Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft (raw, json)
Hash identifier: JQAAe0l24tT7OtVzkrPs1DCXBiID4sEV+S744tfVDjs=
Subject key identifier: 31:77:22:9D:4D:96:20:B8:9B:5D:8C:FA:DB:57:39:BD:B3:52:5D:AC
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 0193688F4F4CBABF7F9C61E5DA6E4B138ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
Manifest number: 0A35
Signing time: Tue 26 Nov 2024 13:00:42 +0000
Manifest this update: Tue 26 Nov 2024 13:00:42 +0000
Manifest next update: Wed 27 Nov 2024 13:00:42 +0000
Files and hashes: 1: 43ZgZiYXx0zR1wkgRVeO849JEEo.roa (hash: cDQTL2+xBhMlz76u3BpBMD8cdGVcIer+bJRQoEBzS20=)
2: D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl (hash: HNsfVUWSZ5t5DUQ9msoPlNRCrDzKcQkyO4kpIHJK2S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:8f:4f:4c:ba:bf:7f:9c:61:e5:da:6e:4b:13:8a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Nov 26 13:00:42 2024 GMT
Not After : Nov 27 13:00:42 2024 GMT
Subject: CN=3177229d4d9620b89b5d8cfadb5739bdb3525dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:6d:72:40:63:ec:88:38:1e:44:4d:2f:1a:
26:f5:47:fa:fe:60:44:6c:b0:21:0e:23:f9:54:43:
f8:73:60:77:42:7d:f2:96:e3:91:5a:19:5e:0a:2d:
a0:ae:4c:ed:dd:58:be:93:4d:0b:97:c2:5b:35:33:
d7:48:fe:d1:6b:77:29:87:ea:ed:ad:57:d4:23:43:
89:b2:08:e7:6f:7b:88:58:4a:0b:49:5e:5f:d0:29:
4a:6a:07:97:1c:e6:1d:b8:25:b0:05:3f:3f:fa:52:
f5:86:a5:b8:ec:04:e6:71:ad:b8:d9:69:42:69:e3:
bf:d1:8c:bd:55:26:e6:76:86:de:de:dd:67:ec:52:
1b:3a:41:aa:67:37:cf:e6:84:02:97:b5:3f:46:f5:
b0:bc:8a:f6:e9:55:a0:cd:69:09:39:04:3a:73:72:
90:b9:23:16:31:b7:53:97:f2:f1:46:2c:07:a6:83:
97:8c:84:7d:0c:8a:eb:e3:83:57:d5:85:9d:ab:09:
13:13:dd:5f:5c:60:8d:e5:fe:77:80:d7:ab:65:9e:
67:ab:31:20:a5:4e:91:25:74:44:ed:cf:63:13:81:
de:25:90:09:51:a3:8f:22:dc:c2:b2:7e:bf:7f:43:
d5:ba:21:e3:a7:10:a7:a0:3a:2f:db:9e:1d:ec:74:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:22:9D:4D:96:20:B8:9B:5D:8C:FA:DB:57:39:BD:B3:52:5D:AC
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c7:ac:46:21:a9:7b:8a:12:9b:54:2b:a1:fc:84:be:df:b9:
eb:0e:9a:bb:98:7b:78:74:53:e7:b5:0b:3c:e5:02:f3:d4:5f:
43:8a:88:2a:f1:4c:f1:33:ef:0c:99:e3:6a:60:76:ef:43:58:
83:2a:15:ba:22:8d:46:33:6a:ed:42:e5:2d:58:66:e0:65:3d:
4d:cb:02:9d:34:e4:58:d5:9e:20:da:41:e9:47:e2:c6:d7:a0:
ba:71:16:f1:8c:73:e4:d2:96:df:5e:ae:96:27:1a:e1:ca:22:
98:6a:8d:7c:dd:ed:bc:09:07:ec:6e:5a:99:4a:a5:d7:0c:44:
30:4a:a3:a6:8e:2f:3f:b8:ff:5e:e1:3a:54:78:81:00:c1:04:
ac:38:6c:b0:c3:3b:77:27:4e:4d:4c:f5:3c:39:c2:06:01:1b:
78:4a:eb:ff:1f:49:9f:4c:89:49:4a:c2:92:ba:85:91:c3:3c:
fe:ce:3f:7f:e5:eb:99:0c:9c:ec:09:f2:86:94:7d:fa:6e:2c:
88:25:15:9d:fb:bd:ac:17:d1:26:6e:69:10:83:0c:53:ed:8e:
4c:d6:99:db:70:86:99:00:e5:ca:41:e5:ab:e3:e3:93:c0:0e:
72:bd:92:89:d3:3e:37:33:a7:7c:95:14:f9:ff:15:8d:09:8f:
ec:fe:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 20:12:39 2024 by rpki-client on console-ams.rpki-client.org