Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json)
Hash identifier: 8BXFjjGKuKinwTjLu+Dcwbubaam1DT+OZnQE8pk4mtE=
Subject key identifier: 77:9D:D7:77:13:87:B6:FA:FC:D3:BB:3C:33:2F:FC:E9:77:DF:6D:17
Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Certificate serial: 01935576A14E0B35EF773853380E14560648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
Manifest number: 4A
Signing time: Fri 22 Nov 2024 20:00:57 +0000
Manifest this update: Fri 22 Nov 2024 20:00:57 +0000
Manifest next update: Sat 23 Nov 2024 20:00:57 +0000
Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: Wdku5AU9abriXysbcQmGkf3hOM0HMBSq40Nd4vLdXy8=)
2: PHjcLrvU7AKIebeq7z90GEyCJIA.roa (hash: 4z5Fl2DS8yjcVMsGONnIkzz7nD7jwCT+2je1Ca7Ln9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:a1:4e:0b:35:ef:77:38:53:38:0e:14:56:06:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af
Validity
Not Before: Nov 22 20:00:57 2024 GMT
Not After : Nov 23 20:00:57 2024 GMT
Subject: CN=779dd7771387b6fafcd3bb3c332ffce977df6d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:b9:a6:ad:13:1a:a9:97:87:c4:64:7e:31:
a8:c9:eb:19:5c:65:51:d8:01:ca:c5:79:e3:b1:10:
33:7e:73:db:c1:a8:5e:4e:78:03:6a:0f:76:8a:62:
fd:c0:d4:e6:2f:fb:12:7b:31:57:eb:b8:70:85:7f:
cc:d5:85:be:20:3c:4a:9d:02:e4:c5:47:76:8e:5b:
05:51:d7:c8:e9:a8:35:bf:74:e6:ab:5d:74:af:37:
05:2b:fb:9c:19:33:55:a5:1e:8c:b2:f9:81:02:63:
6c:f5:3b:b7:9f:76:04:a3:c1:a9:4c:89:40:ed:b6:
a6:0e:94:aa:f2:5d:41:97:ec:3f:0b:93:dc:20:d2:
db:46:43:9c:48:04:45:a0:cc:a6:90:70:a4:e3:0d:
91:a2:ab:84:85:67:af:90:33:02:38:3b:13:96:81:
9a:74:54:1d:ca:06:b3:5b:9c:c8:7e:21:85:ed:1b:
b2:f6:c1:b0:41:ad:fc:9b:15:fb:f5:05:77:84:7c:
a6:65:13:9c:6b:79:50:36:23:95:7c:6b:37:7b:12:
dc:57:14:f4:20:4a:49:41:29:58:d7:5d:be:1b:13:
c9:7d:a6:09:4b:2e:5d:41:88:28:7c:b6:88:79:6e:
0c:d8:c9:2b:2e:b5:22:16:8f:70:87:02:f4:4e:9f:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9D:D7:77:13:87:B6:FA:FC:D3:BB:3C:33:2F:FC:E9:77:DF:6D:17
X509v3 Authority Key Identifier:
keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:2d:26:bb:20:3c:e8:72:19:94:45:53:df:07:6f:c7:1c:7d:
bc:ea:53:62:68:e2:19:df:1d:76:a2:42:b0:54:d8:35:a4:b2:
f6:15:91:a4:bb:19:d1:5e:b6:c2:5f:ae:dc:36:36:e6:0d:81:
61:9d:da:1d:b1:8b:91:59:1f:65:5e:d2:e3:54:4d:46:c8:42:
97:a3:32:27:0f:a7:eb:a2:52:f6:26:c8:0e:42:48:94:fb:97:
6c:94:bb:a5:1f:d2:3d:6e:f0:26:af:96:2f:44:17:fc:26:16:
ed:75:fc:9e:80:cb:79:32:82:9c:bb:64:3d:3a:0b:90:e1:5d:
19:5d:2c:ae:d4:de:8b:d9:45:69:57:0e:2a:96:c8:70:52:c1:
cb:9c:d3:d9:28:f5:61:52:8b:b8:c9:bd:19:34:34:aa:fa:0a:
ba:f7:93:68:d9:1c:23:ea:41:ba:84:cf:54:ae:99:5e:46:ca:
ad:06:9f:c8:35:93:62:fd:fd:94:92:a2:c5:4c:23:82:e8:c1:
25:a5:c3:55:e7:65:33:e3:27:21:20:f6:29:cd:46:93:7e:97:
2c:b6:e2:13:e9:d8:ca:66:66:09:c4:37:36:ad:a5:91:54:14:
41:ca:a8:04:e7:43:fa:83:8e:f6:46:be:e0:6d:d5:f8:6f:d8:
49:f3:4f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:14:30 2024 by rpki-client on console-fra.rpki-client.org