Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: nAa4FJhwcZGoNTsgYNWOLnimM/gw18JCXHS9MS5EBhg=
Subject key identifier: AE:A8:76:41:43:04:04:06:F4:A4:05:50:94:60:53:05:90:28:59:88
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 01935878729F6BFFF6ADA35D4E65CB9DA354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 10B0
Signing time: Sat 23 Nov 2024 10:01:48 +0000
Manifest this update: Sat 23 Nov 2024 10:01:48 +0000
Manifest next update: Sun 24 Nov 2024 10:01:48 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: hMvZOMhnJBx1kEjJolBAMG/iA4/fItkaHDaW7QJaNrY=)
2: MdcLcF598us8et6609oKHBzow9Y.roa (hash: lG7/IJa6qfh9JZ5f09IrmDhulgP6dGUr1CbSjJLuNMQ=)
3: NWgnh4MQbp6aydoBNY4vS1HQjIU.roa (hash: stpmFs/N4+m+eWxWnkRi6SraLNplD5P6ljDYELycT+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:72:9f:6b:ff:f6:ad:a3:5d:4e:65:cb:9d:a3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Nov 23 10:01:48 2024 GMT
Not After : Nov 24 10:01:48 2024 GMT
Subject: CN=aea8764143040406f4a405509460530590285988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:7e:b7:ee:8f:fd:2d:3a:d5:60:47:f5:a9:
a1:1e:46:76:87:ed:38:48:2c:a2:b7:a9:4d:b8:96:
7d:ee:f5:67:97:40:7c:a3:14:b9:29:48:88:d7:0a:
50:63:18:a4:ba:f0:e7:c4:e3:64:21:5d:15:94:fe:
66:69:f7:31:95:d9:b3:89:21:b1:25:50:10:81:6d:
48:9a:fb:a2:51:dc:30:c8:ce:46:2a:dc:8a:62:b7:
52:a2:79:1f:1e:e8:c5:62:78:0c:7e:30:76:59:69:
9b:79:b0:25:43:56:21:ed:19:3d:54:ee:4f:b8:bf:
ca:99:1c:eb:1f:42:d5:b2:58:36:55:fe:27:f0:33:
1c:80:a1:b4:3c:85:86:fe:78:0f:23:90:bd:5d:b1:
9a:a0:71:41:d5:46:ff:22:60:57:8c:53:b9:04:27:
0b:bd:1d:30:08:4e:15:c3:f5:ea:e8:9d:48:21:69:
53:cf:da:ed:d1:10:ef:25:03:be:6f:bb:8a:32:64:
38:ab:a1:c1:e4:03:d7:45:79:31:67:8e:a0:c3:bf:
df:7d:38:10:55:ee:47:06:16:4f:bc:18:8b:48:c1:
82:15:5c:13:26:78:b9:89:20:7b:32:2f:b4:3b:77:
01:2b:e6:bb:2a:0f:67:35:f2:69:f5:70:ad:f5:35:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A8:76:41:43:04:04:06:F4:A4:05:50:94:60:53:05:90:28:59:88
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:41:25:88:7e:24:3b:91:a8:2c:32:05:e1:1e:8d:ed:d7:fc:
f5:ad:3c:12:cd:a0:52:a6:db:ba:77:32:23:b0:f8:06:ba:1a:
3b:89:8a:f8:eb:89:19:d5:21:8d:f9:ba:48:df:89:10:ec:ea:
13:3f:6c:89:ba:54:7c:15:ac:ec:bb:49:0b:e0:f5:4a:6d:38:
7a:e3:50:25:d4:2c:61:15:7b:47:9c:05:13:8a:a0:19:3c:00:
60:34:5c:e0:ca:02:af:a7:2e:7b:83:9a:8b:6a:fc:9d:35:1b:
76:80:c9:d4:54:03:3d:28:23:9c:0f:ae:02:82:e5:91:27:77:
18:50:9c:82:51:3f:56:b6:a8:d8:a7:b1:54:63:d7:73:1e:cb:
24:c6:2c:80:22:ac:f6:6d:15:b3:af:8a:d0:66:7c:e4:8a:30:
b9:51:31:fa:4d:d6:c1:0b:d5:84:ff:c8:ed:6a:3c:a0:87:b7:
05:18:26:ce:04:38:9f:5d:3e:6f:44:04:44:53:53:bf:67:2e:
e8:e4:2c:93:ae:a5:6c:12:1a:4a:e9:f8:b9:0c:16:d1:ab:50:
8d:24:d3:16:41:99:b8:e6:a7:c3:9f:6a:29:f9:5d:9f:ef:13:
f4:ea:d9:7a:20:ef:2a:83:a3:d1:52:43:72:99:a2:b0:66:f6:
fa:b0:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:40 2024 by rpki-client on console-ams.rpki-client.org