Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json)
Hash identifier: 6jOWIrg1muAbA+7kxoMcym6cU3iRGNiPS+vdmSByvgQ=
Subject key identifier: 4B:60:A5:AC:08:B0:7E:B4:9E:3A:63:3D:19:F6:68:57:46:E9:36:73
Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Certificate serial: 0193568ABF2D23B8696FA5509A7F819208B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
Manifest number: 0A64
Signing time: Sat 23 Nov 2024 01:02:33 +0000
Manifest this update: Sat 23 Nov 2024 01:02:33 +0000
Manifest next update: Sun 24 Nov 2024 01:02:33 +0000
Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: MnGoWgNEORt6T2PTz3gjUPN+Cs49AdP0z28Csy3fUxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:bf:2d:23:b8:69:6f:a5:50:9a:7f:81:92:08:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06
Validity
Not Before: Nov 23 01:02:33 2024 GMT
Not After : Nov 24 01:02:33 2024 GMT
Subject: CN=4b60a5ac08b07eb49e3a633d19f6685746e93673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c2:db:3f:c3:f0:c7:02:db:76:e5:f3:cc:06:
c0:d8:4a:33:d3:74:88:d4:d6:88:54:14:32:99:6f:
eb:aa:f6:66:06:da:4c:2d:b8:50:4d:f9:c7:12:70:
84:d0:0c:eb:56:bb:4d:3a:65:5c:9a:ff:cc:e2:98:
67:dc:33:79:d2:20:57:ac:85:08:42:4e:59:aa:3c:
a4:58:1d:27:69:19:cd:94:8d:c2:30:48:8b:06:5b:
6f:a4:e8:a5:14:eb:a8:9d:04:5d:50:3c:e0:f8:c4:
96:3f:9b:64:69:05:a2:8d:ea:19:b2:97:7f:20:18:
df:8a:98:41:3f:7e:2b:50:fb:7f:9b:bc:02:ff:60:
a9:73:2b:df:0c:90:25:40:37:7c:5e:8e:07:4f:55:
9d:43:91:5c:9d:b0:48:7e:06:74:8f:51:cb:da:0e:
08:35:57:35:74:5e:75:aa:42:50:ef:15:c4:69:c3:
9f:87:af:f7:50:08:cf:f8:0e:54:f4:2e:2f:80:4a:
a5:ae:48:0e:02:01:66:d5:43:92:ae:da:90:06:4d:
b4:70:fa:8e:e2:22:66:c7:df:53:ae:92:a2:64:5e:
8d:fe:c9:70:73:af:f6:d6:32:0f:a4:de:05:f0:1d:
dd:87:5b:57:f7:04:80:5e:4d:b1:a9:66:54:4f:2f:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:60:A5:AC:08:B0:7E:B4:9E:3A:63:3D:19:F6:68:57:46:E9:36:73
X509v3 Authority Key Identifier:
keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:72:2f:27:94:66:09:ce:9e:65:c2:06:57:da:8d:a7:38:c6:
ef:22:e0:f4:6a:c5:42:21:b4:5e:f0:32:90:d1:12:a4:98:01:
1e:94:28:1b:f0:df:78:50:1b:2b:fe:56:12:64:b6:d6:98:55:
4d:b0:a2:ce:f7:20:6b:aa:c7:c9:f5:e7:cf:7a:6c:29:95:66:
66:3a:b5:ff:6e:66:72:95:b9:96:57:09:74:6e:f0:d1:48:94:
9d:3f:8b:c8:3d:fb:7a:f4:ce:9b:71:9c:2a:db:63:13:03:e9:
ec:40:d1:f1:1e:6b:c1:7a:ac:50:1e:c4:00:d8:84:9e:e4:55:
a0:91:96:2d:bf:f7:3a:7e:61:be:df:2a:33:d2:22:30:a7:e8:
23:f4:36:24:db:f9:c0:30:3e:43:33:3b:39:c8:fc:2e:d9:62:
c4:21:fb:45:1f:03:2b:f2:06:87:92:05:f5:93:84:44:69:86:
a6:2a:66:ae:3a:3a:03:85:53:38:b0:eb:e7:f0:fa:b5:15:62:
19:f8:5a:88:9b:e4:3f:9c:09:d1:6f:8f:96:83:a6:0d:e2:d8:
04:51:af:f3:1a:c1:5d:89:45:e5:35:09:6e:b3:81:35:0f:55:
4a:12:3f:df:54:1d:da:26:c6:0f:03:56:e1:cf:fc:24:fc:39:
3e:1c:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:52 2024 by rpki-client on console-fra.rpki-client.org