Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
File: DDnQStg6rB3lqYzfdiQKlzYsSsY.mft (raw, json)
Hash identifier: qYsDcYGeSyVpo6DKKgc+fU5bGFHsqx9So4eyX/OX4wI=
Subject key identifier: 45:B5:E9:57:16:30:05:55:F5:CC:96:0C:BD:A2:B8:3B:26:D4:55:48
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 0193523E25E0E3C44F2E9F15FE2292F44A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
Manifest number: 51
Signing time: Fri 22 Nov 2024 05:00:24 +0000
Manifest this update: Fri 22 Nov 2024 05:00:24 +0000
Manifest next update: Sat 23 Nov 2024 05:00:24 +0000
Files and hashes: 1: DDnQStg6rB3lqYzfdiQKlzYsSsY.crl (hash: 460pXB3Hz9S08JySZ0QELO175LFLlIbjDqu+5N70UzE=)
2: yP1RQ16WBv3LXL4Pzf9NEvLm3GY.roa (hash: ZG98wHoUKXeNGLZHhRr9ZeU1aVGt8f5I6SZDKNTjGCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:25:e0:e3:c4:4f:2e:9f:15:fe:22:92:f4:4a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Nov 22 05:00:24 2024 GMT
Not After : Nov 23 05:00:24 2024 GMT
Subject: CN=45b5e95716300555f5cc960cbda2b83b26d45548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:55:93:2b:49:b8:1d:05:3b:86:8a:30:ce:5d:
aa:5c:76:5b:14:98:c4:d8:4d:12:a7:43:39:cb:46:
1c:30:28:4e:fe:8e:eb:13:0e:47:e2:9a:52:02:e0:
27:48:1d:33:3e:a8:c6:f6:f6:5e:2a:dc:4b:ad:5a:
d7:f9:39:e1:97:04:0a:09:bd:db:9f:31:63:9a:c2:
21:c0:4d:9e:ab:d7:b8:b0:fd:f6:2a:2b:ab:50:de:
0f:db:15:5c:5d:46:22:99:7d:7b:fa:10:88:ea:f3:
ad:68:de:dd:ac:9c:ca:1f:ef:a0:29:e8:66:8f:54:
f0:d7:25:d4:a5:9a:56:ba:8c:21:59:07:b2:9e:51:
25:b5:a5:ea:30:33:27:e7:39:e1:fa:01:32:ff:73:
9e:0f:4e:4e:b5:c1:bb:fa:ae:55:37:66:48:14:3d:
fc:97:b3:ef:8e:2c:73:b5:13:fc:37:6e:fb:53:c1:
39:0a:e6:de:c1:4a:84:3b:31:a7:a2:af:da:38:63:
21:3f:30:06:76:85:bd:1c:ab:ec:eb:94:de:4a:53:
98:09:7a:2d:82:48:a6:5e:3c:a8:56:ad:a2:dc:b2:
74:f2:13:d9:98:71:63:d8:7a:1e:77:3e:48:b6:7f:
6d:2b:31:41:99:de:5d:c9:5d:b9:4a:28:ba:42:df:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B5:E9:57:16:30:05:55:F5:CC:96:0C:BD:A2:B8:3B:26:D4:55:48
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:da:d1:b4:0f:9e:ed:ed:ef:3e:a0:fd:d9:3f:09:b1:02:95:
85:0b:01:77:ea:17:8c:32:8f:60:b1:99:d3:e2:e2:df:93:f0:
8b:7c:72:dd:c3:bf:5b:ad:00:23:21:9b:ce:3e:14:3e:b5:fd:
08:6f:30:52:36:fa:a3:9e:9c:f6:6a:bd:cb:c7:db:33:32:1f:
ac:5c:00:b8:da:79:e4:58:ae:30:ef:03:4c:c7:d9:ea:16:8d:
87:d9:2a:a0:b5:2b:7b:a7:56:08:80:9b:1a:95:56:1a:c5:02:
b9:13:99:03:14:6a:dd:0d:66:6c:7a:01:f4:c7:06:15:eb:19:
58:54:91:9e:ff:74:2d:15:42:a3:b8:18:87:d5:f2:2f:28:84:
93:62:9b:30:88:b7:c7:fb:e7:ec:81:07:82:41:66:4f:f1:d0:
48:05:04:14:7e:a8:e2:f0:d3:3f:66:c0:83:d6:d4:74:55:8f:
76:47:2d:9f:7e:6a:f9:77:07:af:5f:df:74:68:39:24:f3:5d:
7c:9b:fe:b8:dc:b5:b3:ab:f7:c6:4a:ab:9c:20:f0:40:ff:00:
4f:9d:ce:e5:38:cb:4e:53:e3:2e:a6:e7:ee:68:b6:d9:ec:8b:
c3:c8:74:a6:bb:c9:13:6f:47:ed:29:91:c4:29:1d:c3:bc:49:
33:c8:04:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:38 2024 by rpki-client on console-ams.rpki-client.org