Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
File: DZ40sUlHfVXvC1lipeXgDN-1hIk.mft (raw, json)
Hash identifier: f7X9mBXK0kjtdzp4I6r89FC5qJOsscievTgxGqHFJPQ=
Subject key identifier: 70:90:3C:9E:FE:70:C4:3B:3C:22:FB:FA:46:64:92:21:F8:C8:BE:62
Authority key identifier: 0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
Certificate issuer: /CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Certificate serial: 019359535CCA8E4B8A27703867D282AA3D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
Manifest number: 10AE
Signing time: Sat 23 Nov 2024 14:00:55 +0000
Manifest this update: Sat 23 Nov 2024 14:00:55 +0000
Manifest next update: Sun 24 Nov 2024 14:00:55 +0000
Files and hashes: 1: DZ40sUlHfVXvC1lipeXgDN-1hIk.crl (hash: lCIELJvGXcyylxmHHqJ3v2AYc5zx4lqSspoozEJDu5U=)
2: TRZJL2vCcLPQjPkJ3L6xjklC36U.roa (hash: 1WM8GgfozNoMMiEkaVteUZKulo60CdUZDBx7edAKGJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:59:53:5c:ca:8e:4b:8a:27:70:38:67:d2:82:aa:3d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d9e34b149477d55ef0b5962a5e5e00cdfb58489
Validity
Not Before: Nov 23 14:00:55 2024 GMT
Not After : Nov 24 14:00:55 2024 GMT
Subject: CN=70903c9efe70c43b3c22fbfa46649221f8c8be62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:f8:76:65:e3:90:15:22:82:4d:84:85:b3:
92:50:57:03:f3:c9:d0:10:9a:60:e9:4b:c4:f0:be:
c0:8a:ba:36:e9:46:69:e2:60:f1:43:b3:7d:55:1d:
2a:52:70:0a:38:ec:52:a7:a9:05:db:40:10:4f:46:
f0:1a:59:ad:07:a3:fd:a8:64:e4:7f:09:41:0f:37:
d7:22:55:0a:fe:0d:63:86:80:92:51:9a:2a:c3:38:
b7:0f:58:57:69:f8:37:81:9d:9b:8b:b0:90:a0:47:
e6:d7:a9:a1:83:b6:01:45:8e:36:92:d8:de:09:f1:
6e:e1:9f:eb:b9:59:f2:08:83:f6:3d:eb:34:a9:c6:
cf:2f:77:86:48:37:2d:1f:cc:8e:80:5e:4c:3b:87:
3d:74:54:68:5c:ab:06:a9:e1:ba:00:12:cf:f5:50:
f6:12:4c:07:80:83:74:8a:b7:48:db:f8:bb:c2:98:
04:c3:82:26:5c:3f:d6:81:3e:65:ca:71:f4:f2:9e:
c7:bb:fc:b2:04:b2:04:ff:b4:f8:73:37:63:9e:cd:
5f:75:39:50:59:8e:d7:34:97:a0:00:d0:19:eb:93:
77:b1:25:f0:0b:78:ba:b6:c8:5b:e3:ce:a2:c1:72:
b8:ee:98:a4:57:56:1b:b1:00:09:97:6b:7b:db:83:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:90:3C:9E:FE:70:C4:3B:3C:22:FB:FA:46:64:92:21:F8:C8:BE:62
X509v3 Authority Key Identifier:
keyid:0D:9E:34:B1:49:47:7D:55:EF:0B:59:62:A5:E5:E0:0C:DF:B5:84:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZ40sUlHfVXvC1lipeXgDN-1hIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/DZ40sUlHfVXvC1lipeXgDN-1hIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b5:99:c6:c8:57:d8:dd:66:4a:68:3a:e8:4d:c3:b3:54:e7:
2a:37:54:a8:71:10:a9:b3:37:e0:17:09:16:45:c2:1a:71:b2:
6f:c2:46:32:4f:b2:d1:2c:c3:a3:a1:a2:d3:53:41:38:45:13:
75:2a:11:a6:b1:af:83:53:36:63:30:d9:04:1e:56:13:f2:1e:
a6:26:52:eb:a1:ad:1e:12:34:44:04:6c:b1:ec:a4:f7:96:86:
ae:d8:13:4a:0f:27:0e:50:d1:be:cf:d4:5f:3f:78:d7:8c:19:
f2:fa:c2:e6:6c:c8:85:29:0f:f6:e3:9f:97:6e:a3:b0:4a:b3:
d5:2c:58:6b:b5:9a:46:90:ba:f0:21:34:cd:06:c0:9a:24:f3:
e3:e5:4f:db:b6:32:80:ef:52:fa:0f:08:fc:f3:ad:db:81:cc:
f9:6a:e7:c1:e4:af:b0:09:aa:70:1b:6b:f7:46:c6:0b:5e:45:
87:bf:4b:99:13:dc:13:e2:3c:62:f1:f4:0d:13:52:f6:2a:db:
56:5f:bf:7f:3e:a1:83:1a:26:a5:49:f7:b7:5e:fb:83:2d:89:
14:b0:5f:5e:a1:30:65:a0:ef:41:3f:2f:e4:93:52:5e:5e:07:
33:c1:17:d7:e5:83:b4:44:0e:45:ce:14:20:a5:46:89:6f:3e:
a7:dc:54:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:05:15 2024 by rpki-client on console-fra.rpki-client.org