Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File: 28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier: 0RasE3ZP3/nlPnX9Eh7PXEBFZ90nEwh2eCTuWdXzTn4=
Subject key identifier: FD:8D:60:51:0C:F3:58:A7:53:41:82:23:12:93:0B:A7:75:EC:31:5C
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer: /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial: 0193549C5E6005951AB8694C147E10061C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number: 1370
Signing time: Fri 22 Nov 2024 16:02:34 +0000
Manifest this update: Fri 22 Nov 2024 16:02:34 +0000
Manifest next update: Sat 23 Nov 2024 16:02:34 +0000
Files and hashes: 1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: ZAyGXYs9BlYYiEKTVaRTCLJJAm/MVb/eoXUkqTkK8EQ=)
2: sGNVx8ovtosfXKFdGydSNLxpY0o.roa (hash: 3cQB+nAAPj77zyUlCjVJNbPOCWd5gVzUB24qnwmNEII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:5e:60:05:95:1a:b8:69:4c:14:7e:10:06:1c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Validity
Not Before: Nov 22 16:02:34 2024 GMT
Not After : Nov 23 16:02:34 2024 GMT
Subject: CN=fd8d60510cf358a75341822312930ba775ec315c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:9c:e7:15:f3:4e:bd:da:65:27:58:a9:39:
15:df:26:da:c3:f1:3a:22:63:75:dc:f0:f2:82:b0:
7f:fc:12:67:7d:32:74:ab:bd:48:74:2d:98:df:7b:
fa:38:5f:89:64:bd:4e:c0:2d:c9:28:4c:22:d9:82:
b7:ca:b3:ab:3f:f5:e1:c7:16:03:c6:0b:56:88:50:
d9:38:f6:82:54:eb:cc:f8:d5:00:b2:2e:6a:59:36:
ec:bd:71:cd:f1:58:9a:d7:d2:d4:0c:f5:e8:6e:01:
4e:11:c8:38:ef:8a:54:32:70:ac:95:8d:2c:e1:b9:
83:7f:8c:3d:5c:e1:5d:98:04:b7:32:51:4b:b1:9e:
40:f0:48:07:30:a7:42:b3:40:5b:ba:9c:4f:0b:a8:
99:0d:67:df:1a:ac:3f:1b:57:cf:f2:f4:f2:0a:a1:
ee:a7:57:b1:b6:ff:6e:26:d0:f9:6c:7f:c5:90:0e:
2f:21:62:94:89:0d:d0:66:d4:87:50:71:16:ad:e3:
9c:a6:28:3d:99:ce:59:a5:41:49:28:cb:5f:3d:71:
bb:5d:b9:f7:68:a0:46:da:37:ac:23:fc:56:3e:27:
9b:f0:07:e9:e2:1b:10:3c:14:7f:f8:8e:a5:ca:8c:
4c:20:69:0b:28:c0:3d:eb:32:6e:05:7d:9f:60:54:
fd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8D:60:51:0C:F3:58:A7:53:41:82:23:12:93:0B:A7:75:EC:31:5C
X509v3 Authority Key Identifier:
keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:16:c2:b1:8c:2a:d0:6a:4e:d2:87:71:a4:3e:2a:79:92:9c:
ca:37:f2:e0:cb:aa:b7:d9:a6:ec:58:45:63:5e:16:83:6b:9b:
37:0c:3a:bb:cb:1e:37:c5:ea:3c:02:8f:67:51:4c:e5:46:51:
48:4d:19:78:9c:6e:4f:33:fe:fc:ba:e6:63:00:03:d2:a1:cd:
d0:2f:64:41:79:62:37:34:7d:00:99:74:91:6b:ce:71:58:5f:
b8:fb:83:21:52:b9:3f:6b:4d:9f:c4:1f:e6:60:36:ee:46:37:
a3:f5:b6:c8:30:e3:a0:ce:e4:97:05:78:ea:fd:4f:f8:48:5d:
ed:0e:88:3f:db:0b:96:d1:b8:aa:7c:6d:20:23:c3:cb:ec:9d:
d4:0a:6c:f6:57:92:58:40:0a:4f:ce:f7:54:47:0b:66:3d:41:
b5:bc:21:99:93:1e:f6:dd:2f:a5:35:99:0e:f2:fd:5a:27:4e:
0a:05:b9:66:16:c2:80:4d:87:93:2c:bc:34:b7:dc:eb:1d:88:
7d:e8:14:68:39:fe:16:14:87:ae:cb:78:b3:c9:2a:2d:d5:80:
74:03:70:95:0b:2b:9d:ba:f2:4e:de:f8:7b:ae:9c:e3:a7:e3:
b2:92:e3:64:83:09:42:9a:b4:29:b3:d0:8c:b9:8b:64:96:cc:
4d:4d:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:24:56 2024 by rpki-client on console-ams.rpki-client.org