Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
File: DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json)
Hash identifier: BmgJVd98q3xq/C9SsrBzeyS+BFIRdndsQ3+S6V4g1kI=
Subject key identifier: D0:05:1A:5F:7B:79:72:19:E2:55:2C:82:3F:24:DF:2A:24:CA:76:5C
Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Certificate serial: 01940646586C3FA9C77E0A3770F1954A1196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
Manifest number: 13D0
Signing time: Fri 27 Dec 2024 04:01:00 +0000
Manifest this update: Fri 27 Dec 2024 04:01:00 +0000
Manifest next update: Sat 28 Dec 2024 04:01:00 +0000
Files and hashes: 1: 4yLdBO8cpBuGuWHJINUNCLgh8Ag.roa (hash: Sdlh7uXTCyVvrVJMrLPCqUEMx5i2F7T4NaNg/nnQO6E=)
2: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: V3m8wt/t79qhkNQXNTR6/jve0pubT3WDabPGjPB7GX0=)
3: u0GDzVSKN8yZcCmvBnKidBMixos.roa (hash: 9bcBZz+T4pWxOAE/GEnH5TSYpaxzkJaQiv5O+QXobws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:46:58:6c:3f:a9:c7:7e:0a:37:70:f1:95:4a:11:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a
Validity
Not Before: Dec 27 04:01:00 2024 GMT
Not After : Dec 28 04:01:00 2024 GMT
Subject: CN=d0051a5f7b797219e2552c823f24df2a24ca765c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:67:05:1b:6e:74:35:2f:6f:f6:71:d6:de:
30:1d:7f:04:c6:1b:7d:af:46:b8:87:f2:ef:50:71:
60:8e:a3:6d:85:6d:43:1e:2c:28:9b:a3:c7:27:aa:
fa:0e:bf:4b:bb:10:3c:fb:07:66:b8:cc:17:f4:a1:
65:a8:ec:53:81:e0:08:93:56:08:e4:b3:c1:5f:68:
47:9e:8a:70:7b:3e:ff:ac:fb:d2:33:0a:d3:33:4a:
81:14:83:f8:f4:26:e9:1d:a7:e1:10:d3:2e:1c:1b:
05:3d:22:2a:17:e6:33:dd:f6:30:a8:90:51:f0:a6:
23:2f:64:10:f5:58:1d:64:88:ee:91:44:89:16:43:
a6:1d:de:69:17:47:46:7d:a1:cb:01:13:42:b5:75:
61:d5:96:ab:62:48:92:41:f4:9e:2e:bb:da:ad:0d:
bd:3d:07:38:f3:2b:53:68:48:ba:fb:e9:39:91:f7:
6a:ff:48:dd:ed:e8:52:c4:2d:9c:db:24:de:48:97:
da:57:22:49:30:bc:7e:e1:40:2a:ea:d5:55:a3:59:
41:fa:f7:14:00:62:11:af:19:cb:19:3e:1e:d7:16:
d5:cd:25:a8:e8:10:e8:30:ed:5e:b8:e7:71:2f:35:
90:a5:df:86:35:a0:3c:c8:21:3b:f3:04:79:9a:94:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:05:1A:5F:7B:79:72:19:E2:55:2C:82:3F:24:DF:2A:24:CA:76:5C
X509v3 Authority Key Identifier:
keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:29:c5:b1:29:e4:5c:c7:99:53:f7:af:f3:72:38:f8:e9:da:
88:08:22:88:4b:67:50:d7:07:73:96:f9:e9:83:13:38:0a:35:
9d:44:bf:89:b0:dd:77:9f:14:5f:ed:db:39:1a:b4:2c:9f:38:
2d:78:8b:f0:36:87:08:6b:f0:bf:52:04:ac:82:35:ae:22:84:
77:b7:0f:24:e3:da:46:17:0e:28:37:82:4f:51:e9:0a:40:80:
7f:43:6c:a4:d1:63:14:7a:cf:44:4f:ef:59:b8:d9:a2:fa:52:
12:04:d8:4f:c5:4b:e5:4e:b4:34:17:a5:e9:dd:11:00:90:17:
a7:b8:46:bd:b1:49:5e:dc:18:06:20:77:68:95:cb:a3:f6:a0:
5f:86:9b:54:1e:43:de:55:3a:07:ea:74:3f:34:73:eb:92:7c:
a4:f9:cd:6b:de:9f:3f:bb:78:24:7d:68:3f:50:a1:e9:8b:0f:
d1:7e:29:c9:ff:8c:49:2a:c1:3a:ac:f9:06:e8:9a:63:2a:98:
7a:b3:5b:c2:72:46:43:99:46:8d:28:1d:a3:ae:46:e4:05:a3:
cd:96:7f:02:2b:e6:60:6d:83:33:44:da:e6:47:00:b8:d1:7c:
4a:e4:a5:8e:13:c3:4c:3f:ff:e7:14:6f:32:d9:7a:a3:e1:a2:
57:ce:46:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:10:54 2024 by rpki-client on console-fra.rpki-client.org