Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: flIkYg8gKATW0//6uaNODVMYc3y8qK8OuoBMo7LgIPw=
Subject key identifier: 93:B6:4E:5D:AD:46:00:C7:6B:9D:14:EF:65:44:9A:3D:CD:DC:8D:4D
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 01935688BF32425D9CA0DC8E9896D8ACF6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 137B
Signing time: Sat 23 Nov 2024 01:00:22 +0000
Manifest this update: Sat 23 Nov 2024 01:00:22 +0000
Manifest next update: Sun 24 Nov 2024 01:00:22 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: ERE23FjpdgElv/1TXHzghYyfa3yL4v7tFhcNNeJi2hM=)
2: KjCiqtzedJGYcAYLBS43-n8JnM0.roa (hash: du5mKosDuKPRbRJqNknivfswQ08uxfOK1YhX4eB7pgE=)
3: _lD4qzQRtfv24I-UTlO97x4jmuI.roa (hash: yGduBYpcYdxAvsFPf25W0w6vcTeCOgUDW+SJQVeHJdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:bf:32:42:5d:9c:a0:dc:8e:98:96:d8:ac:f6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Nov 23 01:00:22 2024 GMT
Not After : Nov 24 01:00:22 2024 GMT
Subject: CN=93b64e5dad4600c76b9d14ef65449a3dcddc8d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:e8:67:70:54:cf:29:ae:cf:6a:7f:bc:8d:
60:fb:48:8e:a6:71:c4:e9:8d:d1:20:91:60:26:43:
03:91:df:86:aa:84:14:69:8d:0e:1d:d2:10:a3:eb:
5b:fd:c3:2c:2e:4b:af:e9:80:71:93:6e:9e:e5:35:
2d:b7:7f:71:dc:0f:0f:e3:e6:17:77:1a:b4:35:86:
ea:29:da:2f:8e:aa:6d:90:7a:3d:49:fa:d8:78:f5:
81:7c:62:f8:e1:12:08:9b:de:26:22:35:0a:9d:be:
f9:f3:0a:d2:b4:87:db:af:31:91:c2:dc:70:75:7e:
be:38:d9:18:e6:85:49:e5:2c:29:2c:da:9d:ed:e7:
36:e2:03:d7:de:96:88:5d:0a:10:b4:ce:44:84:04:
f0:80:bb:e8:90:42:0c:bf:bf:81:b9:5a:15:2d:df:
f3:7e:ce:de:44:bb:87:c5:5e:fb:88:e8:bc:49:13:
a2:0b:05:ff:03:d7:30:9b:17:b2:2f:7c:74:36:e1:
08:65:c1:88:e6:e3:28:ee:8f:a8:d2:05:ca:d4:67:
6a:5c:a4:e6:a8:5d:65:a9:28:49:9a:16:32:94:76:
1b:e9:e2:d5:03:53:a2:68:54:d3:51:a1:62:eb:88:
f5:67:70:d7:2d:cb:3f:52:f6:99:8c:49:20:f4:3c:
93:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B6:4E:5D:AD:46:00:C7:6B:9D:14:EF:65:44:9A:3D:CD:DC:8D:4D
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cf:f9:16:7c:ca:3f:8b:21:e7:d2:01:77:9d:47:4d:e1:e4:
bb:bf:6f:6f:d2:76:32:ee:2e:62:f3:c6:76:cc:f4:a3:ed:b0:
91:b8:81:72:5e:4f:60:58:f0:23:b1:53:0a:70:40:51:67:a5:
e4:b0:db:10:06:10:de:80:64:b1:71:d2:82:b5:e5:e4:b2:b2:
27:81:11:74:aa:af:a6:43:c4:35:1a:59:5c:9c:10:a4:c3:e3:
42:31:5d:52:52:e0:b4:a1:87:98:81:ad:ca:b8:61:4b:04:a1:
f2:20:55:52:3a:ad:e2:72:64:ec:aa:3e:8f:b5:58:d6:f2:fb:
e7:2f:a5:4d:3a:84:81:48:13:88:ec:4c:6e:16:66:61:82:bd:
54:f1:08:06:6d:13:36:d4:16:11:dd:01:21:4e:00:98:71:c3:
a4:29:52:f6:12:93:3a:e2:ec:1f:9f:b3:c3:3f:f8:54:98:73:
a6:ab:d1:6d:91:7a:28:23:99:0d:e4:d9:28:c8:a5:48:16:ba:
c6:34:fa:9b:95:df:84:14:a6:8d:66:a6:96:b3:8f:65:dc:37:
cc:2c:d4:6b:cb:16:39:6a:0b:23:2a:e6:c6:48:a6:6b:b7:70:
c1:09:c6:0a:32:e1:3e:04:0e:2d:3c:70:93:04:41:cc:33:6f:
f7:2c:86:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:37 2024 by rpki-client on console-fra.rpki-client.org