Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
File: 0l8s0anw2kNfLjs-5w5k_a9LYSE.mft (raw, json)
Hash identifier: ifiD0Lw4qeYJjXIpA/VakYHrPUX6pT0voUyKtTTypZE=
Subject key identifier: F8:0B:01:81:27:4A:09:82:1C:C4:C9:BC:01:2F:B7:6A:64:A9:6C:9A
Authority key identifier: D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
Certificate issuer: /CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Certificate serial: 01935689FC58C008F77D1FDBE58EF43465B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
Manifest number: 1372
Signing time: Sat 23 Nov 2024 01:01:43 +0000
Manifest this update: Sat 23 Nov 2024 01:01:43 +0000
Manifest next update: Sun 24 Nov 2024 01:01:43 +0000
Files and hashes: 1: 0l8s0anw2kNfLjs-5w5k_a9LYSE.crl (hash: RuwmMGyHoAGtD2PTRyDn7kq3RmWfV7VyK8xVPY42m14=)
2: Y0x9WRRm8LGXrDY60YLb7fQKN6o.roa (hash: 7xS+1cffUZDCQlgKN/80wv8EHSC0d4mFOeNdQLpaN1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:fc:58:c0:08:f7:7d:1f:db:e5:8e:f4:34:65:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25f2cd1a9f0da435f2e3b3ee70e64fdaf4b6121
Validity
Not Before: Nov 23 01:01:43 2024 GMT
Not After : Nov 24 01:01:43 2024 GMT
Subject: CN=f80b0181274a09821cc4c9bc012fb76a64a96c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:fd:4c:29:9b:ba:b3:21:8e:a9:13:d7:33:
db:72:cb:01:df:e7:0d:24:e5:44:1a:7c:b8:2e:17:
25:1a:93:a0:45:2e:dd:3b:a0:55:a1:ef:de:05:d9:
a9:f5:8c:f7:26:eb:3f:c7:a0:ee:18:13:d2:ed:d0:
28:7c:75:76:72:bd:21:9d:5f:a3:c2:b7:ec:45:a8:
9b:2e:6e:ca:92:9c:f9:ab:a4:f2:76:7f:7a:9d:1c:
d9:74:8d:bb:37:4a:6c:61:02:09:e6:49:fa:1f:24:
e3:f1:81:24:f6:da:7d:7d:aa:38:a7:ef:9b:30:f1:
e3:12:a8:0f:dd:a6:ca:ba:ca:5e:a0:34:eb:f5:71:
82:d8:3e:48:a9:a0:1e:46:61:ac:7d:dd:20:cb:95:
00:e1:98:95:ee:fa:83:94:7b:d0:79:57:da:d2:5f:
7a:10:fb:72:91:15:d7:dd:1c:c9:15:c5:21:0e:ba:
a8:6a:e0:bc:be:f9:d7:b0:ba:59:f6:0e:64:38:31:
47:34:14:19:90:a9:da:81:21:a0:db:c4:e1:0c:9e:
46:4b:cf:86:52:02:bb:c1:16:34:8d:fb:e6:d2:71:
8d:61:ff:27:c0:66:73:72:53:f8:e5:7f:58:61:14:
27:af:74:9e:71:d3:04:67:27:0e:86:8c:08:4b:e5:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0B:01:81:27:4A:09:82:1C:C4:C9:BC:01:2F:B7:6A:64:A9:6C:9A
X509v3 Authority Key Identifier:
keyid:D2:5F:2C:D1:A9:F0:DA:43:5F:2E:3B:3E:E7:0E:64:FD:AF:4B:61:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l8s0anw2kNfLjs-5w5k_a9LYSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2d125f-1a60-468d-a93a-c5b6aecb6c9c/1/0l8s0anw2kNfLjs-5w5k_a9LYSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4f:41:89:3e:87:a3:e2:48:f0:b6:ff:ec:1b:00:51:f7:53:
4e:c9:5c:cc:71:32:19:2c:e9:86:7e:54:83:c1:3c:ff:16:aa:
b4:42:e6:ee:c8:3b:37:89:0b:63:2b:fe:01:ae:5b:72:1c:4e:
86:65:d0:31:65:d5:d4:35:a9:6a:f5:4a:3c:29:9c:77:a4:54:
08:5c:21:0c:ed:49:f6:4c:5b:8c:79:7e:2b:7e:93:11:be:2f:
a8:df:95:8d:32:47:20:31:be:fc:8f:38:93:fb:2f:03:e3:e3:
2b:7d:b6:56:bb:71:ce:ef:b3:d6:ba:e2:8a:97:8c:40:fb:4b:
65:8a:b1:3c:79:00:53:0d:fd:cf:27:cd:40:a0:df:8e:e6:96:
5e:84:75:06:a8:04:f8:95:bd:73:81:d8:41:53:42:32:d8:35:
ba:54:30:17:9f:4f:14:81:8a:30:99:7f:04:28:4f:ad:74:dd:
f8:60:a6:70:54:1d:40:fc:2d:4f:83:34:d5:e2:b6:44:60:c1:
88:cf:45:e1:0e:39:d3:a9:81:cc:87:c8:b0:fd:ed:00:fa:e8:
8d:6f:1b:78:ff:bc:a7:cd:bc:e4:7b:09:0e:fd:b7:d7:4e:2e:
79:0c:4d:a7:e6:9a:cd:9e:a2:34:ac:3a:55:c5:66:2d:d5:e0:
eb:0d:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:52 2024 by rpki-client on console-ams.rpki-client.org