Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier: KbAzmuos5IcRrgMaWoCGtAtDrRSVp32ve4PUMX71qmQ=
Subject key identifier: 91:5E:26:3A:AC:07:B4:B9:39:2B:74:11:84:6C:98:92:D7:56:58:F5
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 0194064813322A1EAAA2E0D1A6F6D75DC66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number: 1191
Signing time: Fri 27 Dec 2024 04:02:54 +0000
Manifest this update: Fri 27 Dec 2024 04:02:54 +0000
Manifest next update: Sat 28 Dec 2024 04:02:54 +0000
Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: 83Zf+HmCg6ZYpQtfdGBmZpmlmX+BlPPE1UThKo7TB3g=)
2: PpcdogixcULNIbouBJ6rUarSsOQ.roa (hash: aoEzrzQ6jN9jWA0r7vP1QFEQNfsVl+ZNhzO0jI2+6eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:48:13:32:2a:1e:aa:a2:e0:d1:a6:f6:d7:5d:c6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Dec 27 04:02:54 2024 GMT
Not After : Dec 28 04:02:54 2024 GMT
Subject: CN=915e263aac07b4b9392b7411846c9892d75658f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:0d:3e:a5:1a:aa:2c:ac:68:76:11:fd:14:
03:25:e0:aa:23:1a:6b:6b:3b:64:ea:a7:ac:fd:d5:
6d:3b:cb:6f:5f:a2:11:71:ae:d6:0e:53:4a:32:50:
f5:57:9c:97:ed:11:b5:9b:b8:18:6e:0a:b7:e2:b1:
ef:50:6c:f4:43:8b:9a:a1:a8:35:4a:51:5d:a0:ef:
8a:5b:e9:89:8b:18:17:c4:68:c5:8d:c7:0d:88:07:
61:6f:ae:0b:b0:8d:b1:8f:67:d1:e5:f1:88:30:a3:
9c:55:e7:4a:5f:c8:bf:e3:1c:f5:2e:6d:9a:cf:f9:
9b:e4:bf:48:d0:41:b0:b7:48:b7:73:c7:2d:39:ef:
a1:4f:d9:d1:57:1a:45:45:24:1f:7f:79:b4:bd:91:
1e:0c:ea:b5:c2:03:00:95:9c:7c:b5:d6:8d:1f:6a:
3c:5c:c0:d7:45:e8:15:ac:3c:d2:e3:8a:b4:d9:06:
39:32:c5:a4:6e:4b:ae:54:fe:64:31:09:c3:24:b2:
f0:f3:7e:01:0f:b8:f8:4b:39:45:5f:d7:eb:89:fb:
85:f8:ac:f8:34:e9:84:3c:ca:6f:8f:9e:45:e0:ab:
09:21:82:c1:52:f1:c0:48:57:4d:c9:f1:4c:11:81:
79:35:9f:bb:79:10:65:a5:0e:45:39:fb:02:55:68:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5E:26:3A:AC:07:B4:B9:39:2B:74:11:84:6C:98:92:D7:56:58:F5
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:60:b5:fd:97:12:1f:a5:ee:ca:11:0e:28:06:2a:d1:1a:0e:
cd:1a:e1:ec:fe:ed:ad:7a:71:30:8c:c8:a5:05:46:66:2d:c5:
4a:d2:f6:ed:68:e5:fd:1f:d8:ef:1e:a1:9f:22:59:70:7c:4b:
b5:32:9a:16:ce:3a:da:8d:7d:5f:ce:e6:d4:6f:b2:92:8d:31:
3d:07:49:26:50:4e:07:b9:b1:59:37:b5:aa:dc:87:00:fb:ee:
e7:9d:ef:63:83:59:d8:80:a4:d3:a1:ce:84:ae:d3:11:e5:21:
c0:46:02:03:52:6c:17:05:b5:6f:8f:a3:1f:6e:90:05:82:33:
28:43:cf:b6:2e:43:2a:69:39:19:40:f5:e3:03:db:11:f0:b8:
df:e1:69:4a:f0:bb:26:e9:dc:c6:ca:8d:7b:9e:2b:4a:4e:fb:
47:ec:31:db:c9:44:dd:9c:9f:fd:44:6d:46:f4:a5:91:a5:d9:
8a:21:14:ff:b6:86:0a:f8:a2:ae:db:c2:bc:5f:13:bf:06:b2:
b3:be:1f:ef:56:ef:94:a4:9f:92:33:8d:a5:c2:a0:74:25:f8:
1c:e9:ae:ef:e2:cb:7b:47:12:b6:d8:0a:71:ce:86:4d:ba:82:
e8:64:e3:ba:a0:c4:cc:3e:95:3a:6a:96:7d:65:57:ca:cb:ff:
f1:ec:81:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:47:03 2024 by rpki-client on console-ams.rpki-client.org