Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
File: 7ix0WZPMS28UcK6rRhTwhdSuQKk.mft (raw, json)
Hash identifier: BBkuAi/xzNFeMGYpG8HD/S+v97CXuZoBdms1mx/EUk0=
Subject key identifier: CD:38:CF:9B:91:FB:92:95:3C:80:C2:EC:41:08:43:9F:89:B4:9F:BC
Authority key identifier: EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
Certificate issuer: /CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Certificate serial: 0193576448D23C256196230FAE9B4338A928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
Manifest number: 1004
Signing time: Sat 23 Nov 2024 05:00:10 +0000
Manifest this update: Sat 23 Nov 2024 05:00:10 +0000
Manifest next update: Sun 24 Nov 2024 05:00:10 +0000
Files and hashes: 1: 7ix0WZPMS28UcK6rRhTwhdSuQKk.crl (hash: 5IMjHCrvmM1rEMuZhviESAuXSOZY/FecpNGpKqd5Dus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:48:d2:3c:25:61:96:23:0f:ae:9b:43:38:a9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c745993cc4b6f1470aeab4614f085d4ae40a9
Validity
Not Before: Nov 23 05:00:10 2024 GMT
Not After : Nov 24 05:00:10 2024 GMT
Subject: CN=cd38cf9b91fb92953c80c2ec4108439f89b49fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9e:df:d0:28:f1:ec:89:25:67:3b:d2:4e:ef:
9c:04:25:38:0f:0a:8c:a5:9c:b2:4d:97:7f:e8:33:
a2:04:85:0a:43:f2:9d:a5:79:96:21:86:63:f9:23:
79:bb:b7:d6:74:f6:10:9d:f5:d6:5d:fa:71:74:2d:
50:8b:f7:41:4d:dc:78:45:59:4c:08:6c:fa:be:9d:
aa:02:fd:e7:2c:4a:c8:08:d1:b3:83:d6:f7:bf:c5:
d3:91:81:24:46:8f:b0:b5:22:e1:98:ea:60:e2:e4:
b7:f5:d2:51:32:e5:c2:3f:9b:bf:41:65:1c:32:6d:
07:55:6e:98:f8:81:6f:2c:20:6f:67:c1:54:26:4d:
39:c1:78:4f:4c:aa:de:9a:01:90:b8:ca:04:f4:06:
fb:84:bf:be:97:c6:83:a6:d6:03:6d:5c:11:20:cc:
1b:39:65:a0:24:be:1f:25:f1:e8:9c:24:eb:e5:96:
c4:55:d4:0d:cc:a6:2c:66:3d:a3:55:23:25:72:4e:
2c:f9:d7:5c:ce:35:6a:c4:62:4f:b4:5c:8f:5c:44:
80:a4:fa:5c:27:b4:a6:87:df:33:6a:64:1e:5c:ab:
81:bf:5b:4f:95:eb:4f:82:be:1e:3b:d6:cf:c7:06:
33:31:85:e1:12:07:be:4d:16:df:57:ec:21:a1:43:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:38:CF:9B:91:FB:92:95:3C:80:C2:EC:41:08:43:9F:89:B4:9F:BC
X509v3 Authority Key Identifier:
keyid:EE:2C:74:59:93:CC:4B:6F:14:70:AE:AB:46:14:F0:85:D4:AE:40:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ix0WZPMS28UcK6rRhTwhdSuQKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2db4d0-9882-4563-a578-772c9177d529/1/7ix0WZPMS28UcK6rRhTwhdSuQKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:41:0d:1b:7e:b6:bc:e1:d6:68:f1:0f:38:d2:73:7e:7d:27:
b4:e0:2e:7e:00:09:18:d0:a6:d1:3f:74:d3:ea:05:b1:4f:50:
36:95:a4:8e:ce:09:31:59:92:1b:b5:ea:79:39:8f:35:ad:80:
c4:7b:36:de:74:45:2a:ec:a4:6e:1e:c0:d2:db:cc:77:aa:2c:
2d:a9:5f:ee:03:f0:83:29:c0:a6:de:74:61:64:6a:4a:dc:c0:
8e:d0:66:5b:9a:e6:26:c6:9d:3d:43:81:c4:e8:47:a4:4b:20:
48:1e:ac:d9:98:6d:82:67:22:e1:b7:23:5c:8d:af:34:1a:66:
eb:57:1e:9a:aa:cf:4d:0b:20:65:ba:4a:93:6f:d8:e4:29:3f:
e2:5d:c6:2b:fc:38:1e:1d:18:5d:c9:77:fb:9e:78:95:d8:46:
c7:34:47:4f:d7:bb:0d:72:d5:7c:e0:1b:ab:1d:b8:75:fd:55:
72:00:d6:8f:f9:87:c8:d6:1f:48:4b:43:a6:19:1b:53:29:3b:
61:e3:37:13:4a:76:87:30:8a:8f:6f:38:f0:c7:2d:bc:a0:73:
ad:04:3a:bd:17:01:8f:dd:dd:9f:0d:fe:ba:18:f8:b2:e4:4c:
db:8e:dd:e0:4c:8b:81:91:80:1e:31:7b:e2:e1:17:0b:0f:d1:
35:57:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:29 2024 by rpki-client on console-fra.rpki-client.org