Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File: 0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier: xp/UVEBd8rbK1NN5AeC8xFFES4vF3anYQOQi75j9W28=
Subject key identifier: B3:21:8B:EA:C1:26:79:8B:B4:E3:DD:E7:B9:F8:47:9B:90:5C:2F:A3
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer: /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial: 019369D9F06556D2562DBAF4BCBBF67F1ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number: 06D3
Signing time: Tue 26 Nov 2024 19:01:50 +0000
Manifest this update: Tue 26 Nov 2024 19:01:50 +0000
Manifest next update: Wed 27 Nov 2024 19:01:50 +0000
Files and hashes: 1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: NpUDDHzx6mr1pvq5wTaGfJujHl6Wvm6yD0/IroJKyPU=)
2: 5XvwNjKkTW4R5dUHAdjDeBB-HdM.roa (hash: nANU17Vrmt0dljIHFCFYl4/voRlTQLrNLZPakIq330c=)
3: A_MeFnosYInt_wKb3C6gC-a8n1Q.roa (hash: DbdQRrtiGLTnygD+x/rwSpwTHIsmidrVy8O1notg+3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:f0:65:56:d2:56:2d:ba:f4:bc:bb:f6:7f:1a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Validity
Not Before: Nov 26 19:01:50 2024 GMT
Not After : Nov 27 19:01:50 2024 GMT
Subject: CN=b3218beac126798bb4e3dde7b9f8479b905c2fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:94:5e:fa:39:1a:4f:ec:02:f8:95:99:8b:
a6:db:84:e1:3b:be:fc:3f:4d:05:1f:c4:8f:36:b7:
5c:ac:ac:f0:c1:8d:b1:2f:21:f6:34:b9:fb:b7:2b:
c9:9f:a6:ce:ec:d3:00:01:ce:2c:3a:55:35:2f:4d:
ae:7c:a9:8f:f2:7d:77:79:bb:0f:e4:f1:4d:0b:81:
97:03:ef:bb:3a:02:71:14:dd:ae:6e:48:a6:79:ec:
24:d0:0f:b1:2a:c1:69:35:67:12:0c:cd:53:93:df:
ec:a4:5d:85:e7:26:2d:e3:a2:db:79:ce:2f:f7:e9:
c0:d4:59:08:85:30:95:88:34:3a:3a:cb:26:74:ba:
08:14:cd:db:06:35:b1:79:b4:e3:4f:91:a7:49:a8:
60:d2:29:63:05:0e:b8:4d:4a:cd:b1:16:81:a6:bf:
1a:e5:58:70:22:c0:01:26:0e:03:08:47:28:f8:c1:
02:84:80:47:e7:04:c3:e8:bd:71:73:aa:ad:c1:86:
a8:d3:18:ba:02:2a:76:c8:cc:88:57:f4:ad:5f:68:
38:ae:be:a6:87:eb:ce:81:94:6f:ee:af:a4:52:e7:
07:36:71:1f:2b:e8:0f:4e:6f:7e:22:e1:8a:c7:34:
8f:52:0a:27:e4:5c:5d:64:0f:5e:47:e0:63:72:22:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:8B:EA:C1:26:79:8B:B4:E3:DD:E7:B9:F8:47:9B:90:5C:2F:A3
X509v3 Authority Key Identifier:
keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:99:cc:b8:5a:38:3e:f1:5f:85:df:cf:b4:a9:7f:b2:53:b2:
2b:52:79:49:34:10:bc:c7:ab:eb:2a:d2:2c:7f:4f:32:b2:49:
8a:b5:ae:6f:f0:b1:5b:93:4d:1f:09:8c:7f:f6:ae:58:18:8c:
41:cc:24:99:aa:ec:4a:82:33:e1:e2:ca:a8:db:c4:fb:dd:6f:
56:fe:12:c6:3e:3a:b8:21:0e:2e:76:9c:31:e5:3d:5b:23:52:
1a:02:95:2c:36:78:43:e1:56:6b:6d:b5:09:cf:af:12:39:63:
8d:cc:a7:b9:9e:2d:01:82:47:e4:c7:38:15:35:cc:33:ec:ac:
e0:90:40:2e:f9:56:2e:46:2a:6a:d0:fd:f8:70:d4:95:77:2a:
0c:e6:97:fa:ed:77:99:cd:80:f1:d1:27:f6:c3:e8:fb:aa:f6:
2c:76:a1:61:5b:12:25:bc:9e:ac:c4:c7:de:19:df:8d:1c:c7:
e7:12:d9:5d:42:20:23:5f:44:e7:ac:21:2f:cb:b3:e6:be:cc:
66:30:17:4e:0c:0d:4c:82:8f:c1:3d:75:82:eb:cb:a8:67:e4:
82:4b:ad:64:b8:6f:83:a8:16:3c:74:82:85:92:08:5b:76:11:
25:0c:0a:4d:d1:92:0c:26:03:d1:64:08:7c:02:d2:95:19:0f:
4f:28:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:47:56 2024 by rpki-client on console-fra.rpki-client.org