Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
File: d9LZKEIxBOXDSA4htKPtFJiyon4.mft (raw, json)
Hash identifier: WNtV/W1r51WRn6b6rfZVqVI9pLr711HNJPkrBjtB8Pc=
Subject key identifier: 50:55:EC:20:61:D7:DD:41:7C:CB:62:56:68:55:03:4F:C2:C6:08:F0
Authority key identifier: 77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
Certificate issuer: /CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Certificate serial: 019369DA61096C0D9563E083F7D8054D551B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
Manifest number: 08F1
Signing time: Tue 26 Nov 2024 19:02:19 +0000
Manifest this update: Tue 26 Nov 2024 19:02:19 +0000
Manifest next update: Wed 27 Nov 2024 19:02:19 +0000
Files and hashes: 1: WNTF--ntYZk5T7z204PKRBzT1z8.roa (hash: 957yHdibkKXT/xHo9dn+lmoBuSSstIwOTIbyPi8X9Fs=)
2: d9LZKEIxBOXDSA4htKPtFJiyon4.crl (hash: gyDg6mr/ai2cuVDvnN7YENRDfGI7ki+b5S/afqfTlys=)
3: sVOAnij5FxoE_QE40guDN5y7gCE.roa (hash: qSm/sWJPZhex17utMHK+EgbsoNrwSauw9oDtEMxWk6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:da:61:09:6c:0d:95:63:e0:83:f7:d8:05:4d:55:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d2d928423104e5c3480e21b4a3ed1498b2a27e
Validity
Not Before: Nov 26 19:02:19 2024 GMT
Not After : Nov 27 19:02:19 2024 GMT
Subject: CN=5055ec2061d7dd417ccb62566855034fc2c608f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:49:0a:a6:b0:c9:29:62:26:ce:1d:72:19:
cc:c5:b8:4d:7a:f7:7b:4e:da:96:86:c1:08:14:58:
5d:5a:47:df:fe:f4:34:21:3f:4f:ba:b7:3e:2b:ca:
7f:08:72:ea:11:da:fb:ab:f2:6a:c8:91:ad:81:62:
ee:35:dd:18:c6:6c:2b:e0:6f:01:85:dc:e3:b2:6b:
6b:26:b0:25:fb:c1:3f:56:05:bf:e6:5e:86:80:3a:
ce:e9:75:93:5c:67:53:37:50:2e:a9:ba:46:fa:47:
ea:3c:c5:79:75:b1:12:1f:e0:89:a4:41:31:36:ed:
a5:2a:4b:a4:bd:ab:d4:25:df:46:c2:a1:76:73:52:
92:f6:83:22:fc:31:69:de:7e:cd:b2:2a:e8:96:12:
c4:4f:53:e3:03:57:75:73:76:41:52:0c:32:c4:5b:
7b:0d:55:58:e4:3e:1d:db:d7:79:10:b6:24:8a:76:
e5:b1:04:9d:3b:2a:2d:e4:28:11:6f:95:5f:77:24:
e5:eb:29:61:3a:07:3c:ff:e6:c5:05:f0:4b:e8:06:
67:2d:0e:47:3f:68:33:fe:20:64:89:4f:ea:62:3c:
86:79:83:83:1e:f3:1f:ee:d6:95:e2:96:31:7a:67:
d1:90:66:8c:02:08:dd:c3:c7:47:9a:08:b7:e1:e8:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:55:EC:20:61:D7:DD:41:7C:CB:62:56:68:55:03:4F:C2:C6:08:F0
X509v3 Authority Key Identifier:
keyid:77:D2:D9:28:42:31:04:E5:C3:48:0E:21:B4:A3:ED:14:98:B2:A2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9LZKEIxBOXDSA4htKPtFJiyon4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b9e29-d568-4d53-b128-488792388e5b/1/d9LZKEIxBOXDSA4htKPtFJiyon4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6c:08:7e:47:2c:0e:c6:4c:87:b1:81:25:f4:a3:d5:75:48:
84:cc:8e:d3:58:b3:2f:60:31:5b:4c:03:34:02:4d:d6:cf:a3:
ec:71:92:f5:76:80:91:47:b6:fd:1c:1d:47:fe:63:e8:57:bc:
ec:8c:2a:29:da:b8:23:4b:58:31:dd:cf:48:33:50:06:d9:f6:
16:4f:49:09:32:f5:bc:cd:5c:8f:fe:bd:eb:37:03:2e:ad:a3:
f3:7b:38:19:d6:36:36:1d:81:24:a2:d4:0a:4f:e4:66:ba:f9:
62:9d:6e:f7:e0:c3:47:a5:7e:ba:38:21:83:9b:e8:90:67:b3:
c0:7c:a9:fe:dd:82:fe:da:a6:8a:59:4d:50:3b:0a:5e:85:46:
4c:38:b7:5d:28:77:8f:73:d6:70:fa:c7:35:14:a0:6e:49:76:
9e:f4:fe:5f:43:01:cd:05:d1:75:e9:87:01:61:22:6a:b0:6a:
f5:a8:85:87:df:65:72:8c:3d:52:54:ee:b0:ed:98:28:36:8e:
59:6e:ed:5e:39:b2:8b:a5:5e:ff:e8:d1:c0:4a:f9:ea:95:aa:
a2:73:e9:81:fa:1c:4c:b4:1a:1b:12:74:b4:ce:5a:81:d7:a7:
a8:c3:2d:a1:2f:df:92:e1:04:67:09:27:a7:3a:b6:54:10:63:
60:96:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:34 2024 by rpki-client on console-fra.rpki-client.org