Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
File: L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft (raw, json)
Hash identifier: M8YD1NE+XjMOtDLNdHDg/4g29Y9ofCCwvTQl1KIQga4=
Subject key identifier: A9:94:9D:1E:28:1E:9F:CE:9C:8C:D4:64:9B:AC:9D:85:46:49:88:32
Authority key identifier: 2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB
Certificate issuer: /CN=2ff0e1d9780fc922ebc22590380f280707ddcfbb
Certificate serial: 0193568915FC574D5DFB9BC54BB28C0A421C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
Manifest number: 02C9
Signing time: Sat 23 Nov 2024 01:00:44 +0000
Manifest this update: Sat 23 Nov 2024 01:00:44 +0000
Manifest next update: Sun 24 Nov 2024 01:00:44 +0000
Files and hashes: 1: L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl (hash: jWzMuEXkAN8fn3i+bGbL3xclYw1UNxl3qD4bEYSOBps=)
2: pTTXmjRmjQvvYJ5mgf7-KuTgpCc.roa (hash: zxaJVXwD3IYH+EmaTEeDHSSO56WWcVfs/JBiIzGvMn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:15:fc:57:4d:5d:fb:9b:c5:4b:b2:8c:0a:42:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ff0e1d9780fc922ebc22590380f280707ddcfbb
Validity
Not Before: Nov 23 01:00:44 2024 GMT
Not After : Nov 24 01:00:44 2024 GMT
Subject: CN=a9949d1e281e9fce9c8cd4649bac9d8546498832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:d3:a8:1e:37:77:05:fa:d6:93:d3:9a:d9:
fb:ab:66:98:28:ed:4c:a8:3f:44:20:3c:f9:5d:cb:
a8:2b:7b:8d:24:03:d2:b8:1e:01:cd:5f:55:ba:83:
3a:14:3d:f7:6c:d1:20:78:25:17:f2:ed:db:25:14:
60:ec:92:bc:f7:ec:0c:1f:35:b8:d1:08:41:a7:50:
76:e8:0c:3b:c4:45:f3:e9:d4:90:a2:13:41:c9:0a:
c4:7a:0f:c2:cc:6d:8a:85:97:ab:a1:d6:c8:d0:ac:
00:8f:41:b2:88:ed:e6:9d:28:3b:0b:e0:f4:53:b9:
af:ae:ea:eb:4f:4b:ac:fc:74:b4:af:6a:3d:3c:fa:
eb:7c:77:12:e5:93:1c:02:34:59:37:ca:1e:52:c8:
94:00:05:26:07:b3:df:c0:32:1e:a3:f4:88:12:60:
66:93:35:8e:bb:88:10:09:e1:26:39:8f:c6:42:55:
77:36:57:4c:3b:d0:83:f0:2c:fc:22:6b:0c:54:c2:
60:1a:f0:97:25:cd:b4:d4:c1:12:9c:29:63:da:f4:
15:4b:7a:36:ee:c9:3d:c2:c1:3c:a0:81:fe:4f:48:
b1:48:e4:a0:15:36:99:36:e7:e2:1c:49:9b:af:97:
da:19:a8:a5:e0:7b:eb:35:4e:d0:0c:a5:74:4d:7b:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:94:9D:1E:28:1E:9F:CE:9C:8C:D4:64:9B:AC:9D:85:46:49:88:32
X509v3 Authority Key Identifier:
keyid:2F:F0:E1:D9:78:0F:C9:22:EB:C2:25:90:38:0F:28:07:07:DD:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_Dh2XgPySLrwiWQOA8oBwfdz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0395ca-94db-4c2c-a6bd-1fd363fe7c72/1/L_Dh2XgPySLrwiWQOA8oBwfdz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c2:a7:c6:a6:89:e5:f3:0e:b9:fa:3a:8b:7b:7b:b0:32:f4:
4f:d9:f8:65:53:1d:70:25:2a:1f:42:dc:c2:a8:67:9d:f7:ff:
98:e0:73:14:a8:de:2a:56:78:29:77:51:7e:fc:c7:f1:05:44:
1e:43:ec:df:6b:85:05:ed:f7:50:2a:f7:12:f3:c3:11:cb:88:
16:3e:b1:c3:86:05:14:09:56:bc:a2:e5:1a:d0:31:ef:a3:72:
95:56:72:15:e7:67:90:92:02:e1:b8:df:65:52:be:95:46:f4:
d0:6a:9e:36:47:78:92:a8:18:0b:6e:e3:1d:9c:dd:0d:d4:89:
42:04:be:78:d1:13:37:1b:56:d7:6c:8d:2f:55:3e:2a:d5:64:
01:7e:23:ab:59:59:ed:8f:0a:ec:ec:10:5b:73:0b:7c:2c:e5:
d0:03:4d:db:94:c9:99:c9:48:f9:6a:47:36:2c:a4:ee:84:d9:
f8:cd:d8:49:aa:32:9e:18:6c:4e:01:fd:ec:25:ba:6d:71:b4:
94:51:40:b0:8e:70:39:ef:ac:fa:3e:c3:34:53:47:e4:20:83:
95:20:92:5a:f6:28:14:58:dd:7e:fd:75:40:c1:de:15:4b:61:
10:95:78:cb:da:e3:78:f7:85:3d:f2:7a:c0:e8:5a:f4:b8:9b:
66:38:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:44:35 2024 by rpki-client on console-ams.rpki-client.org