Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
File: Dx1bnYi1edDd98Ics9OH1h6lFsE.mft (raw, json)
Hash identifier: V7TgxMbunxE+NXiYdHSJzJhSLxymuaPX7yIaYJFV67U=
Subject key identifier: 24:54:0E:81:BA:7D:33:1E:9E:83:8E:BF:E8:98:BE:11:B5:CD:E0:C9
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 01935689AB2C08BDD8057A9E4E8D54BE6F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
Manifest number: 136D
Signing time: Sat 23 Nov 2024 01:01:22 +0000
Manifest this update: Sat 23 Nov 2024 01:01:22 +0000
Manifest next update: Sun 24 Nov 2024 01:01:22 +0000
Files and hashes: 1: 2d881Bg9hob87bpsb9zQ4AtnjDQ.roa (hash: yF9VtPJgIFw3coi0AMQi/S3IKl+0TauI8A3RqnVu/Ik=)
2: Dx1bnYi1edDd98Ics9OH1h6lFsE.crl (hash: JqX8o52RnnWt/t4rsXL5399sxHQ96UWJgdTH29Hu02A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:ab:2c:08:bd:d8:05:7a:9e:4e:8d:54:be:6f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Nov 23 01:01:22 2024 GMT
Not After : Nov 24 01:01:22 2024 GMT
Subject: CN=24540e81ba7d331e9e838ebfe898be11b5cde0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:9d:84:09:c9:15:0d:d0:c9:5f:3e:55:9b:
9f:c9:4d:ad:2e:fe:a8:a8:fc:f5:6b:f1:8b:35:9a:
6c:00:ad:94:a9:45:9d:13:fb:03:23:08:13:2e:63:
ca:26:d8:f6:d5:bb:11:93:5d:83:7a:85:ca:c7:fd:
8c:5c:26:08:fe:86:85:4d:46:3d:2b:96:5b:4e:6b:
c1:c5:2e:f6:64:ac:b9:48:e2:8b:ff:3c:03:eb:5b:
ef:76:4b:b2:1a:83:a3:dd:67:f5:e7:19:ee:7d:2e:
ae:c8:17:2f:21:a4:12:a8:56:e9:9c:23:93:19:f3:
92:63:f1:fd:57:70:b1:cb:ff:b7:2d:c6:bc:83:93:
08:c6:63:bd:bd:8d:0c:f9:be:07:cc:dd:3d:1b:50:
cb:13:9d:8a:42:16:15:6d:31:ce:6f:cc:89:8f:21:
a5:e4:62:59:ee:24:70:85:f5:d8:96:2d:2f:b4:11:
b1:a7:66:98:df:ea:e4:5c:2f:d5:e0:6c:81:9e:2e:
cf:89:53:a4:fb:5c:99:47:8d:87:fe:e8:a0:d2:55:
f9:a6:3b:9f:65:ca:a9:a0:0d:43:9b:33:7d:84:fe:
fb:30:21:2b:29:98:2c:dd:c3:4b:00:56:9a:e9:26:
7a:82:66:ef:48:91:15:7e:df:5c:2a:4b:59:d9:fb:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:0E:81:BA:7D:33:1E:9E:83:8E:BF:E8:98:BE:11:B5:CD:E0:C9
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:0f:a0:f9:48:f9:a5:ff:20:e8:76:2d:4d:4d:67:93:c8:06:
6d:06:4c:70:87:c2:f3:af:fd:f7:27:98:9f:61:c8:fc:a1:a4:
c2:80:55:03:da:8d:8e:93:c3:0b:32:8d:64:80:b3:5c:b4:a8:
8f:62:34:c9:bb:ae:35:d9:87:dc:af:f3:e8:12:d5:54:93:cd:
02:39:09:ae:31:9f:f2:75:9e:c8:ce:81:bc:33:d2:87:41:ba:
0a:b1:ca:26:ec:31:cb:9e:7e:d8:c1:38:bd:fa:0f:f4:22:73:
08:e4:34:bf:02:41:42:57:d1:8b:40:49:39:8c:b3:55:9c:f9:
67:a1:6d:6a:3b:3d:f1:8a:e1:dc:b7:27:d9:27:3d:1a:63:af:
ac:27:85:ae:73:9e:e8:7e:1f:a9:a5:e6:28:5a:bd:11:29:d4:
50:ed:f2:e6:37:35:f0:45:4a:23:59:b4:e7:d3:b9:3d:92:17:
45:64:c2:d2:1b:05:55:e0:4d:c4:6d:f0:5b:70:f6:6a:c7:73:
74:61:41:4a:f5:51:ce:ae:f8:0d:cc:10:49:15:f5:5e:fd:77:
70:99:b5:68:0d:32:29:75:45:44:c9:9d:f7:75:bd:75:a2:d7:
b5:a0:cc:ea:ac:aa:c2:58:20:ff:09:ef:5a:2a:79:11:96:1f:
aa:46:d3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:01:42 2024 by rpki-client on console-fra.rpki-client.org