Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
File: DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json)
Hash identifier: NWQzKW1va5npFjg1dMy4dACn8of86GClg/FUx7M68p4=
Subject key identifier: 00:F0:C8:9F:59:18:20:CA:59:B9:6A:C0:48:28:02:7F:A5:65:0D:AA
Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
Certificate issuer: /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Certificate serial: 019369339DF90DF02F4B19B43AE1A36AC43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
Manifest number: 0D40
Signing time: Tue 26 Nov 2024 16:00:10 +0000
Manifest this update: Tue 26 Nov 2024 16:00:10 +0000
Manifest next update: Wed 27 Nov 2024 16:00:10 +0000
Files and hashes: 1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: C1LUOUXwga+IxDFTqXVAtDo6iKHxaZhZK1yMRxk7HVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:33:9d:f9:0d:f0:2f:4b:19:b4:3a:e1:a3:6a:c4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Validity
Not Before: Nov 26 16:00:10 2024 GMT
Not After : Nov 27 16:00:10 2024 GMT
Subject: CN=00f0c89f591820ca59b96ac04828027fa5650daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:0e:44:90:77:df:b8:cf:1f:df:3e:3e:22:
cc:ca:a0:54:d8:a2:1b:53:f3:31:76:29:ba:20:3f:
c6:24:b9:fb:a4:49:9a:f5:f9:c9:ce:e8:84:59:97:
4e:b7:1f:f0:78:c2:02:ba:81:c2:e9:24:b6:f3:5f:
52:ec:45:c9:b3:61:fc:f2:14:d1:20:26:f2:97:b4:
e4:0c:c8:f8:58:6e:62:15:02:4c:6b:29:2c:4f:de:
cc:a3:21:3c:d1:81:78:8d:2b:cf:14:51:45:b3:a4:
5c:1f:9f:97:e9:01:19:3d:e3:1a:71:3f:58:4d:ce:
42:fb:78:4e:7c:57:3a:d8:69:21:3c:84:14:7a:e1:
bd:86:3a:d8:67:98:4e:d8:82:ff:c3:7a:d0:68:23:
a2:d5:6d:65:db:ad:db:5a:93:86:79:04:da:14:ca:
16:81:e4:88:41:bc:f9:ca:48:19:46:2a:ed:88:6e:
de:b8:61:82:e9:2b:a0:dd:dc:86:cb:b9:97:e7:9b:
38:0b:da:38:40:3f:92:89:93:c5:cf:98:b4:95:0a:
33:28:87:3d:8a:36:1a:ec:c3:64:60:81:28:75:8c:
5a:a8:2a:ba:ff:3a:3f:fc:38:00:35:81:df:6d:79:
ed:22:98:47:b0:98:34:b9:eb:a5:20:36:15:fd:ff:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F0:C8:9F:59:18:20:CA:59:B9:6A:C0:48:28:02:7F:A5:65:0D:AA
X509v3 Authority Key Identifier:
keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:69:35:0b:a5:b5:c7:0a:35:47:52:45:d4:86:6d:9f:e5:35:
3d:b9:a4:76:d6:0a:c3:64:91:c3:59:a9:2e:48:62:53:5b:4d:
1b:d4:64:f9:d0:be:9b:49:cc:01:87:31:a7:c7:11:ac:96:f2:
58:ea:cc:9b:15:ec:ae:b5:46:d0:e0:0e:10:a2:99:3f:78:8d:
85:04:e9:40:40:3e:26:9b:d9:2b:f4:42:d2:73:c0:5c:fc:31:
ea:e7:1e:3b:f3:9e:22:37:5c:b0:a2:26:41:ec:e4:6c:0c:ea:
da:a9:07:d8:7c:ae:43:db:f8:07:20:17:a8:f4:95:c2:10:08:
ad:42:2b:d3:0c:87:f8:3e:75:5c:c5:11:9c:17:eb:10:e5:80:
61:2b:26:f3:c7:2f:72:9f:d4:7e:1e:59:af:a0:aa:5e:39:54:
21:22:35:47:f4:3e:fb:90:0e:e9:a1:9c:ff:89:bd:f3:c0:52:
b7:f8:e5:18:76:87:16:30:55:fb:2b:d8:1c:10:0b:ac:ea:75:
01:06:02:8f:77:11:6c:32:d1:e4:4d:b1:4b:22:14:75:b7:a7:
b9:58:84:f1:e2:4f:31:4c:34:73:98:cf:da:a8:cd:2a:5c:3e:
28:df:10:dc:48:4e:1b:81:46:b8:aa:a3:a8:92:e7:3e:be:fa:
0e:f2:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:28 2024 by rpki-client on console-ams.rpki-client.org