Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier: j5JWcbGtvPourTqX9tOGyChF8rvbBpO7Dsj0aCA/P5c=
Subject key identifier: 5A:54:30:77:AF:7B:7E:73:E7:3B:FB:44:87:99:E9:5E:20:C0:F8:88
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial: 01936A46B4C2EDF0469FD757CBD5E3596C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number: 07BA
Signing time: Tue 26 Nov 2024 21:00:38 +0000
Manifest this update: Tue 26 Nov 2024 21:00:38 +0000
Manifest next update: Wed 27 Nov 2024 21:00:38 +0000
Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: M/po/fB/qvYOSs0cUrSihU83+Z7+7vRRTyJ+bQwR4sY=)
2: HLptWagWLXA_D7eIcSSL1iea7ho.roa (hash: giPqYB+3HJTGqwx341e0xrXuwpt36n7d8GKHUPGMD3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:46:b4:c2:ed:f0:46:9f:d7:57:cb:d5:e3:59:6c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Validity
Not Before: Nov 26 21:00:38 2024 GMT
Not After : Nov 27 21:00:38 2024 GMT
Subject: CN=5a543077af7b7e73e73bfb448799e95e20c0f888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:9c:21:9e:5c:8e:e6:57:04:28:c3:c4:34:
5f:14:2e:1f:2e:05:62:7a:a3:b0:b8:42:7f:ce:82:
2b:ff:6c:61:c4:a9:b0:28:93:f5:23:7e:95:ec:50:
25:18:2d:64:0a:f3:2f:bf:b5:00:f3:db:e1:06:e5:
72:4b:fb:64:09:d0:46:99:e8:37:dd:83:bf:ca:d7:
5e:1b:4b:6f:1a:5a:98:0e:87:41:a5:a5:30:27:b7:
58:61:c8:01:93:b9:56:a2:18:c4:58:5f:13:be:a3:
de:0a:98:f1:be:96:b5:33:e6:e2:62:41:49:e0:28:
95:5d:1b:95:e7:d9:38:33:83:82:ad:8b:5b:23:18:
8e:99:68:3f:9b:f0:c4:68:ef:13:76:23:60:e2:3a:
70:56:56:ec:86:9a:2b:e0:88:34:ee:89:f2:d6:e8:
50:6d:b6:db:16:12:98:a8:b2:b1:fd:cd:b4:08:90:
2a:57:4d:23:4e:71:5f:29:21:91:ba:7b:92:b0:89:
5b:b7:f2:b4:20:bc:e7:18:8b:7e:c3:08:9e:de:9f:
01:28:06:3e:e3:04:e7:6f:1e:0b:97:93:fd:ff:1c:
3b:48:96:84:ae:85:59:d4:3f:93:fb:61:36:fa:eb:
dd:87:c7:bd:26:19:47:5b:77:b5:e4:d1:10:b6:4f:
7f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:54:30:77:AF:7B:7E:73:E7:3B:FB:44:87:99:E9:5E:20:C0:F8:88
X509v3 Authority Key Identifier:
keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d3:e5:53:ad:79:86:74:c4:9d:f7:99:24:88:f2:30:0b:93:
4d:70:d6:83:d7:23:e0:18:22:b5:62:02:78:fa:0a:74:22:da:
be:68:56:fa:6b:22:8d:cb:6d:e9:d5:63:1f:3e:1f:26:47:13:
81:34:d4:2b:48:1d:cd:1e:dd:e0:e9:a7:b6:e0:f0:10:70:8a:
07:47:98:1a:6b:87:d4:78:30:85:d0:ff:46:33:80:82:69:a1:
be:d2:57:1a:11:9f:b0:46:bc:98:e6:04:03:f8:d6:73:40:5c:
bf:28:06:a0:46:6f:0d:c6:17:9e:f4:90:67:0a:a7:cc:e1:c4:
e1:d4:55:be:0c:f0:4b:fd:4d:b7:83:f1:b9:75:e2:99:a1:cb:
2a:86:08:59:82:4d:0c:27:5b:75:69:55:2e:d2:1d:de:3c:a3:
f6:d1:9a:25:7b:d9:44:55:bd:cb:28:8c:9a:94:bc:ed:79:8c:
c7:b2:29:d0:20:57:28:ae:58:cc:c7:3a:db:89:4b:fa:32:d4:
ee:8d:c6:db:3b:6b:61:b9:8b:f2:6a:3f:9a:3a:91:ea:8c:6d:
29:5f:8c:9c:34:6c:86:75:18:75:09:50:ff:0b:50:36:fd:f9:
79:08:bd:7d:fd:ac:34:b2:c7:38:95:f6:43:1a:44:55:de:f3:
c4:82:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:50 2024 by rpki-client on console-fra.rpki-client.org