Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
File: DC18I46J3NUvb7IpbfpHWMYcl74.mft (raw, json)
Hash identifier: iUeTbkSIc0hVKaqrTCWCPdfuzAt5Yd/KiEMs8U/gDcA=
Subject key identifier: 2D:BD:4B:7D:A7:E4:A4:7B:4F:D0:AD:C0:98:12:5F:7A:9B:E2:6D:07
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 0193549B92CC364B27C34BDEB2E62A4CA552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
Manifest number: 136D
Signing time: Fri 22 Nov 2024 16:01:41 +0000
Manifest this update: Fri 22 Nov 2024 16:01:41 +0000
Manifest next update: Sat 23 Nov 2024 16:01:41 +0000
Files and hashes: 1: DC18I46J3NUvb7IpbfpHWMYcl74.crl (hash: 0B1fqQviUxhPoacnWb+aWqVtehf3pMKSPTtLQn6lLPo=)
2: FVxu6-nKlZcqAFBmfC-KXBPro4s.roa (hash: dRicxB9UJeR6ABiPfk52Ciux/vE1Kp6EDBEpLxXY2lo=)
3: YMBqcN5ksBbP6JK6C_LLkQif2kU.roa (hash: LEuQR77wUkAZXQCmeUfAKhOZZZqZUFuXy2cIwevG4Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:92:cc:36:4b:27:c3:4b:de:b2:e6:2a:4c:a5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Nov 22 16:01:41 2024 GMT
Not After : Nov 23 16:01:41 2024 GMT
Subject: CN=2dbd4b7da7e4a47b4fd0adc098125f7a9be26d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:75:03:b9:81:9a:9d:9c:75:19:53:ce:5c:
a7:8c:e5:42:0c:f5:9e:6d:77:a8:fd:4e:9c:ca:94:
e6:7d:02:8e:09:53:43:47:c6:0b:19:08:89:aa:72:
1d:3b:66:f8:fc:03:54:77:06:a0:05:61:ae:48:7a:
b6:a6:a3:36:1c:37:29:86:5d:eb:4f:d6:cc:a9:92:
9f:57:9f:27:f7:e0:5b:fb:fb:54:10:2e:8e:83:24:
b2:d8:4d:bc:a5:69:e0:9b:68:6a:6c:e9:17:02:6c:
f1:a0:6b:de:b8:13:08:b3:9b:c9:f2:a2:cf:c8:48:
e4:df:db:26:9b:89:da:d2:02:5f:05:e5:72:23:ba:
f1:0b:de:44:8c:1e:e3:6c:ed:bf:45:aa:9b:aa:a6:
84:2b:03:41:44:da:60:b0:9b:5d:a6:6a:0a:20:1e:
72:b4:d6:7e:e0:60:4e:ea:0d:b3:c3:ee:84:cb:2b:
7a:de:55:82:c0:64:18:6a:31:61:1b:53:36:28:1b:
08:84:a5:b1:93:fb:27:8f:86:58:09:ad:2b:41:d8:
ff:08:28:d0:43:59:f9:1b:56:c8:db:4e:ef:de:a9:
cd:7b:de:9e:20:98:86:58:48:ab:a5:0c:00:ac:3b:
c8:9e:7c:63:0c:73:98:49:7c:d4:6c:be:80:26:9f:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:4B:7D:A7:E4:A4:7B:4F:D0:AD:C0:98:12:5F:7A:9B:E2:6D:07
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7f:64:38:6c:9a:08:4f:27:36:f2:0e:1a:5f:50:8d:28:a5:
3a:45:03:75:60:e3:2b:d5:0f:7c:cd:b2:a7:d4:ae:99:0f:97:
8a:9c:10:51:f8:78:a7:18:94:9c:e6:3a:14:ec:1f:80:90:d3:
6d:7a:3d:a0:b0:68:09:bf:45:4b:7f:af:38:0f:85:71:c3:41:
f3:a5:64:b8:4b:ae:4c:ee:df:a7:c2:f2:ee:bb:2f:11:a2:71:
6b:95:9b:45:f7:98:97:f7:ae:ba:d7:eb:41:f2:eb:dd:9a:5e:
5d:50:d6:3c:20:4a:50:04:d8:94:e0:17:66:e3:04:35:c9:b4:
27:8c:a6:72:ec:b6:4d:bd:5b:b8:b3:0c:9b:a2:64:b1:98:c7:
21:2b:8c:5d:ff:5d:82:4f:b4:8d:fd:f7:13:a3:ee:27:79:bc:
c7:e2:90:c1:46:a9:8e:4c:f7:06:57:af:7f:40:28:bb:b8:5d:
f0:98:48:0f:9e:e2:5d:a6:e4:e6:9f:37:e8:76:dd:bc:3c:bd:
05:fb:fb:ed:43:0a:52:e6:a4:fa:24:f9:33:c7:6b:04:72:5c:
68:dd:c3:6a:3b:e8:71:a0:a4:cf:2f:a4:90:2f:0e:7f:94:e1:
a2:88:2c:ac:50:8f:48:51:62:23:7c:89:2d:bb:c7:96:91:de:
97:19:51:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:14:34 2024 by rpki-client on console-fra.rpki-client.org