Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: MnHtUXZx8pRvAsaQ3Hh8T/ya0AvwdwNOzX1cdRtRVEE=
Subject key identifier: 5C:DA:72:D7:B8:5C:4A:5F:7C:79:A7:A3:25:13:D7:1C:3B:7C:19:36
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 0193549C204F330E46F4DF464E9F47B774AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 16:02:18 +0000
Manifest this update: Fri 22 Nov 2024 16:02:18 +0000
Manifest next update: Sat 23 Nov 2024 16:02:18 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: 1zpO1RaPXlpftO5XvE+MR0xJyZC2RjAQc0K+XTaagnQ=)
2: nJ8nX92KD7tMIT9vc1xg_Q4L7Ak.roa (hash: PDcnfd6ylBEVTr20UAehex+Bjeh/URx3LCaxfLFBs70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:20:4f:33:0e:46:f4:df:46:4e:9f:47:b7:74:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Nov 22 16:02:18 2024 GMT
Not After : Nov 23 16:02:18 2024 GMT
Subject: CN=5cda72d7b85c4a5f7c79a7a32513d71c3b7c1936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:25:57:ef:ba:7b:d1:5d:d0:5b:39:e4:8e:
36:e8:0a:55:19:a2:38:aa:04:b5:79:67:12:06:25:
7e:9f:46:46:05:1d:fa:f6:12:91:31:e2:2c:3f:6b:
13:bf:25:48:e1:88:69:d1:b1:52:b3:07:30:60:48:
4c:5f:f1:d4:3c:f2:27:df:56:1b:59:e0:1d:91:da:
7c:c6:a0:d5:f3:92:c9:b0:28:79:33:87:5c:2c:69:
b6:84:47:56:4d:32:a1:be:b7:fc:e0:56:be:ab:4e:
36:45:69:e5:3a:94:b6:37:e6:c7:fb:e1:6c:2f:60:
8b:af:3f:c3:12:e9:30:72:49:c2:41:c7:ec:fb:09:
b9:62:a9:99:81:db:56:de:c8:f7:cb:22:81:69:a1:
a7:bd:b3:ab:6d:ee:5d:01:85:c9:75:cb:3d:08:63:
dd:c9:8e:99:1d:61:9e:77:e2:b9:87:6c:d6:9e:b1:
30:91:5e:df:8d:7f:fd:d6:30:5a:05:81:93:23:a2:
4e:64:eb:a6:e1:d5:71:df:2a:23:cf:a6:f7:b8:69:
9d:f3:2f:ed:b0:e3:34:5e:c2:70:88:cf:20:80:30:
13:ac:1b:14:37:f4:e2:15:1e:fc:ea:fa:59:84:70:
35:e3:5b:20:2f:93:1e:f7:5f:83:1a:5b:5c:5a:cd:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DA:72:D7:B8:5C:4A:5F:7C:79:A7:A3:25:13:D7:1C:3B:7C:19:36
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:4e:13:12:57:14:e0:f3:fd:45:ff:7c:95:6f:77:41:84:9b:
45:9d:49:e6:20:12:29:e9:16:e9:95:a7:05:46:19:06:76:87:
43:84:cd:db:e6:b3:8f:a9:fd:58:3d:21:fb:d6:f6:ae:f9:4d:
63:ab:97:60:2b:5a:e4:f5:8a:45:87:6e:f8:4f:e1:fb:d7:c5:
1a:24:6a:86:b1:79:d7:e5:d4:01:f7:ad:f1:e4:67:32:d0:ce:
ac:9f:99:9a:c8:96:21:3f:ff:9c:dd:5e:b1:da:bc:0f:87:f7:
91:13:f3:8e:ff:50:dd:ec:d5:5b:b1:3d:98:48:04:a9:dc:84:
92:0c:7b:b1:b2:53:ed:3f:d7:ab:67:30:13:5e:31:d6:39:7f:
0c:6d:03:18:40:3a:e1:9b:5b:42:07:f6:80:78:f9:c0:17:62:
6d:f9:80:31:6e:86:bf:68:4f:44:80:67:b3:71:ae:3d:61:0c:
3f:72:1a:07:11:e0:fa:fe:19:36:e7:3c:21:68:3f:6e:c6:bd:
39:a7:41:d1:08:b8:39:a8:95:ce:d8:a6:5b:2d:fc:01:21:72:
ae:88:3f:8b:bc:6f:7e:78:08:ec:bf:a8:34:f0:c3:73:66:82:
a0:59:5d:78:4c:21:69:25:17:21:31:7c:93:12:d0:a4:41:c5:
50:96:1d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:31:32 2024 by rpki-client on console-ams.rpki-client.org