Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: sj4OHHfrWMULe+Awd1YZbPqkw78Ap3kI+Igr2+64ePg=
Subject key identifier: 8C:65:4B:37:9C:6F:17:6B:CA:40:E9:AE:6C:C3:41:4D:FE:7E:BA:AE
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 01935651CF596EDB7CE784DB7385E70B423D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: D1
Signing time: Sat 23 Nov 2024 00:00:22 +0000
Manifest this update: Sat 23 Nov 2024 00:00:22 +0000
Manifest next update: Sun 24 Nov 2024 00:00:22 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: XlJG3nW0CZ9Y5d5APS/wuhMoptCuAOS0w/WesOBYnsU=)
2: 9BvzhIu_nmVHGYO3FnjsMYGSn7o.roa (hash: TH983D5xolJEa8lOZK2/mcT2sOoRLPRERmFn4sh/3AQ=)
3: N26t2yBdtOVkn1wAPjcio_YqjVE.roa (hash: gyoHxIIjX3vD06kgcwCnCXWD3LUqAv93ndr8a5+7yCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:51:cf:59:6e:db:7c:e7:84:db:73:85:e7:0b:42:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Nov 23 00:00:22 2024 GMT
Not After : Nov 24 00:00:22 2024 GMT
Subject: CN=8c654b379c6f176bca40e9ae6cc3414dfe7ebaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:83:f9:1d:df:48:6b:dd:67:74:6f:92:0f:
2a:06:da:73:36:f1:b0:fc:be:2a:9d:91:23:ad:f1:
34:fd:59:06:06:cb:56:57:a0:c8:9a:ec:f2:ca:60:
70:90:ac:f0:f7:92:38:45:5f:67:67:99:68:d5:66:
d5:25:31:37:0d:d7:b2:4d:da:17:41:f6:11:06:0e:
b6:cb:e6:21:06:23:fa:35:6b:08:3f:9b:7e:fb:49:
63:59:55:d9:2c:ab:38:92:5d:33:eb:9a:c5:b4:fd:
ef:c3:47:d8:5d:c7:57:33:bd:08:9d:51:b4:e9:ff:
6c:8e:ad:5b:b7:0a:67:df:f8:d3:09:ee:17:57:d2:
a1:d1:cc:d5:68:8d:fd:b3:17:55:62:b3:de:14:d7:
6e:a8:f5:b8:a7:23:49:64:58:4d:13:4e:bc:cc:14:
f5:2c:55:ce:49:7e:91:3c:c1:85:64:80:41:79:e9:
bb:3d:a1:eb:05:ae:63:d6:e2:81:1e:90:98:1d:da:
ef:86:55:89:da:98:6d:8b:9a:2c:f4:cf:be:38:1d:
fe:0d:63:5b:c2:13:f9:5f:e1:9a:9e:f6:8d:47:52:
9f:99:fd:be:6f:01:cf:d5:d1:cc:71:3c:ae:17:50:
65:4c:9d:dc:6a:14:94:02:7f:9c:a9:45:29:ca:c5:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:65:4B:37:9C:6F:17:6B:CA:40:E9:AE:6C:C3:41:4D:FE:7E:BA:AE
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:58:1b:c7:10:a2:c0:cd:5e:87:82:52:5a:8a:2b:9f:4b:f2:
21:6a:2f:26:df:99:2c:ec:63:99:f1:6e:7e:b2:36:d9:57:c0:
04:fc:32:02:22:f8:50:d9:5a:e4:f9:41:57:26:4e:3c:d9:13:
a0:e6:a4:d1:55:3d:46:5f:41:b5:4c:8b:e9:15:6c:b9:bb:1b:
c1:ca:b4:cf:1b:c2:75:20:af:8a:98:a9:4b:2d:5a:28:e4:63:
4b:d3:fc:04:02:00:ef:9d:41:46:3a:b1:84:d8:07:fa:40:fd:
0d:67:14:10:81:f0:46:82:b5:bb:98:14:c8:a6:7c:4c:04:90:
36:e4:6d:b6:51:de:29:5a:a1:d9:50:69:0f:3a:29:b9:bc:55:
a1:54:56:33:5a:16:57:78:5e:a8:51:1c:68:47:24:2e:4f:f6:
ab:3a:50:18:5a:e5:f4:30:89:7b:9d:30:df:69:9c:bc:a9:4e:
0b:e0:7c:97:2c:bc:29:e9:6b:f7:b3:6a:2b:56:b3:ee:6a:45:
ee:c5:1c:6e:9a:b5:38:5b:b6:b5:a9:0c:ae:85:1e:a2:27:e1:
10:16:ac:e1:c8:bc:38:9d:d8:1b:11:f7:e0:0f:81:a3:1a:5d:
5d:7f:0b:e1:bd:19:ff:7f:54:3c:0f:05:bb:90:bb:f1:7b:af:
a4:c2:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:58 2024 by rpki-client on console-ams.rpki-client.org