Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json)
Hash identifier: 0d5chNMrGALk45YGc63BSoyU1yl9Ks5ss5tkjvUjE5A=
Subject key identifier: E5:BB:8A:C4:EF:F8:A2:3D:8C:FB:4D:1E:0D:2F:3E:40:DE:3F:54:9C
Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Certificate serial: 019358094C6C47712EBF98E8A00FFEC3E283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
Manifest number: 01DE
Signing time: Sat 23 Nov 2024 08:00:24 +0000
Manifest this update: Sat 23 Nov 2024 08:00:24 +0000
Manifest next update: Sun 24 Nov 2024 08:00:24 +0000
Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: /USVpWeXvPpwTKNjmO3FcpLbNf6oosWwGNuI7a0WFuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:09:4c:6c:47:71:2e:bf:98:e8:a0:0f:fe:c3:e2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189
Validity
Not Before: Nov 23 08:00:24 2024 GMT
Not After : Nov 24 08:00:24 2024 GMT
Subject: CN=e5bb8ac4eff8a23d8cfb4d1e0d2f3e40de3f549c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:50:c4:20:36:9b:4a:45:f2:e2:05:b0:ca:
c3:90:c6:a6:56:8b:93:82:13:48:d2:05:8b:ad:19:
3c:88:5e:08:d1:63:d9:39:10:30:97:60:0a:1f:8d:
b8:e1:58:c5:1b:ee:3a:5d:34:21:d4:4f:41:f7:f6:
d7:8d:1d:90:ed:67:77:b6:53:7f:04:8d:fa:dd:2d:
92:2d:83:23:65:d9:5c:88:38:59:8b:4f:9e:44:ae:
a3:34:45:28:54:6d:09:8b:91:e7:15:97:4a:3d:ad:
ae:5b:2f:0a:b4:cd:21:12:33:32:fc:0c:34:43:84:
cf:9e:6c:ce:fc:e7:8c:2e:5f:41:99:df:0d:58:d4:
33:b6:64:77:a8:44:a3:74:32:ca:93:8c:51:74:97:
28:ca:07:41:48:ea:12:08:a0:28:67:47:4c:dd:4b:
db:53:fc:25:77:e0:2a:c2:8a:1f:57:1d:d7:b0:c9:
5c:84:f6:35:b0:71:6d:43:89:18:7c:e5:3b:33:cf:
3f:ed:b8:33:99:ce:c6:00:e4:a9:cd:cd:bf:4a:b7:
9b:a6:34:cc:d0:99:e2:6d:b0:b0:1f:3b:52:75:1f:
39:e2:ad:8d:7a:19:c2:64:38:a1:b5:85:27:15:7c:
7b:64:dc:96:60:17:e1:65:ed:09:0c:21:3f:ab:df:
ba:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BB:8A:C4:EF:F8:A2:3D:8C:FB:4D:1E:0D:2F:3E:40:DE:3F:54:9C
X509v3 Authority Key Identifier:
keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1e:9e:e1:f7:f7:a1:34:15:46:ef:f1:e6:9b:bb:b4:90:df:
d9:2f:99:f1:8a:fb:9b:d1:36:87:0d:e4:0e:86:f7:be:38:cc:
d8:e0:52:e5:07:db:ee:b9:27:fd:76:c9:18:56:59:d5:d4:2b:
bf:73:73:a1:e3:ae:2b:64:95:b4:cc:dd:fc:1e:8b:13:fe:80:
ac:17:96:2d:d0:d4:4f:7f:c9:a2:e5:a8:b6:1a:cf:38:df:3d:
56:62:84:ca:59:de:7c:cb:1b:c9:0f:43:a8:6e:5d:99:67:89:
e8:09:29:88:6e:2f:cc:10:ad:f4:2b:f0:71:be:86:86:3c:58:
a5:5b:4f:21:1b:b5:84:14:86:d0:be:b5:c4:36:2b:97:68:70:
0c:ae:09:ab:32:69:97:76:59:ec:74:4f:17:6f:ca:b2:8b:99:
f8:d9:c7:b8:6c:f0:73:2d:cf:0e:e9:33:ea:59:40:22:dc:2b:
60:e2:61:b4:47:12:57:6e:ed:da:0b:2d:77:7b:de:ba:06:5f:
47:d1:43:01:c6:46:ab:33:cf:9f:41:9a:47:6b:15:3a:03:5b:
94:fc:ce:49:23:03:2a:65:6e:db:5d:e8:0a:1e:15:8d:a8:37:
7b:c3:07:db:7f:f9:8f:e0:c0:ae:10:03:39:7c:4f:e7:e8:eb:
7b:4f:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:27 2024 by rpki-client on console-fra.rpki-client.org