Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
File: 04zZRAVS59q5zVYx1KuHJFFTW3o.mft (raw, json)
Hash identifier: Pj9rJ6mbyS66Km5PUUv/LfABHB4l99tLi9ftKFX9SdU=
Subject key identifier: 5D:A6:A5:BB:72:71:75:C5:97:62:EA:E3:A2:A3:C3:5E:8C:9E:D7:3C
Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Certificate serial: 019353BEF6EE1E6DB9541D22A1C3415CC499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
Manifest number: 07CF
Signing time: Fri 22 Nov 2024 12:00:44 +0000
Manifest this update: Fri 22 Nov 2024 12:00:44 +0000
Manifest next update: Sat 23 Nov 2024 12:00:44 +0000
Files and hashes: 1: 04zZRAVS59q5zVYx1KuHJFFTW3o.crl (hash: xNmAFcY3y7SSIMCial7VaEaBuc8S9OPstLJBhhfNeS4=)
2: BwGEnByIcUDYRHtgGja43TkOh6g.roa (hash: dpNH2Ng1onvbCFMc6oAkQOX6YSRmeR1TbKHxNwNmY2U=)
3: rewcffxErJJp_rJIKhpFmW-k7sI.roa (hash: DXOKrKn5iiewasnFY5saiia8zGT784rXxcGxAuP7z3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:be:f6:ee:1e:6d:b9:54:1d:22:a1:c3:41:5c:c4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a
Validity
Not Before: Nov 22 12:00:44 2024 GMT
Not After : Nov 23 12:00:44 2024 GMT
Subject: CN=5da6a5bb727175c59762eae3a2a3c35e8c9ed73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:c1:0f:76:48:b0:b4:8e:f9:6a:2b:cf:32:
0d:7a:25:cf:97:2e:60:0d:a0:c6:f4:af:cf:84:33:
05:f6:37:24:99:e6:63:19:27:91:5b:5d:6c:9b:60:
35:ad:ec:c5:c1:6f:78:1d:04:b1:2d:58:ad:a0:74:
55:24:41:e2:5c:38:4c:68:2d:5f:7b:0c:9a:19:9f:
71:50:81:af:a3:1e:b1:41:df:6e:98:24:25:bb:1d:
c3:a7:46:09:00:83:88:ce:9a:22:c4:38:ce:50:8d:
b1:94:e4:4a:be:a8:44:a7:cb:f0:46:28:f2:17:a8:
1d:a1:22:af:ff:ec:74:6c:8a:95:11:9f:3d:29:ea:
54:f2:7b:c4:9a:07:1c:9a:b5:c4:c6:55:3a:fe:80:
e3:b1:8c:76:db:a3:f7:65:bf:c1:52:63:b5:f9:71:
4d:6c:ec:f9:ee:aa:29:cb:d1:09:79:b1:80:9a:3f:
fc:f6:6d:1e:46:a8:ae:cc:fe:14:d2:b0:a8:0d:e4:
7d:5a:87:25:b9:c8:84:85:e5:ca:8f:1a:e6:11:2b:
7b:8b:4e:3d:9d:16:19:87:d4:0e:e7:a5:88:53:38:
23:96:74:07:b0:34:28:9a:b6:9a:70:67:db:91:da:
e1:48:f1:4c:8b:4e:1f:fd:08:1a:59:b2:3c:e3:18:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A6:A5:BB:72:71:75:C5:97:62:EA:E3:A2:A3:C3:5E:8C:9E:D7:3C
X509v3 Authority Key Identifier:
keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:87:b2:15:eb:09:11:f8:20:45:9d:72:79:6b:e9:f4:f0:7b:
89:a7:41:85:6e:88:84:9f:82:92:9b:11:db:d2:04:dc:6f:28:
19:51:5a:ad:7d:78:e9:68:25:b7:70:90:65:4a:15:97:11:29:
27:53:16:e3:fd:73:d2:9d:f6:bb:d1:b0:d8:11:4d:95:f1:d6:
61:de:ce:c9:a6:4b:ce:e3:59:42:ed:ad:11:ac:2d:a4:45:cb:
54:69:b0:65:69:ff:cc:a4:eb:c1:0b:b4:78:c6:c1:13:95:f7:
77:7d:9a:d1:17:c4:b9:08:b8:36:15:09:4f:8b:cc:63:01:47:
3a:0c:f0:32:93:be:12:95:9d:31:1d:cf:d4:5e:ed:4a:a8:1d:
9b:7c:45:75:a6:37:87:08:e4:c4:8a:16:4d:68:81:d8:24:45:
20:12:e6:60:da:cf:d1:3f:c4:3e:d6:c0:da:0c:ad:15:3e:ae:
11:e5:d1:d2:52:7d:3a:22:48:b7:7e:50:70:cf:46:ea:9f:69:
fd:e4:77:38:aa:28:aa:26:66:7f:92:1b:77:59:6c:12:1e:64:
fd:f8:eb:24:bd:29:2d:eb:ce:a1:76:29:6e:ec:32:c5:53:82:
3a:a0:b7:f1:88:7a:d7:32:dc:b4:15:71:ac:51:75:d6:f3:a1:
7d:e4:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:29:19 2024 by rpki-client on console-fra.rpki-client.org