Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
File: l0Kd6LzDvkdKu9or4qidDzIIw4U.mft (raw, json)
Hash identifier: F+DiPVEAeAO21OqvX3gT3hqYMi/nC0fzlYm+ybMKQp0=
Subject key identifier: 4B:5B:E6:B0:41:A6:D3:7E:D1:7B:2F:99:07:52:33:56:41:7A:C4:1F
Authority key identifier: 97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
Certificate issuer: /CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Certificate serial: 019357D2A81125F6C11AAED0CF892F2186C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
Manifest number: 0C7F
Signing time: Sat 23 Nov 2024 07:00:43 +0000
Manifest this update: Sat 23 Nov 2024 07:00:43 +0000
Manifest next update: Sun 24 Nov 2024 07:00:43 +0000
Files and hashes: 1: 64ShJzuHejRnC01X9C_XZBgLKUM.roa (hash: xMW897PKs9Rp4bpEY9MGrJaYZEzps1ekxPRCNZ38jFw=)
2: l0Kd6LzDvkdKu9or4qidDzIIw4U.crl (hash: oyibEEcK3qR0UsBTtfm0MgVydK7z9RqWvTV/ssjBGUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:a8:11:25:f6:c1:1a:ae:d0:cf:89:2f:21:86:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97429de8bcc3be474abbda2be2a89d0f3208c385
Validity
Not Before: Nov 23 07:00:43 2024 GMT
Not After : Nov 24 07:00:43 2024 GMT
Subject: CN=4b5be6b041a6d37ed17b2f9907523356417ac41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a0:61:f1:ba:b9:34:13:42:a4:f8:1b:be:4d:
d8:c5:5f:34:60:f6:4a:ca:d2:26:45:67:80:c3:a5:
c3:ca:18:2c:85:c4:81:d8:b6:c3:31:5f:63:ca:8b:
65:3d:48:4e:47:d9:a4:98:10:f6:31:43:ff:7a:a9:
6d:9e:2d:2f:a7:f8:f1:dc:b7:b7:83:f7:0c:3e:f6:
c2:4f:24:99:a7:eb:3c:2e:45:4b:a2:5d:d4:e3:b1:
12:89:fe:0d:b2:91:b3:f1:1c:82:f6:84:2d:7b:dd:
e5:68:a0:0c:4c:13:20:9d:82:cd:90:ee:b9:76:0e:
81:76:72:fd:34:ae:dc:2e:9d:ea:66:16:60:5b:c8:
7c:37:d0:5d:39:2d:25:1b:55:a2:40:59:75:38:4d:
37:82:ab:74:a2:bd:02:b4:7f:8b:33:02:64:7e:22:
29:0f:d1:bd:f8:be:63:e6:20:13:3f:46:d7:a1:c1:
d4:6a:3a:04:f6:03:06:14:04:07:a9:da:51:2e:8b:
81:45:89:9e:4d:73:ba:f6:0e:9f:ca:e3:be:25:2f:
99:1d:6a:0d:94:a9:b9:dc:9d:0f:ca:18:43:58:46:
87:55:17:16:9a:7b:b6:d9:e2:63:66:61:3e:7b:c3:
de:ac:73:2a:07:03:3f:1e:be:ee:51:82:2f:80:39:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5B:E6:B0:41:A6:D3:7E:D1:7B:2F:99:07:52:33:56:41:7A:C4:1F
X509v3 Authority Key Identifier:
keyid:97:42:9D:E8:BC:C3:BE:47:4A:BB:DA:2B:E2:A8:9D:0F:32:08:C3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0Kd6LzDvkdKu9or4qidDzIIw4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9911ac-4cf2-4ee5-8d63-049bdc6b8ef3/1/l0Kd6LzDvkdKu9or4qidDzIIw4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:72:16:c0:71:bb:4f:88:de:4e:6d:da:c1:a4:e4:12:47:36:
ba:5a:e1:b9:c4:76:38:a5:33:bc:78:1d:af:30:79:36:7b:14:
a2:4b:8f:10:18:fb:9a:56:9c:59:0e:53:d4:22:58:82:14:1d:
1c:54:77:11:a9:6a:88:8b:15:5a:0c:5d:bb:58:67:d3:63:b2:
cb:53:47:72:2b:e6:77:cb:6d:7d:e5:d6:e9:8c:79:96:b8:ed:
88:c2:bf:13:57:ff:75:e9:fe:b4:ef:bd:c3:6d:0f:e1:b5:17:
48:39:6f:54:da:be:b9:71:e9:f7:e5:b9:71:dd:54:6e:61:1a:
a4:3a:30:17:a8:27:e2:a8:66:ee:de:f9:62:3f:ec:00:e1:8b:
0a:ec:a4:f4:aa:fe:b4:f6:2c:59:3d:db:0f:39:6d:2b:e5:dd:
ce:a1:38:75:bf:d9:d7:31:5a:23:06:51:60:1d:f3:a8:36:1a:
fe:ef:8b:02:04:7a:01:26:3a:c3:ac:78:db:f5:b0:e3:66:c4:
7f:ed:e5:c0:36:92:3c:dc:52:72:f9:92:d1:6b:7b:d5:65:47:
c0:2b:a4:05:a4:01:4d:b7:05:8c:d4:1c:e3:3a:ea:cb:ec:0d:
36:9a:f4:71:14:37:73:29:1c:e9:e0:7a:6d:d0:c5:e4:59:98:
6f:be:8c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:58 2024 by rpki-client on console-fra.rpki-client.org