Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
File: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft (raw, json)
Hash identifier: gsbMZGOJ1iQkh9T0/OXeCHOtVA2rSOl5RgvIvRB/s+A=
Subject key identifier: 35:BD:37:50:1B:96:A6:27:17:69:27:F0:6A:9F:F1:48:95:5F:41:50
Authority key identifier: D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
Certificate issuer: /CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Certificate serial: 019358780997E3082EB1A6DBFEB9B3FF178E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
Manifest number: 06DB
Signing time: Sat 23 Nov 2024 10:01:22 +0000
Manifest this update: Sat 23 Nov 2024 10:01:22 +0000
Manifest next update: Sun 24 Nov 2024 10:01:22 +0000
Files and hashes: 1: 0ex17KHt6OqyTPYLDnBxNix3YKw.roa (hash: M24oNxkywDmO+awN1s7X/xBF4qHVy3Pxg7r1TuAtBbA=)
2: 0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl (hash: 2eg6E/kswSouaAEK9HCXJG9DoTLzwwGSk7GYMrrAdvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:09:97:e3:08:2e:b1:a6:db:fe:b9:b3:ff:17:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32563ed9964e42681a1c5d295b0c6148606e73d
Validity
Not Before: Nov 23 10:01:22 2024 GMT
Not After : Nov 24 10:01:22 2024 GMT
Subject: CN=35bd37501b96a627176927f06a9ff148955f4150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2c:8c:6e:95:91:81:26:59:4a:65:f9:4b:3c:
d2:82:fe:1e:f4:04:da:c5:dd:25:bc:07:63:8d:00:
48:af:72:be:f8:c7:e2:00:53:62:6f:0d:a1:23:20:
95:38:22:6f:45:cb:89:50:56:3c:92:2b:31:60:e0:
7d:33:96:48:af:10:24:13:eb:b8:0f:23:2e:22:9a:
bf:a7:f4:3e:72:d5:e2:b3:06:62:16:a4:ed:65:fc:
1e:e0:71:e4:3d:15:81:8f:25:00:b0:65:85:7e:51:
2e:b2:82:0d:39:17:2a:35:d6:fd:19:0e:cc:74:c5:
97:a8:da:c2:d8:92:2c:9c:32:73:27:c6:dd:17:77:
3a:29:da:22:2d:f5:17:d0:cb:a1:78:2c:bb:b6:da:
65:6b:55:ea:5f:38:cf:bb:b8:01:ae:cf:ab:5f:25:
0a:d2:91:f3:73:b5:77:f7:9b:50:22:00:ee:ea:1e:
90:4b:aa:39:bd:a9:2a:cd:6b:b6:d2:96:1c:91:86:
3d:30:e8:a2:3b:4b:9f:0e:e4:08:a7:d4:a8:a5:69:
18:37:99:d0:76:bf:f0:db:fb:c6:7e:2b:5d:1b:83:
4e:08:b1:36:53:a6:6b:af:da:af:1d:bf:e2:e0:7f:
4c:45:86:bd:cd:fe:f2:fe:f0:a4:8a:bc:53:3d:0a:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BD:37:50:1B:96:A6:27:17:69:27:F0:6A:9F:F1:48:95:5F:41:50
X509v3 Authority Key Identifier:
keyid:D3:25:63:ED:99:64:E4:26:81:A1:C5:D2:95:B0:C6:14:86:06:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yVj7Zlk5CaBocXSlbDGFIYG5z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6bf5ed-6fe6-4562-b853-9a4ec10607c5/1/0yVj7Zlk5CaBocXSlbDGFIYG5z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:62:82:aa:1a:b0:11:62:f8:24:db:c0:8d:11:18:d0:41:c7:
65:93:02:f9:0d:65:71:38:df:65:93:57:3f:10:aa:7f:d8:f1:
8c:cf:36:f2:e3:63:9a:39:2c:b5:66:74:a7:a6:22:0e:17:ca:
f8:59:cc:f8:6d:c8:61:a7:8c:03:94:4e:70:a0:9a:b3:8e:c8:
bb:cb:55:f4:c5:da:e3:eb:21:89:7f:d1:7f:c1:ed:4f:82:af:
a7:2d:7e:24:bd:c1:77:26:df:9a:f7:dd:d0:15:42:2f:80:61:
f7:7f:8c:0b:5d:bc:c9:d7:98:e0:b9:55:07:74:92:9c:72:38:
54:f8:56:69:a3:c1:d8:86:01:d0:fc:f1:fa:ed:5e:ed:70:2c:
83:2d:b9:7d:64:b4:50:42:ed:9b:50:1b:91:58:31:9c:21:80:
33:a4:88:23:f4:57:26:3a:14:58:d1:46:d7:6d:14:ad:ea:cd:
cf:d3:a9:08:92:0c:80:fc:34:13:85:70:34:d9:71:39:2a:55:
31:97:23:a6:66:9d:d3:92:7b:2e:5e:b5:12:eb:44:f2:f9:75:
1e:d1:0a:ba:05:6d:d2:89:9d:c6:fb:e7:c5:0b:76:90:eb:81:
7d:1a:76:fb:5b:75:21:8a:ab:b1:4f:20:8d:a9:ab:0a:c3:ed:
14:64:6c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:16 2024 by rpki-client on console-fra.rpki-client.org