:37:
c3:a4:4d:20:95:d9:8a:81:8e:c0:fc:e2:c3:0e:3b:
7a:46:8f:43:cc:79:d7:fd:6b:05:cd:9f:ea:d0:da:
e4:ff:e8:22:97:fd:fc:4d:69:5a:21:c0:96:30:71:
43:62:dc:87:a6:90:a3:e9:8e:bb:9b:c0:28:1f:e1:
cb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A6:83:88:EC:94:F2:E0:68:20:2E:38:C9:A1:33:D3:53:F2:60:D6
X509v3 Authority Key Identifier:
keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3a:6f:01:2b:0d:9b:bb:cc:70:b8:52:05:73:0b:bb:2c:8f:
df:22:25:8d:12:ec:78:3c:02:82:2f:73:c8:73:24:4f:f7:30:
99:ba:a9:3e:09:1e:c4:45:e2:f4:4e:19:80:87:99:18:ec:ca:
b4:71:9a:b9:e6:cf:b1:68:6e:a6:0e:8e:4f:95:c8:24:df:a5:
ea:42:37:4b:16:76:85:1b:fa:c3:92:51:47:b4:10:e3:c2:e6:
f6:cf:76:2b:29:0a:50:c9:c3:0c:07:aa:8c:1c:49:5d:13:34:
57:e7:43:44:d1:b0:dd:aa:81:c4:fe:02:4f:94:80:3f:62:f8:
b7:79:ed:b2:9d:01:b0:bb:18:cd:8c:78:c0:91:40:48:00:bf:
f5:f5:bc:67:34:3e:52:2b:b8:0d:01:db:a9:3f:8b:82:e5:0a:
67:4b:20:5e:e4:8c:b0:a9:42:cd:88:a9:c1:ad:7c:d3:9a:e7:
32:2f:17:14:43:4b:72:83:e9:6b:45:fd:5b:b6:2b:1f:b8:94:
cb:19:0d:0f:95:ae:d7:f5:68:e2:3b:7c:a1:6f:93:56:58:1b:
6d:e8:9a:77:9c:dc:25:f9:20:7d:b9:0d:19:68:10:e6:6c:58:
c5:c3:fe:42:52:64:e0:56:b6:c4:cd:58:a9:a4:2c:25:d1:0f:
a5:14:c3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:43:44 2024 by rpki-client on console-fra.rpki-client.org