Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json)
Hash identifier: 8fyRuSuka6BDNvgGWc8Kl0sV15jCo6mXpyK2e39h5Xo=
Subject key identifier: 7B:D6:58:69:7B:06:E7:4E:F8:2D:B1:B6:AF:4E:1F:BB:76:7D:9D:7D
Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Certificate serial: 019357D2A7BF8B9F2078423B4E93A1B12C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
Manifest number: 0440
Signing time: Sat 23 Nov 2024 07:00:43 +0000
Manifest this update: Sat 23 Nov 2024 07:00:43 +0000
Manifest next update: Sun 24 Nov 2024 07:00:43 +0000
Files and hashes: 1: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: +Fk8MlW2g/PPbQC+5sdUakNNWtJNNFH8Z7WfUfBz5js=)
2: sO0gf2uX8b4bSGgknG6xY6CKhDQ.roa (hash: BAoFtizDp0zGxUsnkFZNHOXseDbFVU45jmWCg3RYcpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:a7:bf:8b:9f:20:78:42:3b:4e:93:a1:b1:2c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Validity
Not Before: Nov 23 07:00:43 2024 GMT
Not After : Nov 24 07:00:43 2024 GMT
Subject: CN=7bd658697b06e74ef82db1b6af4e1fbb767d9d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8d:43:36:09:44:37:a6:1c:66:20:73:13:19:
c4:ea:56:d2:45:ed:bf:bb:11:7d:12:86:16:f6:ca:
ec:11:ca:1a:aa:b7:d8:62:8f:c8:5e:14:3e:f5:be:
f8:41:8e:9a:42:f7:91:35:f9:18:00:2e:11:0b:19:
e9:33:b6:4d:05:34:90:11:0f:ee:07:93:29:1a:c0:
33:60:6f:88:de:d6:26:60:7c:1d:0a:0f:3d:df:21:
dc:60:07:9c:6d:bf:04:41:5a:81:de:cf:ae:06:c1:
b1:0d:b6:c4:d6:d2:13:b5:12:6d:6e:26:a3:84:da:
71:2e:fe:86:11:a3:69:f7:63:5d:49:ac:11:6f:44:
58:8e:a3:f7:b7:61:9e:78:12:79:d4:8a:52:d5:12:
0b:74:b1:0e:67:91:37:c5:a8:5a:41:33:33:86:93:
bb:80:36:aa:e5:8e:b8:f2:7c:fa:8c:31:b5:08:b4:
61:50:8e:72:d9:07:fd:30:8e:8c:f5:c2:c3:8d:ce:
e4:ec:c6:11:f0:2c:0c:05:04:43:c2:54:77:35:82:
d7:39:36:5f:fa:6b:14:95:72:a8:3d:44:df:1d:2d:
e7:ba:9f:25:8f:d5:97:3c:5d:42:26:0b:f7:da:c9:
f6:ba:15:35:b1:b4:ca:00:a8:1d:38:6e:b0:b8:7f:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D6:58:69:7B:06:E7:4E:F8:2D:B1:B6:AF:4E:1F:BB:76:7D:9D:7D
X509v3 Authority Key Identifier:
keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0e:1c:ab:79:52:77:25:67:d0:99:95:08:7c:ff:88:b2:fb:
f8:ba:16:96:2c:fe:17:8a:f2:ed:ce:c3:b7:09:c8:16:e9:ae:
fe:21:40:66:3e:dc:dc:11:d0:22:a2:7d:8d:c9:95:96:8f:b9:
67:7a:b2:f0:e3:0c:d0:35:04:22:68:db:7f:27:87:6a:ee:15:
01:87:43:d9:a0:f9:b2:af:8d:1e:9d:93:bf:19:7e:22:88:0b:
5c:1c:21:2c:b4:43:3b:36:27:3d:93:35:28:d6:67:e3:6c:cf:
a9:64:14:8e:91:30:ef:7c:5b:94:a4:fc:f5:55:84:ff:c8:26:
7b:5e:85:ea:6c:84:ea:39:a5:dd:9e:bc:d8:bc:93:cd:af:14:
65:f8:a4:0c:58:c4:6d:54:36:02:77:8e:58:54:56:a3:b8:fa:
93:c4:3f:a4:30:46:33:fc:20:e9:e3:36:50:49:5f:81:94:cc:
46:40:55:29:a0:65:50:9b:85:33:92:8b:18:da:59:ef:05:62:
b1:19:2f:c7:82:3b:0c:2a:c3:fe:9b:88:3f:9d:f6:26:19:38:
e6:6f:2c:f0:50:b3:cc:a8:35:71:44:cb:d5:58:c4:d2:00:b3:
26:ef:e0:00:8c:8d:54:fc:b9:9c:1a:e6:af:62:6c:65:59:01:
8e:94:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:59:55 2024 by rpki-client on console-ams.rpki-client.org