Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json)
Hash identifier: fLUVHOAr7VdB+ie/0SrcAVsRvdBQQkX87GA1cFyfguA=
Subject key identifier: F6:6D:BB:9A:B3:30:06:A5:6C:1B:FC:86:41:AA:53:9F:DD:9D:F4:43
Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Certificate serial: 01940721C8B60EFD2C2630614E74676B4CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
Manifest number: 13D3
Signing time: Fri 27 Dec 2024 08:00:42 +0000
Manifest this update: Fri 27 Dec 2024 08:00:42 +0000
Manifest next update: Sat 28 Dec 2024 08:00:42 +0000
Files and hashes: 1: 1-LnSp8dm6xyM02jNIKboyKvNz_8.roa (hash: 8mC40dBmf7v+VH5OtgwvQwd3U7HTjfcMJQLp38VicUY=)
2: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: 53jXrrXZUatPBXHqQkjX/k08hKmImqm3aExkbwCZ7JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:21:c8:b6:0e:fd:2c:26:30:61:4e:74:67:6b:4c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5
Validity
Not Before: Dec 27 08:00:42 2024 GMT
Not After : Dec 28 08:00:42 2024 GMT
Subject: CN=f66dbb9ab33006a56c1bfc8641aa539fdd9df443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:27:32:77:20:40:d1:9a:4a:63:fa:ec:e3:6d:
09:61:cd:7c:0d:42:11:bb:da:a1:b0:c3:bd:26:1e:
5b:08:e2:1b:86:a3:bb:54:84:96:c3:f5:9f:4a:c8:
86:53:b3:3e:7a:2e:70:ae:ad:3f:25:97:7f:cd:c0:
52:85:c8:d1:21:04:13:6d:1b:0d:7c:2d:f1:4e:94:
1f:05:79:d6:09:16:95:b6:2f:50:d3:2e:bb:2b:88:
73:31:29:b8:cc:58:fe:25:29:16:3f:bf:d7:ac:53:
86:b8:80:09:77:68:d7:62:df:8d:a4:6c:a1:70:ca:
dd:c7:b0:e8:31:ae:84:f3:ee:b3:30:6d:16:5e:ac:
37:22:54:44:b0:1a:b9:dd:4f:41:94:22:f8:9f:6e:
06:56:35:46:b8:dd:78:d8:05:9e:3f:0c:85:50:a5:
e1:a4:82:a0:f9:4f:bb:51:f2:16:9e:45:d8:d3:86:
b2:35:7e:72:df:a7:6a:f9:99:e2:53:c7:2a:66:59:
88:87:a6:aa:32:ec:06:f0:c6:02:30:8a:ed:8c:5d:
93:3e:43:ec:d4:16:67:0d:5d:93:a1:d9:53:96:09:
09:eb:1b:54:87:f4:f5:34:95:99:76:a3:b8:2f:a7:
18:e5:0a:4f:fc:72:52:0c:43:6d:49:5d:33:bb:5c:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6D:BB:9A:B3:30:06:A5:6C:1B:FC:86:41:AA:53:9F:DD:9D:F4:43
X509v3 Authority Key Identifier:
keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e9:fd:a3:b2:83:86:58:6f:f6:8e:80:68:cb:82:ea:db:12:
b8:4e:cb:2e:24:c3:48:ed:2c:9c:45:96:0f:db:0f:fb:75:b3:
44:5b:f6:1c:f3:64:2b:fb:f3:e0:b6:78:af:6e:ab:c5:9a:aa:
49:04:ac:94:d1:52:61:66:a4:0a:30:66:38:60:77:86:2f:81:
a3:45:1b:cb:d4:94:08:3b:32:88:cd:f6:6c:f1:c3:08:0f:a8:
5a:c7:f9:05:76:80:34:20:a6:57:70:24:cb:7e:24:3d:e9:bd:
64:6d:56:cb:bd:5d:c9:ef:bc:d5:86:f8:1b:df:a6:9f:3b:69:
3e:9c:46:5d:ee:d5:0f:ce:bd:cd:15:ed:1d:05:27:c4:2f:e1:
bc:80:76:51:7e:bb:58:4f:84:d9:5e:d3:af:dc:b6:68:67:c7:
1b:a1:d7:53:bf:9d:f4:44:b3:11:88:f2:ce:e0:05:e2:3a:dc:
ed:41:11:13:69:64:2a:8f:04:60:4c:48:78:ed:8c:71:2d:36:
e9:bf:cc:af:86:31:d0:e6:f5:50:ad:bd:c2:55:c7:c1:f0:e7:
91:07:b1:0d:46:1a:15:0d:56:85:42:0d:f7:01:00:06:6f:9a:
2d:0b:2c:1b:cd:e8:a4:ce:ed:43:88:b0:bf:13:44:9b:60:3e:
de:fb:72:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:41:44 2024 by rpki-client on console-ams.rpki-client.org