Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
File: pLTIq4O22Sp069zeiLwhlXxX8eg.mft (raw, json)
Hash identifier: aslAdBJNdcW7EoSRglMbdhzfEt+mEcIHXDoAANljTRE=
Subject key identifier: E0:0B:3D:68:0A:EA:BC:BD:59:B8:4D:65:C4:EB:CA:2E:AD:D4:04:F3
Authority key identifier: A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
Certificate issuer: /CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Certificate serial: 0190448B17EF875F4311209711AA86D9EFED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
Manifest number: 11D5
Signing time: Sun 23 Jun 2024 10:01:24 +0000
Manifest this update: Sun 23 Jun 2024 10:01:24 +0000
Manifest next update: Mon 24 Jun 2024 10:01:24 +0000
Files and hashes: 1: pLTIq4O22Sp069zeiLwhlXxX8eg.crl (hash: rCnu6LUZyhNNaXLD9F4zKJKm+goK1rU3B3GOW9lhobA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8b:17:ef:87:5f:43:11:20:97:11:aa:86:d9:ef:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b4c8ab83b6d92a74ebdcde88bc21957c57f1e8
Validity
Not Before: Jun 23 10:01:24 2024 GMT
Not After : Jun 24 10:01:24 2024 GMT
Subject: CN=e00b3d680aeabcbd59b84d65c4ebca2eadd404f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:81:11:ca:03:b2:4a:19:ae:4b:50:c9:63:
be:0b:65:eb:d7:a9:62:bc:65:90:b8:f0:44:f6:76:
45:1b:80:da:97:5f:f8:1a:60:78:c5:3d:ba:9f:8f:
1b:2e:63:ce:69:5e:8f:85:25:b4:ea:1c:1e:56:7c:
2e:6a:2f:3f:b5:2f:ef:fa:08:27:be:51:88:9d:7e:
3a:37:66:6b:36:db:19:54:9b:87:8e:64:b8:0d:f8:
08:7d:36:c3:fd:ff:8a:11:55:33:b1:ea:67:be:d3:
00:d0:b5:ce:c3:5c:22:44:6c:d8:d6:79:4c:e2:a6:
8d:fb:06:d2:88:9f:75:a5:d5:95:6a:ec:05:67:1a:
9f:6e:f4:37:e9:b1:f5:83:22:98:6a:82:b2:ab:41:
ee:13:04:4e:65:56:3a:12:67:d8:54:2d:37:c0:31:
72:07:d1:f2:a9:20:bc:3b:b3:07:dc:8e:6d:c9:6a:
4e:dd:a0:4d:c7:e6:ec:7d:74:f4:d0:5d:47:bd:7e:
be:d5:64:21:0b:27:d2:8b:09:5c:e6:52:81:b4:60:
6f:d0:8e:72:f4:81:ac:b1:32:c9:38:26:85:70:48:
ab:d4:1c:37:62:39:d1:ca:90:1e:ac:36:8e:04:97:
ff:84:7c:4b:cd:87:f8:e5:03:2b:4e:3b:c3:c9:1a:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0B:3D:68:0A:EA:BC:BD:59:B8:4D:65:C4:EB:CA:2E:AD:D4:04:F3
X509v3 Authority Key Identifier:
keyid:A4:B4:C8:AB:83:B6:D9:2A:74:EB:DC:DE:88:BC:21:95:7C:57:F1:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLTIq4O22Sp069zeiLwhlXxX8eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a5f9f6-3607-45d3-994b-541e450314bc/1/pLTIq4O22Sp069zeiLwhlXxX8eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e7:00:e7:de:44:52:5b:e5:01:f8:64:15:c5:17:3d:84:77:
10:54:fd:2e:af:d7:e8:64:2a:39:30:e5:24:e2:85:c2:7e:63:
40:2d:ae:af:e6:49:42:0a:56:90:06:d4:ea:07:f0:3a:24:90:
93:91:76:f4:bf:f7:1d:1d:24:42:d1:1b:20:c9:70:ad:80:cc:
31:c9:a6:bd:c2:fe:7e:dc:3f:b3:ec:16:de:3b:71:57:81:03:
18:d5:30:b7:ee:9f:7e:54:09:16:18:59:1e:56:f0:de:5d:72:
73:3d:c1:50:f7:5d:3c:62:f2:30:bb:79:e6:af:cc:8c:b2:45:
21:0f:c4:1a:cb:b0:17:16:d1:f2:35:60:83:09:1a:7d:5d:27:
b9:21:83:a8:ad:37:6b:6a:57:ff:88:6f:a7:b6:6e:6a:48:ad:
82:68:05:79:cf:cd:24:98:21:f2:ca:50:2d:4a:3f:82:e8:9b:
38:f1:64:c0:bf:f3:5a:fa:e9:8c:8b:f3:d7:3d:94:cc:70:ee:
4a:1a:fc:a8:e1:a7:fb:e3:c2:5f:b0:44:25:c1:1e:d2:b5:d5:
d9:0b:8f:73:88:3a:b9:49:57:eb:6d:86:4f:0c:82:31:44:9f:
71:92:bf:f6:e6:7c:68:f8:bc:2b:e7:6d:fe:11:db:a1:5e:a4:
69:3c:9b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:01:33 2024 by rpki-client on console-fra.rpki-client.org