Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
File: duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft (raw, json)
Hash identifier: znsu0xIoTB/Z9S7P9kpEgGyAG4svrRsodo7kRFJq9ww=
Subject key identifier: D9:F5:2F:55:7A:AA:6E:28:19:20:B8:A7:1A:DF:24:0E:59:16:FE:73
Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Certificate serial: 019357D2C6F7198EC574613C8C89D982A818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 07:00:51 +0000
Manifest this update: Sat 23 Nov 2024 07:00:51 +0000
Manifest next update: Sun 24 Nov 2024 07:00:51 +0000
Files and hashes: 1: YTDeG9-dk59KJQX9g1wfXJAiNNc.roa (hash: PQ8YNUE4Bgzjyc9s4cQ8FcoXSVl0qRZzGtUkFDCmFwg=)
2: duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl (hash: 7ZIhKxMkbu79sQpQkQqhNin3+xAurlHJIaiMpbOJH/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:c6:f7:19:8e:c5:74:61:3c:8c:89:d9:82:a8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Validity
Not Before: Nov 23 07:00:51 2024 GMT
Not After : Nov 24 07:00:51 2024 GMT
Subject: CN=d9f52f557aaa6e281920b8a71adf240e5916fe73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:4b:76:96:b3:b3:21:45:ff:90:b1:21:4b:
27:ac:5d:bb:77:0b:66:ad:f4:63:f0:7d:5d:ba:2e:
3b:8a:ce:c0:fc:6a:a8:a9:88:55:07:fc:f9:3a:7c:
62:dc:23:b4:74:5d:d8:53:ac:e5:b9:26:c2:f6:45:
77:71:f5:d7:4f:f7:f9:63:3b:8f:bf:40:5b:19:ea:
c5:72:33:82:a7:06:73:dc:73:ca:41:64:67:8d:ea:
2f:d2:cb:2a:11:d9:63:ad:fb:d9:66:29:a0:76:3f:
04:01:5e:47:be:96:e1:b7:db:ce:88:29:85:fb:5f:
81:30:43:93:80:76:10:8b:42:7b:70:04:1f:57:21:
5c:a7:38:c6:cb:60:d6:53:f2:df:48:66:93:bb:06:
c0:2e:50:61:2b:a8:f7:2a:8e:66:1d:ef:ed:01:6d:
b3:11:55:91:1a:63:dc:21:34:e9:3e:bd:e4:4c:d4:
ee:fd:e4:cb:69:1c:97:05:ed:19:0d:3e:0b:d4:dd:
fa:09:33:4e:99:67:52:6f:df:ef:f2:60:7b:38:be:
be:15:f6:85:2a:1a:2c:69:f2:a8:ad:d2:d4:36:d7:
aa:ac:e5:05:9d:60:7d:82:38:eb:62:4e:d7:c1:6a:
e2:6f:31:e7:37:83:80:fd:ec:4b:5c:8b:a4:bf:e6:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F5:2F:55:7A:AA:6E:28:19:20:B8:A7:1A:DF:24:0E:59:16:FE:73
X509v3 Authority Key Identifier:
keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:15:0b:b8:46:13:ce:c8:d2:9f:a7:43:cf:ff:9e:63:0b:23:
b4:3d:c3:f0:a7:28:30:be:41:ad:34:2a:13:bd:03:46:18:f9:
f8:fc:32:fa:1e:8e:d2:a9:ea:42:b1:f7:bb:46:c6:80:3a:b9:
b6:27:f6:e5:59:33:ba:9a:45:ee:f2:25:9b:da:62:07:5e:0e:
97:33:a6:c4:ed:30:bf:c7:f0:f4:fa:43:5b:95:e9:74:33:23:
c9:4e:50:ed:80:64:c4:84:29:b3:e2:7e:52:25:82:1b:b4:dc:
35:99:5b:d9:c5:ff:71:11:ec:9b:20:ac:26:fe:ba:47:37:16:
ed:86:81:d6:f4:67:a8:c9:c0:2f:01:de:46:76:cc:5a:71:c1:
28:75:66:bd:97:1f:f6:b1:41:a2:0d:1d:d4:ad:71:a0:08:e3:
a6:7a:eb:77:f8:fd:85:39:d0:e4:f7:3f:95:0e:fd:39:3c:2d:
75:ae:6c:c0:c4:42:d1:e5:3b:a0:ef:aa:18:71:86:cf:5e:4c:
f3:a1:32:49:ee:04:7a:f9:36:74:07:80:cd:9a:8d:7f:73:05:
0f:05:71:3e:63:24:65:3d:39:d7:af:7a:cc:3c:09:75:02:c7:
4f:4f:58:ff:e9:45:6a:a6:5a:83:f0:fb:c8:1f:2b:13:7a:b1:
e8:da:b0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:35 2024 by rpki-client on console-ams.rpki-client.org