Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
File: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft (raw, json)
Hash identifier: E3JzhTjXjbMzwruN1uZcl5EMT/r2Ejkj9gzlzMYUquk=
Subject key identifier: 8D:ED:5D:A3:34:70:84:FE:36:8C:D7:67:E2:CD:02:EF:27:A1:41:7A
Authority key identifier: BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
Certificate issuer: /CN=bf56ba98c6745a63026d78fc284722399d2eb849
Certificate serial: 01935A6679E367202B7C62317A07A1B6F9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
Manifest number: 0DAD
Signing time: Sat 23 Nov 2024 19:01:25 +0000
Manifest this update: Sat 23 Nov 2024 19:01:25 +0000
Manifest next update: Sun 24 Nov 2024 19:01:25 +0000
Files and hashes: 1: v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl (hash: EFGZSarw4dBKyCt3QLuyOBjUK4vCd9X3nPdsTa6Z8gw=)
2: yaHK7cFGRYCF6tJnYbVs9rWzMUQ.roa (hash: wSSQft45x2pN7/UGqoj3MMYGRqgoZZO7eY4lFP3Fz98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:66:79:e3:67:20:2b:7c:62:31:7a:07:a1:b6:f9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf56ba98c6745a63026d78fc284722399d2eb849
Validity
Not Before: Nov 23 19:01:25 2024 GMT
Not After : Nov 24 19:01:25 2024 GMT
Subject: CN=8ded5da3347084fe368cd767e2cd02ef27a1417a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:75:03:41:e5:6d:99:79:99:bb:f2:fc:31:
c6:ef:3c:e2:b5:6c:31:64:64:c6:90:e5:42:d7:31:
11:f2:d4:96:69:60:43:d3:67:17:df:34:b5:e8:ea:
9f:96:38:54:31:be:ef:9a:ad:7f:1f:ff:d3:07:7e:
bc:e4:8a:d2:92:df:4b:4e:77:df:04:66:4d:e5:17:
f3:bb:94:01:dd:41:f5:dc:5f:8b:b5:12:62:15:29:
58:e3:99:e3:49:f9:ae:02:31:c5:e4:b8:cd:15:7b:
ed:df:5a:f7:fa:27:80:75:8a:2a:0d:ac:13:cd:7d:
13:7d:da:b7:b5:14:93:8f:46:35:84:14:d8:08:93:
89:66:b5:76:18:99:ab:ad:2b:31:63:ee:e7:c3:47:
e9:db:cc:a8:01:f3:d8:13:5a:2e:52:84:e8:0d:6a:
d2:94:3d:59:02:76:da:3f:f5:79:88:58:c9:f5:63:
4c:d8:d2:7c:e8:80:5b:b3:ad:ad:7c:19:91:0e:c4:
a9:f8:fe:c5:0a:ed:bc:49:c4:28:ab:f3:30:7c:98:
05:18:f6:c8:0e:77:74:69:75:f2:3d:b6:57:0d:93:
7a:41:f1:48:69:08:05:9b:77:5f:41:b9:3f:fe:da:
cd:c7:13:ff:fa:49:e4:16:3b:91:1e:d6:69:0c:c1:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:5D:A3:34:70:84:FE:36:8C:D7:67:E2:CD:02:EF:27:A1:41:7A
X509v3 Authority Key Identifier:
keyid:BF:56:BA:98:C6:74:5A:63:02:6D:78:FC:28:47:22:39:9D:2E:B8:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3343d2-5253-4243-a01f-587fc84acefe/1/v1a6mMZ0WmMCbXj8KEciOZ0uuEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:65:db:f0:6d:da:0f:eb:4c:66:60:0f:1b:36:c9:52:7e:d5:
05:c6:14:3a:18:21:6c:ea:1a:ec:20:22:ee:10:a2:c5:c6:9e:
2a:5d:47:82:a3:cb:53:72:10:75:32:66:22:27:b2:d3:5d:e8:
28:32:a2:65:c0:e5:94:4a:39:91:b1:4b:36:61:d2:b1:a0:a5:
48:83:d6:19:9b:d4:17:cb:ac:57:b5:85:c5:fc:61:f4:12:ae:
f4:f7:6a:b8:b5:17:3b:33:82:bc:28:df:47:a2:11:44:e5:a9:
6e:20:f2:4e:aa:d3:e7:d3:6c:0a:d2:8e:ba:7d:35:cf:51:58:
4f:a0:ea:e0:31:91:81:8b:26:44:ca:24:a0:9a:ae:cd:56:e9:
31:41:da:18:59:02:ca:d1:56:56:a6:1c:80:9a:6d:47:16:5c:
ef:f4:cd:d5:47:99:2a:c2:3e:7d:73:bd:6d:53:c5:cb:76:be:
5e:21:76:27:d2:a3:e0:05:49:e4:03:48:39:39:0f:3d:bd:e1:
44:fa:1b:5e:2c:db:3e:21:4a:3d:75:8b:ec:0d:bf:dc:45:c0:
8c:bc:0d:fc:5d:3a:fc:40:e6:5c:9b:dd:9c:25:04:04:66:fd:
29:f9:80:24:a3:82:29:4e:f4:45:6d:5e:37:18:e8:e3:6a:68:
81:24:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:43:51 2024 by rpki-client on console-fra.rpki-client.org