Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: S2i8QhWpU8PyAmeEmOv3niHEoyna0gZ95HvbVBeT2vk=
Subject key identifier: 77:FA:10:04:FF:9A:9E:EC:94:40:E1:57:A4:98:83:D0:69:E9:FF:06
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019355E436FC4E557D9A1FF9689644F78FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 12EC
Signing time: Fri 22 Nov 2024 22:00:39 +0000
Manifest this update: Fri 22 Nov 2024 22:00:39 +0000
Manifest next update: Sat 23 Nov 2024 22:00:39 +0000
Files and hashes: 1: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: QivxgOQOV25xrM8/qeW+e3HpKlxsRWet478u+j4c0WI=)
2: xJRcbhv7dfDJS_d-ncpsxgHwvFA.roa (hash: 6NEjPSsI31lTaCiZrK50TTkT7i5dQzCSDVmfqwCgzF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:e4:36:fc:4e:55:7d:9a:1f:f9:68:96:44:f7:8f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: Nov 22 22:00:39 2024 GMT
Not After : Nov 23 22:00:39 2024 GMT
Subject: CN=77fa1004ff9a9eec9440e157a49883d069e9ff06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:c9:52:3a:f6:5f:ac:b4:d3:49:40:ca:65:
35:b1:c5:87:07:f7:14:e7:98:50:0a:df:cd:9d:1b:
f9:5c:fa:bc:4a:7c:37:01:c9:c2:c3:2d:da:77:42:
fa:50:1a:38:0e:c4:1b:28:b6:f8:8f:6b:23:53:89:
8e:63:d4:49:fb:b8:b0:f6:3f:44:a5:c3:cd:bf:a9:
ec:c7:5c:3f:54:76:f9:64:9e:89:71:73:b0:16:f1:
10:04:82:27:fc:db:5b:0b:ef:1f:2b:82:41:dd:83:
31:43:74:b3:e6:a3:b0:b4:04:01:5d:54:e3:64:75:
91:ce:56:ee:f6:23:30:4e:f4:20:fd:e9:73:01:25:
34:21:5f:1b:95:f7:46:83:51:b6:40:fd:ec:e1:fa:
f6:0e:2f:8c:7e:bf:d7:92:5e:2a:e2:67:f3:cc:7e:
22:5a:82:4c:35:54:4d:05:38:84:dd:dd:e9:f6:4c:
74:a2:ac:03:51:51:23:f9:6a:8a:16:83:30:96:72:
13:80:1a:e6:71:80:de:1b:a1:53:86:e0:3f:2e:56:
1c:3c:33:47:3d:a3:ea:1f:0b:61:e4:bf:18:5d:99:
02:df:cd:a9:34:ae:19:bc:b7:a1:2c:40:5b:f0:c4:
83:60:67:8f:c1:15:e0:76:fc:43:1a:9d:fb:8f:ca:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FA:10:04:FF:9A:9E:EC:94:40:E1:57:A4:98:83:D0:69:E9:FF:06
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:58:aa:e6:7c:18:b9:2f:58:ee:cb:2f:cc:ca:a7:6f:65:b3:
5d:d2:d6:4a:0e:1b:17:50:57:4d:08:42:37:98:57:72:fb:fe:
9f:64:a3:74:35:0f:68:8c:82:83:93:4e:20:68:37:4f:77:87:
bf:ca:fe:d3:92:29:17:2c:d4:2f:64:fe:18:96:c9:e1:e9:cc:
f9:76:c7:c5:04:ed:ea:ec:04:1d:56:fc:6c:05:22:da:58:07:
69:0b:93:20:ec:d2:bd:29:02:58:50:65:35:17:8d:86:9f:b1:
37:3e:a9:b4:6d:0e:b2:0d:d2:36:82:fc:71:45:af:23:df:a7:
7f:43:fc:d2:f6:7a:ea:81:49:50:e9:4a:c8:55:d7:76:d9:8d:
ee:54:85:48:90:49:9e:9a:bb:0e:6a:43:d7:18:2c:58:0f:dd:
ea:9a:59:bb:e6:ba:68:2b:33:9d:f5:8d:cf:26:fa:ff:c7:c7:
20:93:59:cd:ee:26:75:39:b9:4a:aa:1f:d2:bf:e4:45:84:b4:
dc:88:5f:7c:d4:a3:4e:f3:fd:4c:e4:83:3f:03:bf:40:f5:b5:
ba:b5:b8:9d:d3:6d:63:6c:61:88:2a:10:4b:19:7d:4e:ef:f7:
81:46:2f:91:d8:14:0b:e2:0f:a1:5a:84:91:85:72:9a:b3:51:
b6:c1:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:24:49 2024 by rpki-client on console-fra.rpki-client.org