Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: NHsQvZ7BmGe3Q4LwT4IJ1rCxxwiMnHq3xMrD6x9/LG4=
Subject key identifier: 69:36:7D:81:FD:97:1A:49:1B:82:86:72:6D:B2:AA:CA:C7:2D:B1:4E
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 01935764E80D1A9712D363045DF9C4CED50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 0D6A
Signing time: Sat 23 Nov 2024 05:00:50 +0000
Manifest this update: Sat 23 Nov 2024 05:00:50 +0000
Manifest next update: Sun 24 Nov 2024 05:00:50 +0000
Files and hashes: 1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: DmxT0+swmg04JuoLsZrsb6j5KdEU8B20a0LQzDIO1XU=)
2: srvGKqSonIvrDELx-Ebt4NSCIuI.roa (hash: FVEx6MCQh6JsLb0PNZKLpo3GiIMiOKq1dSsD14LIkGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:e8:0d:1a:97:12:d3:63:04:5d:f9:c4:ce:d5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Nov 23 05:00:50 2024 GMT
Not After : Nov 24 05:00:50 2024 GMT
Subject: CN=69367d81fd971a491b8286726db2aacac72db14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d4:10:e1:54:bc:6f:09:b7:42:bd:eb:92:d2:
24:b1:33:e1:96:f4:0d:04:fc:6b:49:46:33:34:05:
92:eb:cb:59:e3:ac:0c:89:43:aa:3f:38:cc:b6:e5:
56:a1:ce:e1:c5:67:56:15:67:98:44:c2:7e:c9:72:
5c:11:73:56:73:66:7e:d6:de:20:e4:d1:75:db:9b:
ca:ca:33:96:b9:18:fb:69:f3:60:d9:ee:3d:f6:6e:
2b:5d:a3:20:35:72:30:ad:3c:d1:41:6d:21:b2:8d:
fa:34:f9:92:df:24:7b:65:45:9a:b3:62:b7:23:3f:
5d:ed:d3:e5:f7:78:ae:36:43:17:ed:06:aa:72:03:
0f:ba:06:de:5f:c3:83:57:da:78:75:20:68:fe:4c:
9e:02:bf:a0:da:57:fb:85:88:89:45:a6:f8:92:ab:
c2:09:69:6d:26:89:65:92:23:b7:0d:d8:56:12:72:
cb:5b:4f:1f:4f:d3:da:1a:b2:9f:41:96:7a:18:2b:
1f:79:98:bd:46:1f:9e:75:a7:05:fc:35:ac:b8:c3:
5e:1f:92:0e:48:0c:5b:51:c1:5d:89:67:9b:89:3e:
f5:fd:c3:85:c5:88:c7:80:4c:37:a1:c4:79:f9:65:
68:11:18:82:4c:44:ab:a0:74:80:bc:c0:ff:65:7a:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:36:7D:81:FD:97:1A:49:1B:82:86:72:6D:B2:AA:CA:C7:2D:B1:4E
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:04:fd:88:a5:bd:a9:f7:78:17:65:a1:57:86:bb:4a:66:ca:
d7:7d:27:44:d1:99:b1:f8:e6:1e:73:c9:83:e4:73:28:53:69:
c2:7b:3d:1f:90:d0:ff:58:ad:3f:2e:ee:50:1a:1c:33:66:84:
99:67:5f:06:a7:87:9c:ee:32:4a:53:24:d3:48:22:ed:aa:5b:
10:1c:5d:45:f7:33:31:df:2e:ee:13:6c:8f:3a:02:95:df:58:
d1:7e:ea:92:bf:47:6f:ed:4c:df:74:a4:6e:90:de:cd:bc:7a:
c2:cf:d1:16:48:14:ed:e2:bf:99:3f:0e:09:ff:14:6c:f5:86:
73:ed:cf:33:fb:fa:11:3f:b0:52:39:67:80:70:cf:23:58:06:
1e:b8:7f:46:b1:5d:4a:99:5f:39:1f:4f:a4:f6:05:74:ed:71:
85:fd:71:dd:37:49:18:7f:f4:51:0e:d5:2c:92:6c:bd:18:a1:
6e:df:54:b5:4b:65:15:ae:4d:fd:76:b0:6b:9c:80:25:80:73:
a7:f9:12:d8:66:42:b2:42:f3:e8:44:a9:0f:46:5b:a2:e3:a4:
78:91:f6:e7:8e:e9:88:5a:4f:e8:4f:30:cc:77:de:3e:d7:e9:
1e:bd:52:4f:48:3e:38:fd:da:75:20:41:ec:b5:d8:7e:c7:2c:
7c:aa:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:25 2024 by rpki-client on console-fra.rpki-client.org