Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
File: LdWWwep-y7G-F3f8DTjtBspA6r4.mft (raw, json)
Hash identifier: fgLn9almMGJ6kz6mKspVOvYNMptqCeoVifKuQMy6jOM=
Subject key identifier: E3:60:7A:24:61:E6:B8:0D:D5:9A:E6:57:2A:6C:57:21:32:38:DE:9A
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 019355AD50F86AB1F01454466A370AF8C374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
Manifest number: 0D2E
Signing time: Fri 22 Nov 2024 21:00:41 +0000
Manifest this update: Fri 22 Nov 2024 21:00:41 +0000
Manifest next update: Sat 23 Nov 2024 21:00:41 +0000
Files and hashes: 1: 0TM9mD4d3i9_usfL7sG8oFLV6kM.roa (hash: NYvegVlAG20IySzGYVZ8xAZ8PtimNfyCKX4/4NtSECo=)
2: LdWWwep-y7G-F3f8DTjtBspA6r4.crl (hash: RkKERIe0Bj67AVUEVaHWs1HaceJamsG4GuUmk7LK280=)
3: d6qJL2e6GhWheL3pQLHktbiT_t0.roa (hash: S8jtpon3AzveFcImakBk6u8fH44XPkQDFwYlgkXEvOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:50:f8:6a:b1:f0:14:54:46:6a:37:0a:f8:c3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Nov 22 21:00:41 2024 GMT
Not After : Nov 23 21:00:41 2024 GMT
Subject: CN=e3607a2461e6b80dd59ae6572a6c57213238de9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:45:73:44:13:02:ba:28:a0:16:d8:0e:7a:8b:
4f:05:79:1a:80:1d:84:db:a8:7a:96:63:d0:a0:86:
30:57:c1:87:e3:35:73:77:98:b9:8d:4f:f0:a9:eb:
b8:81:80:a4:dc:bc:71:76:7b:36:d9:c7:24:9f:7e:
b8:b3:3d:8a:cf:35:fb:99:09:93:4f:db:30:38:e3:
26:0f:da:14:ec:04:ae:6d:62:b8:7b:58:bc:87:a1:
e9:95:7a:84:fd:21:cc:c9:ce:0c:ea:29:a9:1e:f2:
56:99:15:45:df:6b:0e:da:08:dc:35:46:25:79:15:
ec:02:e6:64:72:83:f3:50:10:72:b7:22:70:5d:e6:
af:63:11:81:22:f8:d1:5f:d8:fc:8a:6d:59:63:56:
68:49:85:33:ad:ca:ce:ad:1e:3c:02:b5:97:b4:51:
d2:bb:e7:c5:81:fd:fa:7d:30:40:fe:e4:16:3d:58:
7a:b9:04:d1:4b:0d:8c:ab:d4:2b:58:04:a8:ed:58:
5e:af:6c:4d:f5:78:c8:c8:05:7f:77:48:44:c1:33:
43:17:7d:ac:1e:54:49:dd:64:75:3e:f4:80:7f:1d:
5f:8a:5f:f3:8b:66:18:d4:35:0f:21:2a:4a:7a:13:
eb:90:11:60:3f:4d:f6:65:40:04:a6:66:7b:95:73:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:60:7A:24:61:E6:B8:0D:D5:9A:E6:57:2A:6C:57:21:32:38:DE:9A
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0b:bb:d6:9b:7b:4b:9a:c6:0d:27:41:dc:e4:cd:67:68:dc:
e2:df:75:40:ef:71:07:2c:52:cd:44:79:98:7d:29:fc:e5:c4:
16:b6:0e:d6:33:c8:b2:2c:f3:03:83:32:c9:c4:4a:8e:6c:d8:
20:0b:18:7e:83:9e:9f:a1:69:78:f7:f5:a3:f3:d3:20:74:39:
12:9b:d0:2c:18:18:20:38:f3:24:00:b0:f3:69:7a:a0:50:eb:
3f:77:e2:8d:f8:ee:3e:11:0f:dc:47:20:86:4d:d1:77:db:f9:
60:82:97:e8:33:f4:f7:46:62:00:9a:0f:4d:a3:c2:47:32:39:
b7:e1:f6:61:c3:30:ed:a4:81:49:9c:c7:c3:a3:86:08:69:dc:
1e:ab:98:1d:b0:2d:30:45:87:3b:36:27:53:29:96:0b:b1:40:
2f:a2:e8:1f:1e:44:3c:b5:0d:3e:84:bc:13:9c:e0:ec:82:35:
ae:60:47:10:7a:d0:ff:a8:08:c2:94:c7:30:b6:81:ca:b7:6b:
2c:d9:d4:fd:ab:9b:c1:2e:7a:d3:f1:06:8f:e4:9f:fb:f2:a5:
bb:b3:d8:3a:06:bf:fd:8e:b4:a5:a1:46:05:8c:51:c5:cb:ac:
81:e3:66:a7:29:ac:bd:9b:85:cd:15:3f:57:59:ea:3b:ad:f7:
2e:fa:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:36 2024 by rpki-client on console-fra.rpki-client.org