Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: K/IyFs3+izxGe19DkymDA3j8uDbDVDweGB99XhTfluM=
Subject key identifier: 04:60:08:E3:C6:79:5C:60:E2:3E:EA:7E:6F:7A:9F:3D:5C:A5:90:13
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 019364E97988C8C7A5490067444ED0258FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 01D6
Signing time: Mon 25 Nov 2024 20:00:42 +0000
Manifest this update: Mon 25 Nov 2024 20:00:42 +0000
Manifest next update: Tue 26 Nov 2024 20:00:42 +0000
Files and hashes: 1: V077Ss7eP5KxinkI4CT4LTx-a1Y.roa (hash: UxjoI11dgojE4qYZO6SvXwF+jznyMS15rNHD8ey78pQ=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: 0daVxhkSvIiRa+cJmKJo+eo0ZOmc7Yag+P1L7v76guA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:e9:79:88:c8:c7:a5:49:00:67:44:4e:d0:25:8f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Nov 25 20:00:42 2024 GMT
Not After : Nov 26 20:00:42 2024 GMT
Subject: CN=046008e3c6795c60e23eea7e6f7a9f3d5ca59013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:1e:95:68:db:d5:ba:fa:46:16:0f:2b:a3:
b2:6c:c9:6b:af:13:d3:32:88:2b:75:b3:2c:b2:07:
92:a8:18:00:89:13:27:7b:e6:f2:d3:d9:12:ae:1e:
3b:36:22:b6:fd:3e:6f:eb:96:f3:1c:53:c1:c7:94:
cb:7b:64:d6:39:75:86:f9:e1:7b:6d:85:92:18:d7:
6a:b2:0d:d3:5d:6d:dd:93:17:29:07:ff:94:f2:fb:
77:19:2f:68:1e:c6:ac:1b:d7:ac:8d:5f:dc:cf:8a:
d0:3f:88:4e:23:17:16:23:ba:83:65:29:f7:a7:be:
fb:cc:a3:43:87:5c:5b:b1:05:73:9b:66:f5:c1:9b:
4c:f2:42:8c:26:02:3e:2f:37:b9:14:94:92:73:34:
57:ce:2e:65:56:e0:08:73:52:01:f4:0e:0c:07:73:
b7:81:f2:29:e8:7c:a0:c4:a4:e3:32:70:58:8a:27:
48:fa:5d:86:0d:f4:69:7c:85:9b:9e:9c:a7:2a:93:
85:1b:d2:36:98:88:34:4f:a1:30:5c:c0:2a:48:5f:
ee:a5:a3:c4:fc:4f:4b:67:2f:c8:78:e8:b5:da:d0:
e9:6d:53:22:e6:ac:5a:7b:f8:79:8d:19:de:b6:1d:
6d:aa:4b:9e:67:c8:1f:8d:08:f6:3b:24:3b:73:97:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:60:08:E3:C6:79:5C:60:E2:3E:EA:7E:6F:7A:9F:3D:5C:A5:90:13
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:12:ee:d8:01:9d:75:ae:8c:c5:94:87:f7:83:a0:20:0d:78:
48:c1:48:c1:f6:bf:ee:5a:ee:cc:81:d8:d1:6c:ae:b8:a9:5b:
82:b0:54:b3:b4:be:91:01:b0:70:6c:04:53:c7:b6:ea:67:9d:
4c:ea:13:23:05:03:e6:a6:19:67:64:db:75:5c:3f:ce:c5:30:
db:c2:71:e8:77:a5:ab:53:bf:d0:91:4f:1f:47:54:a3:5d:28:
3b:01:29:62:c4:f5:47:db:8c:2c:21:ce:de:8f:df:db:6c:6c:
d5:ba:56:28:7e:76:ed:a6:03:19:6b:d6:e3:f5:81:04:5f:c1:
5c:94:b6:6c:b5:78:b2:13:f9:12:b5:ca:a4:5a:fc:93:58:a6:
ec:1a:7c:5c:8f:90:bd:97:a1:a7:c9:e5:d2:e4:ac:c1:bf:da:
06:34:26:65:38:49:fd:6e:a2:e1:62:8b:05:44:ee:e4:1b:83:
10:2e:df:3f:a5:0c:78:cd:21:a2:b3:45:21:e4:43:3d:32:63:
d9:1d:57:b7:73:bd:6a:21:10:bc:e6:e0:83:57:cc:03:ec:ab:
57:3e:ff:75:0c:95:31:83:0f:8f:92:3c:f2:ba:12:da:d1:42:
f5:93:09:2a:64:b9:ef:15:41:42:ae:75:51:32:a0:42:92:b3:
64:05:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:21:47 2024 by rpki-client on console-fra.rpki-client.org