Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json)
Hash identifier: mMAVYUCV1HAKqMOa5C4CSMshSmPo4vBgRoR1j+3H7C8=
Subject key identifier: 3F:E5:97:D0:20:0D:57:C4:7A:4B:2E:43:BA:F4:BD:65:CD:7C:A5:9F
Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d
Certificate serial: 0193572D8861BCE41EF274F91EEFE4873DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
Manifest number: 0984
Signing time: Sat 23 Nov 2024 04:00:21 +0000
Manifest this update: Sat 23 Nov 2024 04:00:21 +0000
Manifest next update: Sun 24 Nov 2024 04:00:21 +0000
Files and hashes: 1: AFMCKJxZ8R1Y1JuKceyw7pmH-AM.roa (hash: EwDQ0DZ80n4w4MnXt/5Mp8bTz2OggfoVPxonCCMDbjs=)
2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: VXlvpmn0TGWYbN7S4SzIUVHAVZf2EaVVMoETh/HopwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:88:61:bc:e4:1e:f2:74:f9:1e:ef:e4:87:3d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d
Validity
Not Before: Nov 23 04:00:21 2024 GMT
Not After : Nov 24 04:00:21 2024 GMT
Subject: CN=3fe597d0200d57c47a4b2e43baf4bd65cd7ca59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9c:20:80:88:22:08:8b:72:07:46:3b:2f:7c:
09:ae:6d:80:be:93:e8:8e:e8:3a:7e:d4:c0:c3:44:
e0:af:7a:f6:28:18:05:d2:7a:83:a6:61:c8:b2:e0:
11:56:1a:2a:c0:dd:f9:df:c6:1f:1f:c2:3f:69:8a:
1b:fb:8f:13:4e:64:19:95:dc:ba:1e:97:ea:9e:fa:
81:7c:d6:4e:4f:f2:ee:a7:72:ca:87:f6:be:3f:7b:
d5:67:38:a9:28:18:64:5d:86:4a:63:5b:b7:42:c2:
4b:7b:31:51:38:7e:ca:3e:2a:f8:e3:a5:fe:68:b7:
fa:2c:42:99:88:f9:a7:df:05:15:c8:ef:45:f4:af:
b3:42:ef:c0:7b:60:a8:ca:f4:e3:d6:df:43:43:63:
22:e6:86:73:57:66:09:5e:f0:e8:d2:d7:4e:e9:1d:
53:30:70:e0:2e:78:de:06:60:6f:c6:6e:3e:c5:6f:
05:53:d1:f2:f8:e3:e6:75:6c:93:46:63:f7:38:9e:
ee:47:39:77:24:65:bb:2f:41:00:9a:b7:7e:3a:30:
fb:4c:bb:59:0f:20:81:dc:11:ad:ac:31:4e:5b:45:
a1:f1:da:23:a2:03:de:e1:14:3e:6f:36:4c:8f:c0:
28:52:a2:b6:38:f1:c3:35:24:65:b5:c9:b5:61:ea:
aa:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E5:97:D0:20:0D:57:C4:7A:4B:2E:43:BA:F4:BD:65:CD:7C:A5:9F
X509v3 Authority Key Identifier:
keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d3:12:8e:0e:de:bb:9e:38:57:68:0c:70:19:67:c8:88:e8:
f2:f9:95:a9:36:96:99:c7:2e:f2:96:a5:17:a6:fe:8f:0c:a6:
f4:dd:b6:46:73:80:0a:10:d0:14:35:a7:de:ca:0c:fa:4b:b5:
de:a1:ff:98:c9:86:58:46:1d:61:63:a7:9a:f6:a7:f9:50:cf:
06:2e:ea:c6:77:4e:83:e5:de:45:5c:7a:e4:a6:54:4e:2a:78:
b5:ea:1a:5a:99:56:83:a9:da:d0:fa:a4:a9:ca:33:3e:ff:33:
aa:d1:f5:3b:83:1c:01:0e:f7:49:81:a1:a6:ca:d8:3c:b0:b4:
f8:b2:58:be:3c:86:26:2c:4c:bc:42:c7:74:35:6a:93:ea:60:
0b:11:7f:01:ba:d3:ed:37:3d:4d:59:be:6d:25:09:0f:91:36:
42:16:aa:3a:a0:57:ab:f5:e4:bb:33:81:7c:41:71:96:f0:e0:
8e:73:4f:f3:16:70:46:d9:89:3b:9b:83:bc:77:7b:00:31:34:
71:b6:97:85:83:11:17:96:87:09:66:b8:b3:a6:65:63:46:d7:
a8:fb:b4:17:3d:e6:aa:7d:6b:22:18:9e:8f:77:9a:2a:19:ab:
b4:51:be:2e:c8:d9:ab:4c:5f:ee:44:0c:ea:5b:75:f5:e6:7d:
0e:1f:08:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:43 2024 by rpki-client on console-fra.rpki-client.org