Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File: 1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier: l+aZA6vqAneyNhG1Kun9+JpAiy7b4yPk+h0tdOq/nVc=
Subject key identifier: 22:0D:57:C1:A5:E0:1D:8F:C3:D8:77:1D:BF:65:09:35:72:44:19:D3
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer: /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial: 01936AEB35EE579A2E4633AF42EA203BCBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number: 0D60
Signing time: Wed 27 Nov 2024 00:00:19 +0000
Manifest this update: Wed 27 Nov 2024 00:00:19 +0000
Manifest next update: Thu 28 Nov 2024 00:00:19 +0000
Files and hashes: 1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: LcJ1KOfLEUaI4k6RucfTdf8Q5E52CCoOCuo6gQ0nks8=)
2: bkl7BiLabjA8Kt3gR8NsKxm04-A.roa (hash: oUVnoAyRVwr8cV6Qsp4rYpkp+k1lpYkaTJCUaGAMdY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:eb:35:ee:57:9a:2e:46:33:af:42:ea:20:3b:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Validity
Not Before: Nov 27 00:00:19 2024 GMT
Not After : Nov 28 00:00:19 2024 GMT
Subject: CN=220d57c1a5e01d8fc3d8771dbf650935724419d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:4d:26:3e:8c:60:2e:6f:eb:ed:1c:73:8c:
98:ac:73:9f:c6:d7:6b:3f:99:b1:02:35:fc:f1:69:
75:c9:d6:b7:f6:c1:65:f0:d0:79:50:6e:18:4a:8d:
e9:fa:a3:05:ab:4b:34:a0:ed:d6:2a:62:93:b2:ca:
e6:5a:78:07:c6:4a:33:ee:22:39:be:1a:17:f8:16:
a4:03:54:5c:ad:72:24:2c:60:eb:80:13:95:b6:84:
09:fc:f2:bb:ac:7a:5b:d6:38:42:5d:cd:e3:5b:d3:
9d:e2:b4:58:b4:bc:39:83:cc:ef:16:b9:be:8d:ac:
b4:d6:f0:6a:cb:09:1c:47:90:76:9c:ab:be:0d:a8:
1c:60:16:54:8b:c2:94:73:50:4e:29:8a:4c:81:eb:
3a:f1:cc:d5:da:9f:c2:b4:b9:2e:16:4f:f7:c7:7b:
ac:0f:06:e0:3d:89:78:82:8d:2e:09:0d:7d:3c:ad:
a4:69:bd:40:34:be:bf:92:b0:e7:4d:7f:a2:0f:dc:
45:70:60:ef:4d:ae:7f:c5:ae:fe:3f:6a:a6:9f:4c:
78:40:f9:dc:8f:55:39:e2:fd:c3:22:42:66:28:fa:
ce:aa:bd:22:0a:96:cc:e6:e1:1f:24:24:1c:c2:47:
02:32:a0:f1:c3:f2:02:27:22:34:70:a9:0d:10:e4:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0D:57:C1:A5:E0:1D:8F:C3:D8:77:1D:BF:65:09:35:72:44:19:D3
X509v3 Authority Key Identifier:
keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:72:03:90:98:5f:60:08:1c:32:b7:d4:71:ee:72:aa:fb:4e:
d7:a7:e2:b8:5f:b4:ac:eb:2a:ef:aa:d9:94:41:0d:8a:4e:f3:
2f:d6:2c:8c:36:56:d5:8e:26:51:cf:f5:65:ae:06:8c:8d:b9:
2e:e1:41:5e:7d:9a:41:34:f7:e7:15:80:5a:f7:6f:a7:3b:44:
3a:a3:a5:3f:88:0f:55:c7:ca:f2:86:30:8a:ed:5f:55:ea:43:
27:5b:a3:a4:b1:9c:3b:b9:a3:08:fe:01:93:13:ef:33:c5:2a:
86:f1:e5:66:35:d4:fb:47:5d:e4:7e:7f:b0:39:1b:17:0c:5e:
dd:70:85:56:0e:71:01:1f:1d:cf:01:b9:e4:78:f4:8d:71:f0:
08:db:56:a6:86:d9:4a:34:12:41:2e:c4:5a:a0:48:6b:6a:a8:
d5:6a:41:c5:b0:bd:06:f1:06:30:a5:15:18:61:9c:fe:8f:d5:
a5:14:1a:b1:e6:c6:e5:20:45:91:5b:98:b7:15:e6:f8:8c:7a:
a1:02:64:7e:af:f2:f1:a6:c5:62:32:01:09:bf:64:bc:9c:a4:
fc:b3:94:74:a6:c3:f0:44:a4:c7:41:f1:3c:54:9c:bc:a2:2f:
0d:2f:4f:7f:94:6b:4e:0d:dd:76:cd:65:2b:da:76:1f:3d:ca:
22:6f:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:34:18 2024 by rpki-client on console-ams.rpki-client.org