Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: +cueF4sr6qon1iIFT3nVgfYMZl629P3eGf6YsbKYHBY=
Subject key identifier: 7A:00:6E:66:DE:EB:1C:A7:39:B6:9C:15:53:9F:21:1E:49:53:BA:DF
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 019351D075BFA69C1EF943B52C436EC4CA46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 0D68
Signing time: Fri 22 Nov 2024 03:00:36 +0000
Manifest this update: Fri 22 Nov 2024 03:00:36 +0000
Manifest next update: Sat 23 Nov 2024 03:00:36 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: Hz7pgYSTg4mbPpUri5vM0sHzLzuy9BLSkqIFxJNJejs=)
2: 8GIvJtJizN9wJS9RttgPc3kdVIM.roa (hash: Sf7iQfKfH4sDFBy09aD5dc6Qemkb4hsSBwyFzyteXI0=)
3: AmBxCry7bL4vmGvsHzDqpKN4rGQ.roa (hash: U3AFDno7fOM1hpEvBpvS0uGtylX/YY6iTfPkYKBqGXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:d0:75:bf:a6:9c:1e:f9:43:b5:2c:43:6e:c4:ca:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Nov 22 03:00:36 2024 GMT
Not After : Nov 23 03:00:36 2024 GMT
Subject: CN=7a006e66deeb1ca739b69c15539f211e4953badf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:1e:a3:84:86:de:2d:a1:f8:52:ee:eb:b6:
7e:a1:3e:9e:bd:b6:e4:86:73:c9:5c:36:37:37:d3:
cd:b1:14:b9:49:38:0c:51:a4:33:bd:31:6e:74:f3:
c0:32:8c:16:5f:f2:85:ef:b8:e6:04:f9:9f:43:8b:
e9:7b:b3:90:42:00:c2:ad:66:b2:e8:d3:50:f6:4b:
b5:8c:e9:4d:f7:4c:6d:57:eb:43:11:4e:0b:31:1b:
c1:1f:46:c5:99:c9:ec:f9:07:04:28:32:16:71:42:
ce:b1:06:fe:32:61:59:cc:45:bd:34:ca:8c:a8:c2:
51:3d:ce:bb:51:6c:d8:9f:dc:3c:b7:da:22:32:1c:
3d:ed:66:44:fe:b0:76:01:85:07:5f:9d:9a:3a:e2:
46:88:99:54:19:67:aa:8e:ea:65:bf:af:64:cd:da:
86:38:ec:51:1f:e8:0f:97:b9:71:14:60:31:8c:b0:
19:53:5d:3d:d2:6c:6c:c3:24:46:03:4d:af:78:1d:
a9:e7:38:91:8d:7e:44:b1:29:1a:de:c2:ae:7c:3c:
6b:5f:a0:01:84:dc:63:50:4f:87:9d:d2:aa:30:d7:
87:55:20:50:37:c8:1c:52:7f:1f:31:fe:82:15:c9:
4f:4f:8f:81:eb:b3:fe:84:bc:0f:57:d9:8f:19:96:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:00:6E:66:DE:EB:1C:A7:39:B6:9C:15:53:9F:21:1E:49:53:BA:DF
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ca:e5:43:ec:56:ad:3a:f0:ca:c9:d8:07:93:d7:74:50:35:
6c:0c:4c:c7:a3:df:5b:82:d7:63:a4:e1:2e:a2:a2:5e:e2:56:
c7:69:9a:23:c1:46:d9:58:43:2f:02:0c:8a:57:0d:a2:00:10:
13:b1:ff:b3:3d:98:00:71:7b:fd:a3:da:d2:0c:13:45:d9:08:
a0:44:1a:3a:a7:fd:9c:ae:f7:04:5b:70:3c:63:48:c1:5d:e8:
f8:90:a4:c6:6e:69:87:93:cd:36:a2:b7:9c:5d:a1:e4:7f:f2:
1a:0e:17:74:9f:77:fc:ca:e1:0c:73:8c:59:89:a2:96:eb:87:
e9:98:ac:98:f5:8c:f9:1a:5f:57:f8:e4:9c:02:44:79:e5:44:
72:58:57:ab:d9:74:37:f5:fd:6f:32:1a:89:f8:d4:ee:9b:ff:
6f:29:55:a3:e0:98:a9:4d:fe:3a:80:6d:0a:ee:77:00:e0:7a:
5f:ed:82:df:42:87:25:33:b5:b4:c5:ef:86:ef:62:05:1c:91:
9a:2e:ca:1c:64:95:76:9d:38:37:13:f2:73:f1:b6:06:c0:7f:
b8:a7:5c:56:a3:b5:42:5d:cb:b3:2a:87:1b:35:5b:28:73:ac:
82:a7:b2:e9:e9:89:4b:92:4c:dc:ee:de:b2:97:3d:e5:cb:db:
8f:bb:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:58:36 2024 by rpki-client on console-ams.rpki-client.org