Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: UGAk8oBScC5VafI2VgjnJcjfLy63Qsv08xPiGUryeBY=
Subject key identifier: BC:14:1E:C2:49:0B:8F:EC:21:FD:58:2A:FD:A6:C4:1E:E3:DF:79:76
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 0193553F710CA79969DE45A755891F020F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: F1
Signing time: Fri 22 Nov 2024 19:00:41 +0000
Manifest this update: Fri 22 Nov 2024 19:00:41 +0000
Manifest next update: Sat 23 Nov 2024 19:00:41 +0000
Files and hashes: 1: 5tO77nwKJtjrsg0SvnYN_MDZEt0.roa (hash: HMMiUV7LaVx74fIwEZhzey34lswgAFAYVn8KjGTNalI=)
2: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: j+lTyVhEJUNtP7zND6ok96n76VjpjYeK4W+/2Cq0vWw=)
3: HPIV3v-L66aSCl1b2y35zgA_xfY.roa (hash: 2Ve+4QD5nqoeq9h5UuRDbGHip92uMPdBn7c/ri/20j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:71:0c:a7:99:69:de:45:a7:55:89:1f:02:0f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Nov 22 19:00:41 2024 GMT
Not After : Nov 23 19:00:41 2024 GMT
Subject: CN=bc141ec2490b8fec21fd582afda6c41ee3df7976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:2b:99:f3:9b:93:de:0a:72:d7:c1:3d:c5:
e4:c2:fd:7c:de:e7:ca:9e:21:97:f9:a1:ea:2d:f6:
92:47:8f:2a:9a:ba:ad:03:8f:7b:2b:aa:ba:22:6d:
8b:87:20:d6:83:63:83:f2:20:d8:34:9f:9a:23:19:
5a:df:c1:d4:0d:89:7e:88:88:3c:8d:fe:cc:60:2d:
1c:ab:54:48:3c:3a:c7:2b:ba:99:dc:83:3b:65:83:
fc:5a:31:e7:59:86:46:16:b0:aa:99:ff:b8:05:0d:
af:1e:50:9b:81:75:3c:02:6d:37:6b:63:c7:c6:e4:
b6:ac:9d:c7:36:b6:c5:cc:b3:a1:46:d2:d7:7c:90:
fc:d3:9d:fa:5a:95:c5:e3:79:60:29:4f:d6:d4:5f:
ed:79:22:54:f9:e0:62:cd:a7:2c:28:d7:24:ad:3f:
f9:1b:fd:b0:9b:0a:0b:fa:86:cc:fd:90:43:c5:9c:
88:6a:66:c8:3e:79:f5:07:e5:c7:c6:1b:bd:d6:1e:
b9:13:f5:ce:22:ad:fe:c9:e9:06:14:10:df:b7:4f:
d7:3f:c7:20:e1:17:25:20:c5:83:a6:e9:4b:9a:76:
7c:a7:75:67:22:7c:ed:66:47:dd:cf:29:9f:18:30:
0c:a9:11:4a:15:91:0c:6d:52:34:ca:c7:e0:60:b6:
68:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:1E:C2:49:0B:8F:EC:21:FD:58:2A:FD:A6:C4:1E:E3:DF:79:76
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a8:5c:72:27:de:77:b4:71:c0:1d:b9:d7:20:f5:38:03:6f:
32:04:c8:5b:ef:34:aa:4d:89:44:85:de:46:7b:d8:07:e7:2e:
c0:67:c9:50:79:3f:bb:13:fd:92:9a:d0:9a:fa:36:02:3b:44:
4c:a4:29:4d:9a:bd:39:28:e5:88:84:54:37:4f:9c:57:db:7a:
9b:5f:62:63:b1:5f:45:63:e0:04:f4:b9:a2:4f:4c:32:8c:e4:
a4:e2:c6:12:e8:27:ed:3c:38:89:e0:04:eb:4b:4b:33:dc:b7:
78:14:3c:23:8f:9b:94:9c:1e:61:b2:10:de:13:40:71:fd:23:
23:22:43:35:66:44:e7:27:da:4e:5d:a2:bc:be:6d:44:1a:a6:
86:50:02:53:76:48:c1:a4:44:18:bc:26:56:af:49:85:8b:4c:
2c:c6:39:22:30:a3:80:79:13:23:ba:34:48:b5:60:fd:4f:00:
5d:a5:b7:c7:bc:de:8d:b5:b3:90:96:e1:c6:38:03:59:e7:b8:
a7:c9:93:36:39:d5:b8:18:a2:c7:38:e2:49:0c:7b:8b:3c:93:
42:a3:75:64:00:69:1f:a8:13:09:04:7b:7e:2a:10:b8:d0:88:
69:49:ae:0d:d6:5d:a9:14:79:6f:19:f0:42:66:47:05:00:aa:
ac:c7:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:34:33 2024 by rpki-client on console-ams.rpki-client.org