Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
File: dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft (raw, json)
Hash identifier: 2k9EdKRSJRtqpHUVRQ1vQeoRUgZOdOI8TrxE0UpW9Tg=
Subject key identifier: F4:16:65:84:FB:AD:E5:03:D8:4E:31:22:DB:81:63:74:CA:31:77:E7
Authority key identifier: 76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19
Certificate issuer: /CN=76d47c234a8b92f31d3989cc42219f80c947da19
Certificate serial: 019357D2DA0EF8410EAD69346EA2F2721CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 07:00:56 +0000
Manifest this update: Sat 23 Nov 2024 07:00:56 +0000
Manifest next update: Sun 24 Nov 2024 07:00:56 +0000
Files and hashes: 1: dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl (hash: x/o/cab/kv6v9yAwwOvTGtAHDNX2OGBVvhWuSQptVx4=)
2: myDk6lv81VPJsWBiMXJeoy4RE-I.roa (hash: GhtFd14Kn3XpYxKqptEKBiJt/8p3nj9z2NmBeyR/xRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:da:0e:f8:41:0e:ad:69:34:6e:a2:f2:72:1c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d47c234a8b92f31d3989cc42219f80c947da19
Validity
Not Before: Nov 23 07:00:56 2024 GMT
Not After : Nov 24 07:00:56 2024 GMT
Subject: CN=f4166584fbade503d84e3122db816374ca3177e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:b0:66:7b:b7:07:45:37:12:83:c8:97:fe:
80:4e:32:7a:3a:64:a0:d2:5b:f9:b9:de:69:20:c7:
3b:87:05:d8:b1:7a:3a:7c:43:8c:b9:83:12:f2:de:
cf:cb:c7:bb:0e:2c:a7:ce:4f:c4:e2:e9:5f:a0:28:
d9:22:fd:ee:c6:97:3c:2f:d3:9b:86:b6:dd:24:55:
33:61:bb:21:22:17:3b:d7:1e:bc:0c:1d:b6:e5:6b:
49:82:71:52:7f:ea:ff:f2:53:71:8e:74:70:16:bc:
75:7c:ef:47:32:3f:5e:40:e4:94:fd:92:11:46:0f:
d5:89:65:12:1f:09:78:45:26:41:be:d5:69:9e:e9:
77:2d:e7:34:01:0c:d6:0a:98:d1:1b:33:1e:cf:9a:
22:60:88:28:68:a6:ce:14:85:3c:4d:eb:27:e9:17:
1d:e3:7b:99:a9:92:79:de:ab:1f:c6:6e:f0:ca:d1:
8f:e7:f3:ed:29:61:91:77:c0:6c:55:49:ba:d6:fe:
37:7f:cd:a5:ea:81:e6:34:ce:2f:80:f5:f1:4e:d4:
60:01:a3:d0:af:4e:44:18:c1:d3:e1:93:13:a4:0b:
d0:78:f2:22:db:65:17:34:f2:31:e6:67:c9:19:4c:
17:58:cb:6b:9c:65:44:44:44:7a:77:62:cf:2f:c4:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:16:65:84:FB:AD:E5:03:D8:4E:31:22:DB:81:63:74:CA:31:77:E7
X509v3 Authority Key Identifier:
keyid:76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:36:11:cd:ab:93:4d:85:e5:9e:c0:0b:c9:56:e7:fb:c0:8a:
f7:d9:a4:49:75:61:ff:80:8e:17:b7:84:fd:9e:5c:66:dc:21:
33:80:15:a5:51:6b:0c:97:a0:b3:7b:e2:4f:15:99:f2:19:bb:
39:c6:dc:62:9a:10:6e:bb:d8:8f:d7:63:83:bd:6f:d8:bb:a7:
d0:b1:29:b8:02:df:2c:de:b4:49:c0:68:30:34:f4:2a:59:b2:
cb:98:5a:9c:e6:09:cf:cc:28:2b:e4:a1:cc:7a:b1:9e:53:0e:
d8:35:8d:8b:6f:10:13:60:07:fa:8f:6a:e8:08:4d:9d:62:9f:
29:1e:40:bd:0e:ab:b5:b6:5e:86:bd:7f:30:2c:05:9d:48:ef:
1c:32:3f:88:be:95:d5:11:42:5b:52:b3:96:57:06:09:e6:96:
d5:35:18:3b:36:8f:a9:b7:99:1b:9d:ff:a8:83:6a:25:d5:29:
1d:eb:9c:7d:15:fc:0d:1e:91:28:01:0f:04:da:21:0f:a4:9e:
de:ab:ba:14:cf:41:35:d9:36:e5:2a:a8:3b:a2:27:19:f0:1d:
a6:b4:89:d7:1a:9b:9a:cb:f4:c7:ce:6f:f2:2d:01:fc:04:ef:
23:39:b8:2c:4b:28:db:af:ca:6a:bf:ed:a2:e2:31:36:7a:63:
b8:3a:c4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:24 2024 by rpki-client on console-fra.rpki-client.org