Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier: 3+dX21GZLi2BmCEevW11ARUlrp4l4ncAUi1HCl9erw0=
Subject key identifier: 25:2B:1D:CD:0B:89:E4:2C:7F:00:29:DF:2F:85:45:3C:C0:59:AE:D7
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial: 018F40E7A795AD8FF9EC8D673373298A49C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number: 0DEF
Signing time: Sat 04 May 2024 00:01:14 +0000
Manifest this update: Sat 04 May 2024 00:01:14 +0000
Manifest next update: Sun 05 May 2024 00:01:14 +0000
Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: wGk6H84LS8JpG1Z84CzsrIHp/980SHDRBg7AUv6i4+k=)
2: LSilrmrxPp762MenUw8eQG1dpDQ.roa (hash: N3RpDlrEloSqs/Ni3QJV/BFuhIS8wjcdED+rtr1hky8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:e7:a7:95:ad:8f:f9:ec:8d:67:33:73:29:8a:49:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Validity
Not Before: May 4 00:01:14 2024 GMT
Not After : May 5 00:01:14 2024 GMT
Subject: CN=252b1dcd0b89e42c7f0029df2f85453cc059aed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:fe:96:b8:f1:04:3c:38:ec:92:65:79:08:
db:c1:57:ee:2b:91:b0:ff:27:be:e8:6d:67:09:3f:
84:95:00:95:da:f4:22:26:69:c7:3a:b3:dd:7a:1a:
8d:03:fd:35:3e:8c:06:85:41:d7:61:02:42:be:4a:
16:4a:4e:c9:56:0d:a0:b6:80:6e:18:4e:5c:0d:72:
c2:b3:1a:e1:ec:b4:e8:1e:3f:e5:c3:f6:c1:c4:89:
dd:37:ae:ac:b5:68:1c:c1:42:77:60:f3:4d:cb:a2:
5c:14:66:dd:71:ef:be:97:b7:82:b6:33:7e:fd:98:
24:80:ea:71:2d:c0:d5:d0:5a:c4:54:e9:8f:ba:87:
bf:a7:23:28:bc:20:bc:37:be:66:73:d5:86:ec:29:
22:8a:25:ac:96:c6:6b:1f:24:1b:49:d8:e7:59:0c:
02:13:03:62:13:ee:d3:de:01:90:d2:0e:93:00:ee:
68:8f:44:ce:0e:58:b5:2a:05:8d:58:e6:85:a6:c0:
ff:25:a7:a3:c6:0a:45:96:8a:a9:c2:87:a9:6a:a0:
2c:c2:88:c7:f4:a1:98:3a:c1:da:bf:7d:fe:43:83:
d2:08:68:99:dd:9f:ed:56:56:59:76:bf:a8:ff:77:
91:1a:34:9f:c9:ed:a7:6b:a1:ee:76:ae:89:73:fb:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2B:1D:CD:0B:89:E4:2C:7F:00:29:DF:2F:85:45:3C:C0:59:AE:D7
X509v3 Authority Key Identifier:
keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a3:fa:ca:ce:b7:43:21:76:f4:a3:7d:cb:36:19:5f:2a:7a:
17:6a:5c:df:f4:a9:02:8e:4b:d9:38:c9:a3:02:f2:9d:c1:54:
0e:d2:b4:4c:2a:45:4e:e8:0b:35:2a:d3:d1:03:2d:4f:2f:87:
0c:00:4a:38:fe:07:b0:1b:00:57:8a:f4:31:64:85:bd:24:0e:
5f:d0:3b:28:57:01:43:28:f1:6d:87:09:7a:fe:30:a4:36:a6:
ac:6e:97:15:ab:ec:a5:aa:4a:1c:6f:d6:16:60:b7:7c:a7:fa:
c3:6d:a9:1e:b4:04:81:53:38:44:ca:bb:52:6f:5c:f7:39:ed:
12:bf:73:b8:b8:76:98:0b:2f:ea:61:60:0d:ca:82:89:83:b2:
d4:08:a9:3e:38:d9:b3:2f:e8:7b:0e:90:0b:9a:7b:f9:da:7c:
ed:87:45:80:07:95:2a:74:b3:0d:8f:6e:51:94:ba:31:12:3b:
b8:27:28:f2:57:87:8e:5e:16:ec:c5:61:79:1b:27:58:fe:a3:
dc:8c:3a:ff:30:63:8e:fd:cc:d8:6d:cc:98:82:6d:78:0d:e1:
dc:44:21:4c:a4:c6:5d:5a:6e:9a:1c:f9:1f:c3:d5:cd:37:c2:
59:64:bb:fd:e1:94:d0:9b:ba:7a:b9:23:cb:c4:38:af:b9:99:
d9:e8:ed:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:11:56 2024 by rpki-client on console-ams.rpki-client.org