Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
File: m7OdtQEo2zUK68hDgISZGLsF5wU.mft (raw, json)
Hash identifier: IIrwIEcZ8zTIUIIU5voSYX3LPuTLkd4wfsrRarMkUJU=
Subject key identifier: 84:57:78:D3:D5:96:64:7E:49:D2:97:9C:1D:53:7C:CA:3B:94:07:40
Authority key identifier: 9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
Certificate issuer: /CN=9bb39db50128db350aebc84380849918bb05e705
Certificate serial: 01935764FD9AC3D358821EAED00A74A25615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
Manifest number: 0DE2
Signing time: Sat 23 Nov 2024 05:00:56 +0000
Manifest this update: Sat 23 Nov 2024 05:00:56 +0000
Manifest next update: Sun 24 Nov 2024 05:00:56 +0000
Files and hashes: 1: m7OdtQEo2zUK68hDgISZGLsF5wU.crl (hash: w4Sr1Rd90+8bu/K7erBcH9Ew5EZIY/o4HjPf7gVq2BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:fd:9a:c3:d3:58:82:1e:ae:d0:0a:74:a2:56:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb39db50128db350aebc84380849918bb05e705
Validity
Not Before: Nov 23 05:00:56 2024 GMT
Not After : Nov 24 05:00:56 2024 GMT
Subject: CN=845778d3d596647e49d2979c1d537cca3b940740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d6:5d:02:17:16:86:82:f5:55:5d:03:b0:7c:
7d:86:e3:e0:0f:7a:6d:05:ec:5f:f8:c9:ba:dd:b8:
ec:b5:27:ad:ee:03:38:7c:be:33:b5:6b:13:d6:27:
bc:c4:03:68:2e:2d:c1:8f:34:fe:df:0c:51:bd:71:
3b:15:f4:30:e9:31:26:36:d0:ac:ee:2f:ae:a2:99:
64:9d:f2:08:39:79:de:76:4d:4e:17:89:f5:79:22:
3c:ee:39:55:f7:4d:42:26:a8:83:23:eb:2e:67:72:
90:6f:36:cb:c0:d9:56:c0:7a:41:42:26:98:97:fc:
ff:b2:73:4f:7e:92:11:90:6d:00:f2:d5:41:b8:b1:
d3:fb:f3:bc:71:99:4a:8e:56:22:07:7a:d0:f1:0b:
22:7c:95:89:0d:e0:74:0e:8f:53:ab:71:8e:1e:bf:
47:fb:fd:17:37:9d:53:e3:54:5a:62:c1:a5:9f:85:
39:a9:48:56:e7:4f:7d:eb:62:18:4a:fb:67:2e:b3:
09:46:42:7a:16:8c:af:01:56:c5:0b:e2:90:d6:91:
a4:68:0f:58:d7:bf:46:fc:55:dd:45:e9:b3:05:59:
66:9e:f8:15:64:5e:a2:21:00:2b:ee:cc:6d:5c:b2:
11:8c:67:0e:fe:1c:6b:8f:a9:4f:6c:66:55:9c:9d:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:78:D3:D5:96:64:7E:49:D2:97:9C:1D:53:7C:CA:3B:94:07:40
X509v3 Authority Key Identifier:
keyid:9B:B3:9D:B5:01:28:DB:35:0A:EB:C8:43:80:84:99:18:BB:05:E7:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7OdtQEo2zUK68hDgISZGLsF5wU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e1f9c7-5903-42c8-9833-e28fa39b4b17/1/m7OdtQEo2zUK68hDgISZGLsF5wU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d1:ff:55:99:d4:ab:f9:8a:41:68:e8:60:b6:ae:35:cb:b1:
e8:01:bc:5c:09:05:46:69:73:30:93:5c:e7:ca:a4:16:c7:a2:
3a:ce:48:60:c8:e9:88:97:b9:66:45:fa:84:c8:03:b9:65:0b:
47:60:2f:57:6f:12:b0:66:34:2b:ee:8f:96:75:8e:d3:f2:35:
9a:95:ef:55:8e:29:bf:1c:db:88:06:2f:df:98:93:45:3d:64:
bf:fa:a4:86:f6:cc:ab:eb:b9:63:1f:fa:60:aa:4d:64:90:69:
11:34:03:0f:00:1a:b1:79:1c:24:0a:fc:70:9a:b0:dc:c1:b7:
6a:b1:c4:a5:e4:fa:4c:fd:a4:97:24:78:90:dd:84:92:40:59:
50:cb:0d:ec:ba:3b:ba:e3:5d:ff:8f:37:47:25:e7:e7:10:48:
84:55:9d:1a:de:52:72:73:6f:ec:48:8a:b1:f9:46:8b:a6:a4:
b2:93:5d:40:0d:84:e7:33:1e:4c:c1:6a:a4:a8:c2:ce:a2:28:
cf:c1:f1:8e:48:5a:16:5b:49:48:09:04:27:ba:e2:00:1f:95:
ee:3e:86:77:ff:c2:2c:d9:6a:36:c1:3a:54:15:66:81:6e:75:
bb:aa:d1:59:36:de:91:b1:43:66:52:5c:19:b3:45:1f:22:3d:
24:f1:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:23 2024 by rpki-client on console-fra.rpki-client.org