Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
File: mdNWGe0hC-CsKdFwortc10VWk7w.mft (raw, json)
Hash identifier: IqbaXv2fKO53giSrYaqn1LPI0uXsasnFMbKv4+6jK60=
Subject key identifier: E7:E5:AB:B9:F0:52:7D:85:95:68:A0:E7:3D:D7:A5:F8:3B:3B:22:FE
Authority key identifier: 99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
Certificate issuer: /CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Certificate serial: 0193557646492F700FF5DE886ABC8F284077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
Manifest number: 129D
Signing time: Fri 22 Nov 2024 20:00:34 +0000
Manifest this update: Fri 22 Nov 2024 20:00:34 +0000
Manifest next update: Sat 23 Nov 2024 20:00:34 +0000
Files and hashes: 1: mdNWGe0hC-CsKdFwortc10VWk7w.crl (hash: SCprmF7Z3TSaP4a6AQrJRtbzxBxbvdxDJeTHYSDqT/c=)
2: wABM6IttrHJouZEg9lRlXIl9bDE.roa (hash: zxgOB3i4t8Me+izvy0ay4L2P3g0TfyPfC/JtK52i44w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:76:46:49:2f:70:0f:f5:de:88:6a:bc:8f:28:40:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d35619ed210be0ac29d170a2bb5cd7455693bc
Validity
Not Before: Nov 22 20:00:34 2024 GMT
Not After : Nov 23 20:00:34 2024 GMT
Subject: CN=e7e5abb9f0527d859568a0e73dd7a5f83b3b22fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:d5:94:56:63:7a:05:db:9b:ac:e0:97:60:
c2:68:71:b4:62:af:3c:b0:8a:32:c6:3b:93:e3:87:
f5:d3:69:84:0e:e8:2b:23:07:60:7f:47:3e:97:0e:
ed:bc:42:1b:2a:59:a7:e7:ad:b2:a3:c5:15:67:3a:
d9:88:83:04:2d:aa:1e:b4:5a:3e:7f:0b:29:43:30:
ea:96:e7:62:35:8e:ae:b8:1c:c1:c5:38:85:1e:aa:
4d:7f:3b:a9:1d:bf:bd:32:6d:67:82:4e:50:c5:47:
a9:59:95:b8:10:6b:e0:4a:d2:27:9f:75:d3:75:3f:
a9:d8:e7:75:fb:ac:03:63:6f:39:4a:21:d0:a0:2f:
da:9d:32:29:ee:72:6c:07:a1:fa:90:93:c2:59:7e:
a2:a2:64:d4:6e:1d:4c:1a:f3:78:25:5a:06:e2:f3:
e9:68:f3:f3:69:63:4f:88:4f:f8:cc:53:b6:46:b3:
0f:2d:8d:18:e4:e5:9b:8b:29:ae:76:ed:4a:36:12:
20:70:47:44:96:6e:5e:8f:87:28:cb:7c:d2:fd:86:
8c:ab:f8:28:23:9a:20:92:2d:d1:fa:52:72:6a:13:
4c:19:91:6b:b9:bd:66:9f:dc:ae:ae:2d:af:5f:e2:
e8:5a:f2:73:b4:7f:0a:bd:58:be:97:18:82:a4:36:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:AB:B9:F0:52:7D:85:95:68:A0:E7:3D:D7:A5:F8:3B:3B:22:FE
X509v3 Authority Key Identifier:
keyid:99:D3:56:19:ED:21:0B:E0:AC:29:D1:70:A2:BB:5C:D7:45:56:93:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdNWGe0hC-CsKdFwortc10VWk7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/34e91f-a8a9-4937-9fb5-7a01bddd6560/1/mdNWGe0hC-CsKdFwortc10VWk7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a3:a4:8d:0d:a7:61:c8:7b:1f:3c:f8:92:f7:65:d8:b0:34:
bc:7e:9b:00:4a:3a:60:4f:53:41:04:49:a1:0d:58:a9:83:69:
b1:13:d7:15:81:41:67:b7:56:47:7f:e8:58:45:90:e3:c5:be:
52:03:03:d7:d1:f6:52:c0:ce:9e:6f:bf:a1:a6:d3:eb:cf:03:
2b:eb:c0:cd:41:7d:61:c2:52:09:c0:7f:2e:f4:4c:26:23:37:
a6:aa:21:c9:2d:a8:56:29:a4:f3:a0:3a:e8:d4:1f:a7:1f:12:
a6:3d:8d:f9:82:93:06:e6:6c:77:3a:0f:61:16:ee:af:21:74:
96:b6:61:50:06:14:94:7b:e2:72:77:66:f0:2f:fc:94:17:b9:
b9:7c:ac:02:26:9f:4a:09:62:37:5b:03:88:8c:25:92:16:48:
ff:9a:f5:3c:04:9c:7a:e6:4a:25:13:10:19:2c:16:a2:4f:1c:
56:48:01:8c:64:d9:d3:e7:8a:b9:db:21:db:89:d1:8b:b8:84:
6f:14:13:e9:39:59:15:4b:f7:87:27:44:4b:cf:d7:80:b0:9f:
f3:9d:4d:90:27:49:71:80:bb:ec:09:c9:d0:c0:e6:e8:c4:21:
0d:24:57:34:cb:9e:d8:53:da:d4:6f:82:be:2e:9c:bc:ef:b9:
63:40:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:13 2024 by rpki-client on console-fra.rpki-client.org