Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft (raw, json)
Hash identifier: 9rDxlEO+ee4FEmD+dopQ6/bZPzwdcXkMkvIkDactndI=
Subject key identifier: 59:88:74:FC:76:67:56:B0:8E:DB:F6:EF:C7:C4:E7:E0:D3:88:70:40
Authority key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Certificate issuer: /CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Certificate serial: 019358793C8AFEEF72E81BC8D06A895640D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
Manifest number: 0CD8
Signing time: Sat 23 Nov 2024 10:02:40 +0000
Manifest this update: Sat 23 Nov 2024 10:02:40 +0000
Manifest next update: Sun 24 Nov 2024 10:02:40 +0000
Files and hashes: 1: D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl (hash: 6Xn5/7MOyUGCqVmNh07FC+lMafvnfVEaMg5JJGkMhmw=)
2: dVb_tmnMf7XIlaVIyXJXCZF6L1s.roa (hash: junFz0Mlbw+cyOsN+xg29y4NKa1unV5FCethyirNkj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:79:3c:8a:fe:ef:72:e8:1b:c8:d0:6a:89:56:40:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Validity
Not Before: Nov 23 10:02:40 2024 GMT
Not After : Nov 24 10:02:40 2024 GMT
Subject: CN=598874fc766756b08edbf6efc7c4e7e0d3887040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:28:5d:0d:38:9c:d2:ea:35:da:8d:c5:86:
57:48:df:1d:a5:70:b7:7b:3f:93:2d:a5:fb:4b:9e:
24:df:6c:0b:1e:94:78:0e:1c:df:c5:a1:48:1b:d1:
3c:cd:6c:da:58:5d:21:27:ca:7b:61:bc:64:2a:95:
c6:73:7b:59:6a:96:0b:33:ee:4e:08:6b:f7:30:96:
91:7a:f4:bf:4d:6d:eb:81:cb:88:34:c3:c7:42:b2:
b6:66:62:bb:48:70:02:56:f4:3e:5c:5b:3a:e7:b3:
54:42:5a:90:30:ad:24:73:b3:f6:aa:cf:67:80:7c:
83:c8:18:00:2f:f0:94:16:08:69:2d:42:20:2e:ea:
e6:0a:0a:c0:29:9d:93:67:5c:90:30:30:dc:20:0d:
c0:71:fa:69:11:ea:d4:95:6f:93:b2:59:05:af:1f:
38:af:72:f7:db:a4:78:2b:2f:e1:96:d4:94:22:9a:
8b:36:12:57:2b:a4:a9:a8:52:7a:22:f2:0c:6f:b4:
b7:8c:12:c5:39:83:56:ab:59:f7:5e:ea:77:15:57:
ed:d4:c5:98:eb:71:7f:33:09:67:f1:d7:ee:9d:49:
a6:3d:87:dc:13:08:dd:6d:37:0c:de:59:d5:3e:8c:
20:80:ef:67:00:d3:0d:76:a3:09:96:db:39:34:0a:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:88:74:FC:76:67:56:B0:8E:DB:F6:EF:C7:C4:E7:E0:D3:88:70:40
X509v3 Authority Key Identifier:
keyid:0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:99:9a:21:30:af:4c:e3:23:1c:bf:ca:0c:14:1b:b5:84:9b:
e9:32:45:79:4c:ac:30:4d:db:98:38:97:b5:ee:3c:75:cc:f4:
4e:74:dc:0e:fb:6d:1c:76:db:5c:6d:b4:21:20:51:64:93:bd:
55:f9:b8:ed:1b:34:0d:0a:95:cc:bf:ff:c7:69:78:1b:eb:84:
b8:08:7f:30:bf:4a:0b:e3:7f:c4:21:c9:18:82:49:e6:95:8d:
84:9e:f3:ab:f5:51:78:38:3a:f4:ca:71:56:4f:71:8b:26:b1:
5c:e0:3a:ea:a8:cc:de:65:70:25:53:c6:b6:b1:73:7f:b2:b0:
e9:be:23:2f:4e:d3:89:37:10:42:5d:67:be:bf:52:47:60:b9:
6c:a3:7a:7a:b9:e5:f1:e6:e0:a2:fa:48:77:42:32:d1:79:94:
f6:f6:95:12:e8:05:61:9a:44:95:70:b0:25:ea:d8:90:f0:7a:
33:d2:21:45:90:4a:80:88:37:a0:eb:74:54:95:a7:a3:ee:46:
6a:83:c6:b9:fa:c3:94:20:bc:82:8d:45:ce:6f:ab:f2:60:25:
be:22:ac:9e:6b:20:8d:70:cc:e1:65:a6:c5:2b:02:d8:eb:18:
66:e6:b6:f7:c7:ab:22:4d:bc:a5:c9:61:cc:71:bd:85:78:dd:
e6:d7:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:38 2024 by rpki-client on console-fra.rpki-client.org