Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json)
Hash identifier: U4R8YN7CY1PR6H42A9riDg0OYjL9Pv0A3PdHi1UpmCw=
Subject key identifier: 9F:E0:3F:00:3C:D5:24:63:F3:7A:F4:90:12:15:FA:94:59:88:89:A2
Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Certificate serial: 0193512B5ADD7184B2FA963F4AA4CC5248D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 00:00:15 +0000
Manifest this update: Fri 22 Nov 2024 00:00:15 +0000
Manifest next update: Sat 23 Nov 2024 00:00:15 +0000
Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: HJPzGShHdE6zy0gzMMavA9zzPN/PYh0XuR6ccXgAAiA=)
2: FS6VHRHygYy7ZXD7wwcG6UbLmo8.roa (hash: TLSb1rMyB0mwe4OBlI+lVv4Jrlp5PuZ9/oygYKtdW9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:2b:5a:dd:71:84:b2:fa:96:3f:4a:a4:cc:52:48:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75
Validity
Not Before: Nov 22 00:00:15 2024 GMT
Not After : Nov 23 00:00:15 2024 GMT
Subject: CN=9fe03f003cd52463f37af4901215fa94598889a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:eb:5e:f9:b0:79:96:16:e4:e8:12:1e:ea:
3e:77:23:b3:57:09:db:89:0a:02:37:92:ab:6b:ad:
8c:6a:55:e7:f9:51:6c:f3:14:26:38:b0:12:86:82:
2a:e4:31:e9:b3:a0:3c:0b:08:e2:ca:e8:1b:95:7a:
72:fe:c2:4f:a3:fc:a4:b2:bb:0b:91:82:17:ba:b2:
22:e4:2e:78:9a:6c:1a:f0:aa:df:b2:ad:f5:91:97:
ab:23:a1:12:de:23:2c:5a:30:55:a5:d3:50:aa:44:
e6:21:d9:1c:e1:5c:cb:20:26:45:c5:54:74:af:e6:
31:40:d6:60:27:1f:3e:96:52:23:61:d5:6b:c3:ee:
3c:1b:e0:a7:41:8d:bd:57:18:37:dc:8b:8f:c1:3b:
4a:8e:c7:87:ac:ab:47:6b:b4:00:6a:0d:d5:03:38:
ed:eb:e3:0c:b2:f2:5b:92:c1:55:f0:cf:80:68:9f:
aa:20:8f:13:b5:23:f5:e7:e2:ad:76:82:71:d2:47:
41:0a:ae:bf:00:7b:cf:e4:84:bd:b2:d4:09:95:20:
e0:b1:d6:a9:fa:ce:f7:c4:ad:d5:1e:76:6d:3e:71:
ac:17:71:d4:29:9e:05:31:28:95:b6:40:45:dc:71:
c4:82:79:ee:80:e2:e6:fa:dd:19:10:b2:9d:53:49:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E0:3F:00:3C:D5:24:63:F3:7A:F4:90:12:15:FA:94:59:88:89:A2
X509v3 Authority Key Identifier:
keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:70:2e:03:e0:cc:c1:c2:1f:7f:96:72:02:98:9a:ae:98:cf:
1a:6c:04:de:df:4b:32:eb:ab:db:ff:3c:f8:86:b1:ae:c5:fd:
47:c8:1c:43:7f:2d:b8:cf:f3:de:08:2c:25:6c:4f:85:06:50:
03:67:e3:a4:88:1f:b7:63:4b:b4:79:c2:41:cc:1c:02:80:62:
67:6f:a7:54:64:55:e5:73:d4:c1:4f:e6:e0:c2:bb:60:c3:97:
6b:1a:d0:8b:0b:7e:b6:65:af:06:dd:6b:5e:b8:29:f8:c2:bc:
53:96:b6:8d:ba:5d:31:bd:46:ee:a5:4a:2a:57:07:17:c9:56:
52:af:04:b6:f8:d1:1a:15:1c:62:3b:57:9c:29:d8:91:97:4d:
46:e4:06:86:39:63:29:65:2f:d8:4b:fd:a5:c1:3a:47:70:87:
53:a1:c0:27:81:92:54:2a:f7:37:5c:80:c9:59:52:88:8e:cd:
30:31:87:d9:97:d3:8c:72:6c:c1:73:a5:1f:45:e5:5f:34:fc:
6c:69:e1:ad:c9:00:d5:e2:65:16:23:a4:a1:96:f6:35:3b:0f:
35:12:ac:15:71:97:52:48:e4:66:b0:8d:af:21:f5:1d:ef:3a:
d2:3b:55:3a:55:12:c7:5c:98:41:89:ea:01:88:8d:cd:95:d3:
cd:20:8c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:06:09 2024 by rpki-client on console-ams.rpki-client.org