Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: T+AfIBTuKi1OnjISau/cul2B2IUHpRnTBWu0GHBg0Bw=
Subject key identifier: D9:DE:89:C4:69:C6:50:47:B4:8F:F4:7F:EC:A2:96:54:72:5E:5E:09
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 01935689E283CDD7CE44D478819E8FA77194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 1371
Signing time: Sat 23 Nov 2024 01:01:37 +0000
Manifest this update: Sat 23 Nov 2024 01:01:37 +0000
Manifest next update: Sun 24 Nov 2024 01:01:37 +0000
Files and hashes: 1: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: Zdq9FJvJwrIj7vNd1/LEG/jEyP5r2Dhv8YdIMgOF5Wg=)
2: yxtJApYm-RiRTr3HHaLhuVAfUO4.roa (hash: 7ImksTx1HHgb5vYAzSADBeGVPNSg2/yPH8fywyGgCr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:e2:83:cd:d7:ce:44:d4:78:81:9e:8f:a7:71:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Nov 23 01:01:37 2024 GMT
Not After : Nov 24 01:01:37 2024 GMT
Subject: CN=d9de89c469c65047b48ff47feca29654725e5e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:9e:87:7f:a8:4f:76:d6:f4:0a:01:56:c2:
8b:76:73:7e:91:e0:b9:f7:47:83:53:02:14:49:8f:
ac:42:b3:a3:cb:ae:7e:dd:1c:d8:5c:79:1e:e9:46:
11:b3:92:11:55:83:70:a4:3d:25:e7:b6:fe:55:48:
05:dc:dd:4a:c3:17:e3:75:0d:4f:36:f2:ee:05:a3:
2d:b9:30:ea:e0:4e:06:15:f0:37:dc:39:b0:0e:09:
ca:c3:4e:51:14:79:13:0d:36:8e:68:a8:da:a4:d3:
f9:63:ba:bb:6f:c4:70:fb:89:ea:bf:8b:9a:fc:f5:
6f:86:c8:7a:ed:4d:55:f9:a9:31:c4:97:e2:43:f5:
43:f3:49:a3:c6:76:9c:00:cc:df:f2:47:a0:24:d4:
d5:7f:98:9d:f5:61:8a:42:c8:14:1c:0c:04:f8:f9:
b4:46:25:71:f1:ee:97:15:18:b4:0c:47:6b:50:2f:
74:01:62:80:fa:79:8f:ff:48:bc:4c:f8:f1:b6:3a:
86:cf:4f:ab:79:bc:12:68:27:28:c6:0c:39:21:4a:
ad:07:eb:2f:a0:40:5d:b5:e0:d8:b7:2e:bb:71:4e:
91:5d:fb:02:bf:ca:07:04:c6:ca:fe:86:4b:78:a3:
64:77:cb:47:5b:c6:ad:a8:6b:18:56:36:d7:b0:a3:
da:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DE:89:C4:69:C6:50:47:B4:8F:F4:7F:EC:A2:96:54:72:5E:5E:09
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:12:df:e5:ea:83:da:ee:5c:7f:3f:76:7d:67:96:56:3c:98:
3b:f2:7a:ac:c6:43:1c:25:ca:26:86:b5:21:88:55:46:a8:35:
b5:09:8d:fb:ee:96:a6:a4:39:01:2c:52:30:36:18:6f:b1:36:
16:1c:1a:9f:44:c5:c6:a1:28:40:0f:21:8d:51:2d:e5:3c:5e:
ac:9b:45:14:ef:6c:b3:18:83:7e:ce:5e:19:40:ab:87:59:77:
1e:bd:91:6b:9b:26:b5:59:bf:06:a6:01:fc:71:80:68:d9:b6:
ff:e7:73:95:9c:f1:2d:51:3f:b9:4c:df:52:37:27:d0:13:93:
4c:c8:5d:3b:b5:60:be:60:83:e3:f6:d4:be:d8:d7:0a:96:74:
2a:f2:73:ed:df:b2:16:27:09:f3:3d:d6:93:22:fb:5f:18:7b:
e6:0c:07:a4:ae:a0:42:0e:5d:78:a5:1e:15:af:9d:2b:20:67:
7d:99:64:79:52:df:2f:d0:3f:e7:b1:4d:2b:7f:36:cd:54:60:
e8:8a:b3:35:ac:22:e5:66:bc:41:3e:a7:36:8c:58:fa:72:ec:
f4:43:db:1b:b6:c5:9b:e4:1c:dd:3d:5e:b7:8e:74:07:12:6d:
ad:d8:9b:8c:0d:30:93:23:c5:e9:30:a6:1c:d0:b3:f3:f0:d1:
47:ea:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:46 2024 by rpki-client on console-fra.rpki-client.org