Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: E2c3BJgBximF06CBdSK1GuMdCgDYHoH4sHlr24aWkNw=
Subject key identifier: DF:F7:A0:28:72:D4:E8:24:F0:23:26:03:4D:90:AA:30:29:53:14:E0
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 0193549BB8C86F33CA8F5135ED3176BDA9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 16:01:51 +0000
Manifest this update: Fri 22 Nov 2024 16:01:51 +0000
Manifest next update: Sat 23 Nov 2024 16:01:51 +0000
Files and hashes: 1: G_SOq6NRAMRcBriUHeHkorwdp4U.roa (hash: cyQojAWob3Pye72o7SV/+bXEksDAUbMdX54sUh/K3mw=)
2: iYZ__kjlwqgvduakgJVSJo2oR74.roa (hash: pWyJKvedVOkJvXO5uczSSddz0ww7SO9rpP1GHlvbRLQ=)
3: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: zkl8DvWPj34K4zJ8FB0tpQQFV7T9LmXBaMgwSvUNplM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:b8:c8:6f:33:ca:8f:51:35:ed:31:76:bd:a9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Nov 22 16:01:51 2024 GMT
Not After : Nov 23 16:01:51 2024 GMT
Subject: CN=dff7a02872d4e824f02326034d90aa30295314e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:84:5f:6d:42:db:dc:56:62:25:4c:e5:61:
10:a1:a4:aa:12:82:9b:3f:86:0e:74:d3:21:1b:ab:
cc:46:3f:ae:5d:28:c6:09:ea:60:6b:59:35:54:7c:
21:33:57:0d:70:d2:e3:b9:be:df:cd:91:4e:2a:4d:
0b:02:2e:02:2e:76:50:b0:cb:06:de:fb:95:90:5d:
28:42:f4:f9:76:fd:2c:4e:bb:70:c0:32:98:c1:2c:
e5:ef:e4:09:ca:e7:d9:72:8c:fd:b8:c7:e9:0b:57:
85:63:b2:90:9c:96:33:d6:d9:4e:82:1a:61:6a:57:
2c:37:3c:20:e7:fd:bc:3c:bc:97:cb:b2:f7:9c:db:
4b:3f:02:fd:cb:0f:74:f8:81:09:19:4b:15:e9:82:
44:c9:e5:10:06:6a:74:84:a8:0f:79:4a:a6:54:b3:
a5:3a:35:1c:5a:2a:a4:8a:00:da:ef:d0:eb:00:95:
88:6e:d5:cb:23:3f:22:05:c5:95:fd:ea:f0:71:27:
f8:49:64:00:3a:d5:3f:53:83:0a:2c:a0:08:ac:31:
d3:1b:da:f4:de:34:95:a7:f0:55:97:71:d5:8c:88:
7a:44:53:9b:c3:91:9d:53:6b:8e:23:4c:8b:1d:b3:
26:17:f2:5d:52:b3:f7:57:d8:ce:69:78:e5:d2:c8:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F7:A0:28:72:D4:E8:24:F0:23:26:03:4D:90:AA:30:29:53:14:E0
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fa:73:6f:44:61:77:70:6d:d7:03:f5:e5:df:8f:71:cf:a2:
47:37:11:5c:9d:d2:d1:93:26:99:be:5c:a4:a5:50:9b:6c:4c:
07:42:49:14:f8:d2:6e:09:12:24:d3:74:16:bd:25:27:c9:7a:
3e:65:00:c3:e6:e4:c2:85:40:60:5a:a6:f1:34:dd:c6:7d:37:
60:a5:d4:70:7e:3d:99:0a:24:ab:10:02:8b:5f:d7:05:c9:29:
4d:83:e9:01:3a:36:c8:51:71:70:bd:be:79:33:40:12:c5:01:
9c:6f:5b:fb:1e:7e:17:57:a6:db:ef:74:18:1d:96:c3:42:92:
46:fd:4f:0a:19:61:1d:28:67:63:88:bd:2b:f9:01:c4:d6:c1:
35:a0:9b:04:61:b6:b3:24:e6:e1:7a:72:b7:ed:45:7c:5a:99:
92:7b:e5:19:2e:40:54:94:14:a0:ca:21:3f:c4:1f:7a:22:20:
ff:07:5d:ad:77:d9:1f:c2:42:75:fb:b5:b6:d9:c7:58:a6:d5:
b9:38:6f:9b:cd:c1:39:7e:48:62:ff:20:ee:be:7c:9c:f9:13:
2a:8d:7e:b8:52:7d:cd:44:85:d5:c1:a1:6f:2d:82:bf:8c:4e:
ef:f7:60:7e:d7:8b:49:fe:a5:c0:c9:6a:d3:b0:36:62:c0:cb:
01:84:bf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:28:39 2024 by rpki-client on console-fra.rpki-client.org