Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json)
Hash identifier: JDIfEzpkSlwQwfoEbEReP1Thxz4qtTOIIB3dALmWrk0=
Subject key identifier: 8D:34:41:BF:54:BB:B8:65:4C:1C:8D:45:F5:B3:C7:2F:F8:C9:8E:C8
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 019355AD46F5FD79C0F7020AF1845115092D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
Manifest number: 89
Signing time: Fri 22 Nov 2024 21:00:39 +0000
Manifest this update: Fri 22 Nov 2024 21:00:39 +0000
Manifest next update: Sat 23 Nov 2024 21:00:39 +0000
Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: QUvnagO7SlP6cMCe72If9c1wXPsLUnkgG4Bdy6t3yfo=)
2: haFSg_WCcHDZ-etFo156pXc0qk4.roa (hash: i0Xb/3AZHYwzF61CJ3SKR7C8DBsGAlRzVuSQmsK9RCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ad:46:f5:fd:79:c0:f7:02:0a:f1:84:51:15:09:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Nov 22 21:00:39 2024 GMT
Not After : Nov 23 21:00:39 2024 GMT
Subject: CN=8d3441bf54bbb8654c1c8d45f5b3c72ff8c98ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:dc:19:2e:65:25:5b:05:91:08:e5:0c:0f:
93:b2:07:8b:cf:70:56:a7:04:6b:6f:72:7f:bb:16:
d4:95:8c:6c:58:2d:36:a8:d7:5c:6a:fa:66:56:33:
5e:3e:08:59:2b:c3:cd:21:f0:b9:c6:8d:d5:82:91:
ab:c2:cd:18:ef:88:79:bf:e7:d3:4e:25:b7:37:5d:
1d:76:fc:28:be:99:45:90:ed:1d:74:3b:22:81:3d:
b1:05:ba:26:b8:30:90:78:2f:1b:e6:06:25:6c:44:
64:42:ae:af:a8:d6:db:1d:6f:eb:fa:30:80:be:99:
2f:2c:f1:ac:82:70:e6:d5:9c:56:af:e2:96:7f:57:
bb:66:5e:e3:c9:68:6a:1f:f9:f3:92:87:09:7c:6f:
08:1d:25:e1:b0:bf:86:15:c9:27:9a:e1:8f:66:e6:
e5:a1:59:3a:6f:ff:5b:2e:c1:9e:6d:e6:b3:da:1e:
cc:ca:bf:13:4f:ec:85:e5:d2:a6:46:55:2d:76:d9:
d8:6a:aa:d5:0e:1a:17:f8:cc:71:b8:03:c9:5a:dc:
a8:1d:aa:b8:52:0e:04:f5:e4:f2:50:2d:b6:6a:a7:
5b:39:7a:04:76:4f:6f:9d:d8:a9:17:7e:55:d5:35:
1c:78:b8:18:c6:01:42:61:9f:cb:8c:63:e8:e2:9b:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:34:41:BF:54:BB:B8:65:4C:1C:8D:45:F5:B3:C7:2F:F8:C9:8E:C8
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f8:0d:e9:2c:29:90:34:17:f4:a8:63:ef:4c:99:b7:60:6f:
70:da:e7:24:78:3b:d4:2c:79:f3:7d:ee:41:98:b7:61:b7:96:
a1:2c:8f:67:5b:5d:75:e3:9b:99:3e:30:45:1e:7b:8f:9a:89:
d0:1e:60:a2:f8:34:bb:7c:24:14:38:45:02:3d:7b:2f:d7:0c:
47:7e:a5:ff:5e:01:00:66:be:5b:6b:f8:28:73:13:01:ef:a0:
94:b1:53:e3:88:0b:a5:ab:7a:2e:bd:fe:e9:92:0b:9b:b7:0e:
65:9a:2a:f7:8b:0a:16:5c:e4:a1:bf:73:ff:40:ae:e2:61:ae:
3c:45:c9:8b:80:34:23:d8:dc:3c:b4:7d:5d:af:86:c5:9c:46:
ac:80:f7:5f:d2:a8:10:a2:d9:50:a3:e4:33:0b:04:bc:2e:ec:
bf:17:c2:b2:2d:53:2b:8f:0a:10:e6:89:9a:08:b1:ae:2b:c5:
1e:0b:7a:2c:24:95:b5:5d:7c:e9:9b:cf:e0:62:85:ba:5e:2f:
89:dd:41:c6:22:db:52:ee:6a:8a:5c:4d:be:3d:c9:0f:e9:b7:
89:de:e1:a9:6b:b0:82:e9:e6:46:a9:f0:e2:fe:5b:af:aa:a8:
9e:e0:29:b7:d2:99:9a:2c:90:95:af:8e:45:c5:b8:68:81:29:
e7:17:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:35 2024 by rpki-client on console-ams.rpki-client.org