Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json)
Hash identifier: ECh5sWGg658numqWVYejj+t8leREA/fpX4pDVHOLWDA=
Subject key identifier: 81:8C:99:A3:56:6C:CF:5B:09:9E:C4:B5:95:69:EC:79:61:C5:72:13
Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Certificate serial: 019405D7ED7F0B65BE92A421725BF784682F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
Manifest number: 0449
Signing time: Fri 27 Dec 2024 02:00:24 +0000
Manifest this update: Fri 27 Dec 2024 02:00:24 +0000
Manifest next update: Sat 28 Dec 2024 02:00:24 +0000
Files and hashes: 1: 0H73X5c6aiHi6GPz21uYPsHe6nw.roa (hash: Rn4KEy7TTHRZso561V/bkQCbqFl31W38PopWMOSIlgo=)
2: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: HCBGcGe8koguP4TmifWIwUZ4S75o3r9bC+mlN+0xTTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:05:d7:ed:7f:0b:65:be:92:a4:21:72:5b:f7:84:68:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2
Validity
Not Before: Dec 27 02:00:24 2024 GMT
Not After : Dec 28 02:00:24 2024 GMT
Subject: CN=818c99a3566ccf5b099ec4b59569ec7961c57213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:57:1b:74:f4:e7:5c:75:67:cc:af:01:0d:
2e:69:86:86:f5:a3:44:8a:9d:ed:41:77:9c:49:1f:
9c:41:fc:9f:22:5b:de:0b:c7:7f:b2:2f:37:ed:4d:
10:ae:20:f2:52:6d:a7:17:a8:72:4d:53:a2:fd:46:
f1:86:e9:92:b3:19:43:67:1c:27:f4:61:e6:e3:30:
27:9b:8c:f8:d8:f5:9b:50:4d:61:e8:bb:f8:4e:f9:
cb:78:98:3c:bb:58:dd:52:13:0b:58:58:3f:49:b1:
44:e3:5a:bd:b1:74:ea:cc:b6:13:15:3d:ba:db:71:
a8:bc:95:18:5a:14:5c:ab:33:1b:d1:9b:c8:d3:a2:
99:49:00:e4:7d:63:69:b3:ef:b3:a6:a0:5d:53:4d:
84:87:0e:92:9e:a1:12:1e:fb:58:e9:a8:2b:00:ab:
da:9e:52:02:3b:16:4e:7e:f2:d6:d5:0c:80:e1:cd:
5a:02:62:00:54:ce:42:34:b0:de:e9:bc:65:9e:81:
0e:9b:4c:6e:47:5d:fa:d7:63:61:4e:22:61:7b:1c:
46:49:ee:40:ae:ce:f8:93:02:b5:f8:45:17:85:2b:
c4:6e:6e:39:d5:91:98:4f:31:b9:7f:7e:c1:fd:c6:
c6:47:b8:49:b4:08:64:90:75:c6:50:10:a4:c4:94:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8C:99:A3:56:6C:CF:5B:09:9E:C4:B5:95:69:EC:79:61:C5:72:13
X509v3 Authority Key Identifier:
keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:96:d4:dc:85:e6:1f:62:40:69:8f:25:6d:41:fd:62:9e:32:
ed:d2:83:1d:25:1c:2f:42:74:2d:86:f4:7e:aa:51:a3:47:2c:
74:68:fc:58:08:57:65:9a:f6:50:1c:df:90:39:94:81:5d:af:
23:53:86:ff:ea:c6:12:8c:9b:12:80:10:12:f1:62:16:3a:b0:
69:f0:e0:2d:22:bd:02:bb:c8:96:be:e9:5b:60:3c:18:67:8a:
5d:5d:d1:97:65:66:f7:17:d5:ea:a5:b8:43:22:56:f0:b1:00:
ec:fb:ff:71:30:6c:6a:d4:71:00:cb:9e:6c:9e:2c:3e:22:44:
6a:25:09:03:d1:63:fd:d0:46:ec:48:cc:fc:34:fa:d7:21:82:
08:57:84:75:b6:cc:b7:fd:d7:a0:1b:25:8b:3a:e5:c2:a4:6b:
d8:05:02:40:84:0d:4b:e2:d1:f5:b3:4f:af:82:da:a8:f0:31:
64:93:d3:d6:e7:20:95:69:02:ac:15:79:d5:64:fa:76:21:5f:
6a:32:fd:e0:be:d8:f4:93:f5:b1:e4:52:d4:9c:99:cc:6d:42:
2f:56:a7:1a:07:8a:c4:57:4e:b2:69:15:ea:e9:90:07:fd:cb:
f7:70:37:3a:60:47:fc:b7:8d:6e:26:d5:0d:89:1a:d5:da:58:
7a:35:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:00:56 2024 by rpki-client on console-ams.rpki-client.org