Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: bIfRAk/nyhSnZjJGOY5B0eH8V0RCQQfY/ofGQTb+2Oc=
Subject key identifier: A1:FC:D7:1E:EC:C7:C3:87:4B:0D:5A:D3:C0:EB:39:CD:76:0F:F2:5A
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 01935A65CD6BE20AB636593C6478E3EE7E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 1374
Signing time: Sat 23 Nov 2024 19:00:41 +0000
Manifest this update: Sat 23 Nov 2024 19:00:41 +0000
Manifest next update: Sun 24 Nov 2024 19:00:41 +0000
Files and hashes: 1: FytgZNHgIe5Sn4mouiTljRaRkL4.roa (hash: RJs5OnL/jNPgR2Go8TN3VXrA37lm+aCeMKoCHKSKED0=)
2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: q8MCJ9/uUMbc0XS+fvq8eS2ld+uu6q2hAuqyXPbQO6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:65:cd:6b:e2:0a:b6:36:59:3c:64:78:e3:ee:7e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Nov 23 19:00:41 2024 GMT
Not After : Nov 24 19:00:41 2024 GMT
Subject: CN=a1fcd71eecc7c3874b0d5ad3c0eb39cd760ff25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:f5:51:ef:9a:77:13:95:13:4a:51:dc:7f:
f4:8c:c6:a3:4f:88:20:c2:29:a5:69:12:e8:13:f9:
a7:1b:08:a5:b4:d6:13:70:d6:8b:b3:28:2f:e0:c5:
5b:b1:19:9f:bf:05:07:b4:24:31:75:c1:3c:81:ab:
88:ba:e5:98:08:5e:d0:f7:eb:cb:b1:3c:6b:59:c8:
7f:87:00:cd:e2:c6:7f:5d:1e:fe:f4:86:fa:ac:f9:
69:35:0b:6c:62:20:4e:06:24:22:2d:b9:57:41:d0:
46:55:18:9c:d8:ed:0b:50:3a:a2:ed:df:43:ab:a8:
33:8e:99:dd:80:21:3b:5c:51:63:ae:bf:26:9a:13:
ee:77:3c:d9:28:98:55:1f:f9:94:0e:d8:ec:e7:da:
60:ca:b9:6a:fc:af:cf:4d:e3:92:c8:61:91:59:d9:
e8:ab:e7:9d:78:22:a1:1e:05:75:5d:46:a0:9e:7b:
e8:59:84:01:1c:db:7c:f4:3a:3e:a5:84:cd:c6:64:
4d:c0:d9:23:a0:63:b5:bd:ea:4e:59:4f:68:ac:54:
dc:bb:9e:88:7c:51:cf:fd:cb:f5:6f:6a:90:b2:a5:
0a:3b:51:d8:f8:4f:96:6c:0e:d7:ae:e4:9a:74:8f:
b4:89:9b:59:7a:5a:5f:ab:d7:96:30:88:5c:a8:1e:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FC:D7:1E:EC:C7:C3:87:4B:0D:5A:D3:C0:EB:39:CD:76:0F:F2:5A
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:55:78:0f:79:b0:81:d6:f5:28:d6:c1:3b:a8:a9:dd:28:c8:
1c:e6:f1:8b:60:8e:2e:54:22:b5:53:69:74:a8:c9:06:74:7f:
e5:bc:43:66:f2:ca:a7:99:a7:a7:90:04:73:90:7f:52:39:a0:
b5:bd:81:9a:fb:30:40:e8:b3:f6:35:60:97:15:b0:d4:f7:90:
d9:8d:38:c4:ff:f3:95:05:da:77:73:a8:9e:a6:47:40:b4:3d:
e3:6a:2e:49:88:2e:aa:97:54:6c:ab:44:47:69:d8:09:2f:ae:
6d:eb:6a:19:2e:ef:d5:03:c4:22:2f:35:45:7d:c2:6b:bd:82:
1e:8c:49:57:0b:3e:b1:27:fb:2b:01:76:7a:1f:28:7e:0c:2e:
62:ac:3e:be:bb:3a:ad:f5:de:7e:dd:b4:dd:4e:11:c7:cd:dd:
05:ff:e5:45:3b:67:1b:51:1a:1f:be:a8:30:29:a8:58:a8:21:
dc:bb:ce:46:f9:f6:7c:3d:b4:66:06:0e:e5:93:31:35:f0:8f:
64:70:fd:9f:48:ce:d6:5b:43:24:ab:0b:18:6a:9f:38:68:57:
2c:2c:22:08:a7:e4:65:4a:7f:72:cb:c5:87:42:7e:9a:e5:0d:
d5:11:e7:14:b6:be:58:60:6f:ec:f3:fc:a6:40:e5:44:a1:e6:
e4:8c:f2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:43:51 2024 by rpki-client on console-fra.rpki-client.org