Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json)
Hash identifier: UmSsCtfp2vMobwnKdlVXnyvuzr/8PgRapNmyYFdHZiQ=
Subject key identifier: 55:96:E0:1D:07:9F:98:C0:A2:81:BB:30:68:6F:04:83:06:D5:F7:25
Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Certificate serial: 0193587734FD780181FB272F00668F0A96F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
Manifest number: 1373
Signing time: Sat 23 Nov 2024 10:00:27 +0000
Manifest this update: Sat 23 Nov 2024 10:00:27 +0000
Manifest next update: Sun 24 Nov 2024 10:00:27 +0000
Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: 6yFTai0dRL4SBDB3BOzhsa9oHeWoGtk2H4TiX/r9d44=)
2: v8CF-Esc8JqWAWLIsqlkN5ao1sc.roa (hash: oX5EkoQvdA6g5NM+KBm6HYg1nIQ/EvmTIboQ5NAij8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:34:fd:78:01:81:fb:27:2f:00:66:8f:0a:96:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52
Validity
Not Before: Nov 23 10:00:27 2024 GMT
Not After : Nov 24 10:00:27 2024 GMT
Subject: CN=5596e01d079f98c0a281bb30686f048306d5f725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:ad:81:75:7a:b8:ed:a8:43:27:a7:b9:03:
08:7b:61:a0:03:8d:ee:fa:39:e8:5d:85:7e:da:e9:
4d:3b:4d:8e:63:79:aa:51:94:ac:9e:23:2c:1f:15:
d6:4b:08:2f:8f:c0:a5:a7:95:7c:d7:63:e2:5e:e5:
f0:3f:32:19:e2:c3:da:73:dc:e6:75:fd:92:e9:73:
a2:50:95:6b:71:81:89:4c:b9:04:91:0d:61:65:42:
f6:53:7e:93:25:da:4c:68:af:5b:aa:8d:76:46:67:
0c:64:38:82:58:47:a0:3d:bf:30:86:d1:f7:00:0d:
3a:18:2c:e4:48:f6:86:ec:3a:75:60:9b:50:59:d7:
7d:01:e0:76:89:46:f5:f7:9e:eb:bb:99:b4:41:74:
2f:b5:a7:1c:8d:a9:8c:87:aa:e4:95:11:0a:1d:9f:
e9:e0:9d:e0:40:4c:1d:20:ba:5c:a2:37:02:ce:37:
03:e0:81:2a:9a:87:aa:f5:89:7b:aa:1b:70:d5:73:
4b:ac:f7:0c:7e:87:6f:f6:90:f8:09:7e:3a:26:57:
8a:dc:7d:ce:1d:73:fe:24:8f:fc:d8:c7:9f:51:3f:
69:31:eb:53:88:9f:88:be:e1:e3:e0:49:6f:a7:24:
e5:e3:73:11:ac:4a:e8:31:b2:f3:d7:57:8e:ce:c2:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:96:E0:1D:07:9F:98:C0:A2:81:BB:30:68:6F:04:83:06:D5:F7:25
X509v3 Authority Key Identifier:
keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:56:4a:71:ba:0b:8a:d2:09:2b:74:8b:65:39:0a:5a:e2:2e:
18:b8:da:7c:3e:15:52:89:ff:47:92:30:8c:74:77:85:4a:1d:
2a:cf:36:c4:c0:3f:74:a9:3b:6d:a2:a3:e6:46:db:ea:37:38:
18:e8:d1:ac:9f:66:21:42:16:b2:eb:99:3f:d2:6a:ab:4d:39:
0e:58:20:50:85:ed:b4:21:f5:7c:93:3f:e7:bb:82:35:f3:5c:
88:53:0a:86:12:21:45:55:83:74:3b:bc:10:6d:c8:6b:8f:f7:
78:96:44:dc:70:1c:13:43:3b:7f:5e:60:9a:11:bb:62:aa:af:
05:b4:2a:a8:31:7a:a3:cb:d0:48:bb:cd:45:ff:68:66:39:bd:
d7:35:fb:65:3d:8d:99:eb:d4:00:de:d8:cd:7a:e6:27:8f:52:
6d:d8:07:f6:d2:f9:3d:27:9d:9d:a5:80:b5:3a:ab:b2:5d:cb:
d3:7c:82:93:3b:5d:92:40:be:ac:88:bb:32:b9:f6:26:fe:25:
a4:db:e7:e0:5f:a8:40:29:3e:a1:35:7b:3e:bf:84:8a:c8:68:
13:55:c9:f4:1c:2b:40:ad:af:5b:9c:05:47:49:9e:21:82:7f:
ce:b5:65:85:ef:55:70:28:65:f3:f7:c3:cd:c4:5b:d4:fa:5f:
1d:cc:4a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:52 2024 by rpki-client on console-fra.rpki-client.org