Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
File: AC428C8EED241857F73D0F3D483ABECB240519D0.mft (raw, json)
Hash identifier: E9ykN/N8ziOOd0b7LDHdwGrNb7eyjssNXVo+C97Tz70=
Subject key identifier: 73:4E:2C:50:E2:90:0A:58:92:D4:98:16:F8:09:A6:04:99:F4:F9:F0
Authority key identifier: AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
Certificate issuer: /CN=ac428c8eed241857f73d0f3d483abecb240519d0
Certificate serial: 382BC42C3A89742D28F67375D01AE3D1447ED85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
Manifest number: 01FD
Signing time: Thu 21 Nov 2024 23:03:40 +0000
Manifest this update: Thu 21 Nov 2024 22:58:40 +0000
Manifest next update: Sat 23 Nov 2024 01:11:40 +0000
Files and hashes: 1: AC428C8EED241857F73D0F3D483ABECB240519D0.crl (hash: qmTZ+5O9g0FLMWH7utEaifubekwEiF7dn9BcEp3PSE4=)
2: 3139352e3139312e34392e302f32342d3234203d3e20383334.roa (hash: tAX3Go3Y1oszntsjkGYjvxyMi+6BW1lc0B/JhqET5Wk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:2b:c4:2c:3a:89:74:2d:28:f6:73:75:d0:1a:e3:d1:44:7e:d8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac428c8eed241857f73d0f3d483abecb240519d0
Validity
Not Before: Nov 21 22:58:40 2024 GMT
Not After : Nov 23 01:11:40 2024 GMT
Subject: CN=734E2C50E2900A5892D49816F809A60499F4F9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0d:3d:7c:f4:73:be:db:d1:36:1d:b5:11:00:
f1:42:b2:1f:cb:85:38:0e:0b:f7:27:77:53:b3:06:
1e:cb:64:8b:da:2e:fe:96:27:25:c6:ab:0f:d8:2e:
bd:28:75:5f:68:3a:c9:c7:20:2d:e4:83:0f:71:38:
eb:c6:2f:6c:85:49:65:7a:f3:f2:dd:f9:a9:c1:0a:
56:d1:ed:7e:b0:4c:ca:58:21:60:93:4a:f5:41:1a:
c5:81:ef:a9:6d:0e:c6:93:40:50:5d:c8:5d:76:6e:
9e:86:76:ff:83:bd:db:92:3f:df:8f:31:20:30:2b:
b7:22:2b:fb:f9:d8:e7:6b:16:c2:82:e4:e0:34:1a:
c2:18:2e:a3:a8:97:53:3e:22:81:65:2a:dd:01:b4:
d3:17:47:f1:5e:94:50:ec:71:5d:2e:ba:72:6c:ec:
8f:f1:c6:6c:3e:6d:6c:61:34:e8:a2:b8:b8:d8:52:
5b:6f:07:27:d7:e5:55:f8:50:51:99:22:d0:6b:98:
47:74:16:5d:18:1a:b6:a6:27:b1:71:b9:1a:8a:52:
70:67:e6:8c:83:54:ee:d9:e1:af:7a:cf:c5:cc:88:
50:3a:0d:ff:a1:f8:05:bd:4f:b2:cc:30:6d:88:9b:
22:d6:26:d7:97:79:11:38:1f:d1:88:28:92:d2:d5:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:2C:50:E2:90:0A:58:92:D4:98:16:F8:09:A6:04:99:F4:F9:F0
X509v3 Authority Key Identifier:
keyid:AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:16:57:47:13:13:2b:35:69:a0:9a:71:3c:c3:d3:86:46:90:
7d:08:13:ab:ef:23:80:e4:f9:9c:8f:14:c8:9e:df:66:a7:c7:
71:2f:13:68:08:59:57:f9:37:fc:46:40:11:38:9d:93:89:25:
26:75:31:cb:8b:02:ae:1c:0b:05:00:c8:d5:ec:72:32:f9:18:
4a:1c:f9:f9:a0:6d:b1:50:de:e8:26:66:02:78:ad:78:65:2e:
dc:80:c8:00:01:5e:4e:60:ef:28:26:f4:89:f7:ef:76:03:b8:
3f:4e:00:78:1d:83:c7:0b:18:02:df:93:ef:29:cd:15:c3:f9:
d5:80:c9:7d:70:05:28:3a:1f:63:11:10:db:6d:16:7e:92:c5:
16:5d:70:b5:35:b1:a2:4b:39:e7:33:46:60:67:c1:b3:06:9c:
5f:11:00:b5:06:74:cb:d1:86:02:cc:95:c1:32:b9:4b:a1:48:
d2:f1:1e:20:41:70:1e:0b:77:60:e1:d6:18:8b:df:14:50:25:
b3:e8:04:02:a8:9e:4f:23:42:c0:c8:51:88:dd:0b:ec:33:70:
3d:07:6d:9d:60:f0:32:dd:64:69:a8:39:78:42:94:56:7c:aa:
56:2a:31:f1:60:03:f4:d0:d6:3a:12:f7:d9:d0:70:70:04:cf:
3b:d7:6e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:19 2024 by rpki-client on console-fra.rpki-client.org