Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
File: dDbW6AAjNMdDTqze-L8s5yFslT8.mft (raw, json)
Hash identifier: dsVp90qtkLICqwzlZdRHT5tcsg1twyPKULGJcqWp6Jc=
Subject key identifier: 69:E7:2B:95:05:27:EE:74:A1:F6:DA:4A:19:60:B6:6E:4F:0B:10:CB
Authority key identifier: 74:36:D6:E8:00:23:34:C7:43:4E:AC:DE:F8:BF:2C:E7:21:6C:95:3F
Certificate issuer: /CN=7436d6e8002334c7434eacdef8bf2ce7216c953f
Certificate serial: 019353F6291D41D66354E48C76BA1C4CA6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
Manifest number: 0D10
Signing time: Fri 22 Nov 2024 13:01:01 +0000
Manifest this update: Fri 22 Nov 2024 13:01:01 +0000
Manifest next update: Sat 23 Nov 2024 13:01:01 +0000
Files and hashes: 1: JGsJOXsM1MeaLAh590gBW7PNApU.roa (hash: ZludnWROEhMg+ODqZnJ0blQNcE9dZiGcbIRgJlKOi00=)
2: dDbW6AAjNMdDTqze-L8s5yFslT8.crl (hash: u5OK1MST7DE9fM0/NEABdFG/xMZz+/5fo70fNl7o0xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:f6:29:1d:41:d6:63:54:e4:8c:76:ba:1c:4c:a6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7436d6e8002334c7434eacdef8bf2ce7216c953f
Validity
Not Before: Nov 22 13:01:01 2024 GMT
Not After : Nov 23 13:01:01 2024 GMT
Subject: CN=69e72b950527ee74a1f6da4a1960b66e4f0b10cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:a2:f8:8d:e8:f4:fc:54:83:af:20:dd:c6:
b5:98:10:c8:d4:17:ea:f1:75:96:3d:5d:b3:d3:e7:
3b:cf:39:9c:b2:8e:b3:59:80:81:33:24:d7:d6:44:
f9:33:82:f8:98:44:a4:1c:1f:b5:81:95:a7:48:ea:
db:ef:ba:da:2c:24:cd:2f:30:d5:6f:a7:74:b0:6d:
20:35:03:5e:b7:e0:a1:59:0c:67:71:59:e9:a0:07:
25:2d:79:95:a7:66:38:c7:74:dc:70:dc:45:16:b0:
2c:63:8b:6c:9a:64:a8:c5:e2:3a:82:83:d1:d8:b1:
17:77:c9:b7:41:38:51:37:89:01:f7:41:82:42:6e:
17:4c:0a:4e:15:da:5c:15:14:a8:9b:a1:77:3d:88:
c8:95:52:bf:26:3e:7e:5d:a5:8c:91:cf:49:06:84:
b0:87:ab:4b:2c:58:b4:7c:14:98:52:53:b3:db:a0:
b6:79:9f:c6:42:59:91:b9:a2:73:c3:15:30:d5:34:
df:f1:ee:8c:17:35:09:10:ae:79:8d:15:f6:99:17:
6f:ea:df:50:af:03:2a:fc:a8:7b:9f:c1:19:8e:f8:
ec:51:fe:53:9f:7c:ff:2d:02:f2:63:8a:e3:86:d8:
d2:16:cc:7f:bd:19:3d:63:d3:fe:3d:5c:f9:42:55:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E7:2B:95:05:27:EE:74:A1:F6:DA:4A:19:60:B6:6E:4F:0B:10:CB
X509v3 Authority Key Identifier:
keyid:74:36:D6:E8:00:23:34:C7:43:4E:AC:DE:F8:BF:2C:E7:21:6C:95:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDbW6AAjNMdDTqze-L8s5yFslT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5a1279-ba32-4840-ab9f-1805b3083886/1/dDbW6AAjNMdDTqze-L8s5yFslT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:91:5c:88:87:7f:f0:b9:42:5c:91:3f:de:7c:f9:81:52:3f:
6d:bc:6f:67:a1:c0:d1:db:4f:af:68:af:16:1f:58:f3:c8:78:
d8:a6:d5:f7:93:d8:59:9d:66:5a:c8:5a:a2:04:0a:24:b4:4a:
d4:8d:ec:73:7e:e4:04:1b:ad:96:86:25:97:46:e3:95:7e:38:
03:d1:eb:b7:48:6a:2f:b1:87:f7:69:fb:d6:c7:c9:f9:d1:be:
34:9f:27:8f:59:08:dd:be:32:fb:f5:03:31:df:0f:63:e4:0d:
bc:7c:12:3e:7e:b2:7f:dd:24:a6:bf:db:92:ec:fb:77:a8:9e:
de:39:e4:0f:b6:33:d5:d4:07:3c:fa:bd:74:05:05:13:22:a0:
ba:fa:db:81:f5:eb:0c:14:3b:f3:2e:01:4e:dc:f7:ec:4c:8a:
a0:17:54:79:22:da:92:82:da:a1:5a:11:ee:73:cb:84:1d:fc:
01:ad:44:42:6a:dd:b4:14:79:96:5c:ca:c2:fe:02:6e:ed:0f:
ea:b6:23:73:99:36:3b:f3:f4:d1:38:d8:67:94:f0:d1:aa:4a:
82:2a:d8:15:51:0f:e5:7d:42:b6:10:a8:cb:4b:aa:8e:11:9e:
77:d2:93:56:c8:cc:3b:af:f8:dd:71:34:60:dc:3d:91:66:4a:
7a:93:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:11 2024 by rpki-client on console-fra.rpki-client.org