Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: oBSaMFNKtLXShBK66QQrsXdshGMZiSg6UudmsK5h7Yo=
Subject key identifier: 86:55:66:2A:AE:CA:14:50:FE:45:75:2A:15:32:84:40:D5:48:3E:CC
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 01938B1B0DF73889259C2D251D766D44DDC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 138D
Signing time: Tue 03 Dec 2024 06:00:26 +0000
Manifest this update: Tue 03 Dec 2024 06:00:26 +0000
Manifest next update: Wed 04 Dec 2024 06:00:26 +0000
Files and hashes: 1: Ur-Bu0RSJ3w6TE3scWrDMGsvWtw.roa (hash: N245WG48LKfdaN/l0SqPnZNQq5QFtRkgIFSMCbYF0w8=)
2: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: Z5310KhlW9g2EPujZuaC0fQAyasqhqXRlXFWL0xNdYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:1b:0d:f7:38:89:25:9c:2d:25:1d:76:6d:44:dd:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Dec 3 06:00:26 2024 GMT
Not After : Dec 4 06:00:26 2024 GMT
Subject: CN=8655662aaeca1450fe45752a15328440d5483ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:31:ed:d2:9d:2c:16:d0:92:5b:e9:14:1b:
4e:16:2e:ff:56:50:07:95:91:2e:d7:b3:49:f5:d1:
a0:f8:1e:95:c5:7d:03:61:df:eb:41:b0:96:d8:84:
fe:44:74:af:2b:0d:5d:94:23:ad:3b:87:33:88:cb:
97:15:9c:61:a7:a0:d4:fc:4f:b1:05:2a:8f:61:a0:
4d:54:e7:4a:2e:87:25:19:cc:f5:37:e3:8b:c0:2a:
9f:d6:51:b0:4e:c3:6e:ac:ff:2f:20:2d:1c:3e:bf:
03:03:c9:19:0a:89:c1:a4:6b:12:89:8d:42:da:81:
6e:9b:7e:c7:d8:1a:22:1a:61:b1:95:3c:57:39:3d:
4a:50:4e:a0:e6:21:e2:9f:3c:4a:60:73:b2:ee:d3:
f3:24:32:51:05:f4:b4:b7:74:7c:64:67:a2:e8:fb:
ee:bb:b7:fb:07:b7:15:65:e8:c4:3c:40:aa:bd:e1:
5d:0a:57:9b:f7:46:20:d6:92:cc:77:26:92:db:b6:
74:4b:05:6e:1f:6e:4f:e1:0f:5f:fd:9d:03:30:00:
52:6e:a2:a5:f1:22:19:2e:78:99:b5:8a:50:01:2f:
7b:e3:f5:42:ba:59:7b:1c:0a:e9:74:5e:4b:c3:a6:
59:c3:c9:5b:97:98:12:d6:8e:29:2e:21:b6:f3:b2:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:66:2A:AE:CA:14:50:FE:45:75:2A:15:32:84:40:D5:48:3E:CC
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fe:f1:3b:6b:8f:86:6c:27:9a:c0:4c:98:2c:ee:3f:8d:5a:
ec:f8:fd:f0:de:a0:5e:e9:a7:68:b5:d3:31:7d:4f:b6:4d:37:
61:07:a0:82:06:c5:af:09:50:fb:5e:a1:85:e1:90:33:04:84:
94:7d:6e:4f:d5:fe:1b:83:35:f4:05:cf:f4:82:f8:6d:d0:f8:
44:5f:b1:92:9b:e0:39:d4:68:51:a3:96:99:81:5b:73:60:e7:
24:6b:5c:2a:cd:20:4b:8b:65:b8:20:62:61:95:b8:02:c6:92:
94:c1:9f:81:b5:0e:d6:76:c5:8d:9b:4e:1d:dd:2e:1b:c4:24:
df:e0:7c:30:37:c7:c4:60:3d:ea:8b:51:ae:b8:63:bc:c0:ab:
17:20:a8:86:c6:b9:31:ea:39:7f:2a:b4:e2:4d:09:00:e8:c6:
1f:45:f4:92:72:ed:44:d1:6c:73:ce:10:8d:48:67:a9:cb:02:
db:c0:76:36:6e:a2:e2:ba:94:c7:f7:54:50:50:ff:f2:eb:a9:
b6:44:fb:01:da:92:e2:0b:6b:c0:8e:32:4b:89:43:0d:07:18:
89:6b:eb:8d:2f:a0:82:86:a9:b7:9b:b6:b8:8d:11:9f:db:02:
00:23:00:23:f8:bc:04:7b:be:ab:7f:3c:ae:58:91:c1:f3:a4:
a2:dc:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:46:19 2024 by rpki-client on console-fra.rpki-client.org