Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier: 7kHJga4uTf9l+/UEBKuhFDo0OAe36j3+kv4zWCNQrSE=
Subject key identifier: 4B:20:01:3A:5E:77:BD:DB:C4:89:DC:06:6F:57:FC:B3:85:76:76:F5
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01935207240DBF6AB685EFCAAA729892ABC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number: 0D59
Signing time: Fri 22 Nov 2024 04:00:19 +0000
Manifest this update: Fri 22 Nov 2024 04:00:19 +0000
Manifest next update: Sat 23 Nov 2024 04:00:19 +0000
Files and hashes: 1: 3K4pp3qaIF9XTqBqgZ8jyMfLemU.roa (hash: X+MDIB7Rr78bMpbaVFzH9IfOhGyfgO7Dh7tccHgwg/4=)
2: Dy2XHgoLwrXSjcRN2sPvRWvXJCM.roa (hash: axCqiyP6vi71vJurX94tzCRztO4iN22vOzzyBGi7tUo=)
3: R1RBjVaAbd3sR6k8FsP-Y_-f8Gk.roa (hash: WXMHtfppLDeEHOQEGX85MkCRYzRY1s2HQdxaWTyZh+Y=)
4: VTR5FubbixyPIVd13mzuI3ZDZK4.roa (hash: 6UqoAIcmEwkfmW9ux9arldUQEFOmWtxxfhoRlE4hnTc=)
5: XfxxmkbuReYrJgsmqz-gcyD5nRs.roa (hash: QkP+cipVROTKmggAUodmV6SseyzIeA3uYFvSuhIheAc=)
6: ZG1WOqcat7NEb6oXdVx8DM6AMys.roa (hash: /PuKz7vWYyfh5qGuj9mKKQdo87M6f6ra/vvfo8DY/50=)
7: csfXR1_wjahNom3081dlFvfxpic.roa (hash: oojER+L0bbccWy2iumTnK1Jt0LP38RGeFu+PAngVMnw=)
8: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: G60t9D6A9hLCOiAPzNU++au6XgMjbozISc3M0Eoer0I=)
9: isUSzxZ49dbz8CqHHUwiVhVzOFw.roa (hash: ekPkPBrDXGBJ9m5r54mNHtxYetPGOw+9mlPHu1puJW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:07:24:0d:bf:6a:b6:85:ef:ca:aa:72:98:92:ab:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Nov 22 04:00:19 2024 GMT
Not After : Nov 23 04:00:19 2024 GMT
Subject: CN=4b20013a5e77bddbc489dc066f57fcb3857676f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2d:4a:40:ef:12:4b:f3:b9:d7:f4:84:ad:55:
45:7e:0f:95:91:82:31:74:36:0f:95:6d:0e:40:8a:
cf:18:02:e8:71:70:9c:53:6f:f3:eb:4b:7a:c2:cc:
03:f1:06:4d:5d:8d:e2:c1:73:26:ff:69:86:d5:dc:
96:9e:39:77:fe:f9:dd:dd:44:e3:45:07:83:3f:90:
5f:c8:ea:4c:f1:54:d1:bd:a8:73:8f:4e:74:39:5d:
0b:a7:3c:c7:4b:48:8a:83:e3:94:20:d9:c1:32:f5:
e8:3c:09:b8:04:6f:7a:43:40:e8:ce:14:36:b0:e0:
37:88:53:52:9b:fe:59:ca:d7:4d:42:91:f1:09:0d:
54:37:0b:3c:23:38:3a:28:a9:47:68:7b:f5:48:b5:
86:78:22:11:ea:68:4d:93:9e:b1:00:4f:b4:8d:63:
8d:78:00:ec:aa:55:46:f9:56:8c:f6:ce:1c:0e:a3:
a0:c1:85:19:44:57:70:3f:d6:9f:a8:68:32:a2:46:
f9:29:3c:e9:c4:34:3e:70:0d:ea:9f:91:82:4c:40:
8a:72:16:4b:bd:1d:60:12:74:d4:e3:fd:f8:6f:08:
95:cf:b6:d7:05:77:c9:af:ea:1c:14:7e:b2:c4:a8:
24:1b:ea:f5:d2:34:9c:45:26:ff:b8:bf:6b:82:83:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:01:3A:5E:77:BD:DB:C4:89:DC:06:6F:57:FC:B3:85:76:76:F5
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:96:de:a1:ec:e7:1a:c8:8a:07:24:15:b4:07:58:8f:a0:9d:
53:62:bc:5d:63:b9:be:25:ef:e5:0b:20:a8:f5:66:0d:64:67:
a7:63:05:ae:6f:46:df:0c:49:55:9e:d3:29:b0:6f:cf:08:3f:
9e:ce:19:81:f6:81:5e:51:68:5a:4f:a7:cf:8f:a3:6e:04:2c:
ff:8e:83:28:6c:85:63:6c:0b:fe:bd:3a:90:b2:86:78:f6:de:
a8:ac:e0:b7:77:13:44:6d:a3:e1:a6:1b:55:62:b3:8d:31:3b:
d3:b3:85:d0:d2:f6:e3:bc:ad:7a:3f:6e:46:22:a3:dc:4f:f5:
11:1f:fd:16:b8:87:9e:9c:fb:53:07:26:67:33:50:e0:4e:6e:
39:45:36:14:a2:9d:b6:e8:1e:7e:53:9c:8e:2b:78:fe:30:8e:
96:2d:97:0f:a7:c3:f4:72:00:e5:7e:05:ac:50:df:d8:1a:67:
41:70:0b:3d:68:cc:05:a0:25:ba:ae:d5:c9:c9:71:0e:1d:df:
53:06:60:d6:e1:2b:b4:75:cf:51:cd:fc:7c:70:26:e8:b5:d1:
3b:36:71:b3:ea:05:93:f2:e3:7b:fc:5e:28:18:c6:bb:4f:9f:
26:6e:fd:16:4a:c8:f8:c0:6c:fe:f6:94:48:35:9f:31:9d:0e:
9c:a0:eb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:38:21 2024 by rpki-client on console-ams.rpki-client.org