Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File: aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier: tTHYNOhlFCyrLTGx93YGbpyTJaR+ccMrcKtQSnmIiVI=
Subject key identifier: 7F:70:13:42:60:79:D4:14:92:5E:A1:AD:D0:E1:1A:E0:D6:9C:E6:0C
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer: /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial: 01901CD86B7B35DE4B8FE9BAFDB583738E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number: 08DF
Signing time: Sat 15 Jun 2024 17:01:03 +0000
Manifest this update: Sat 15 Jun 2024 17:01:03 +0000
Manifest next update: Sun 16 Jun 2024 17:01:03 +0000
Files and hashes: 1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: dwFQLMOg6evU/JLqgJ0dnyyKDLC2JEmzb8xgIYX/qBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:d8:6b:7b:35:de:4b:8f:e9:ba:fd:b5:83:73:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Validity
Not Before: Jun 15 17:01:03 2024 GMT
Not After : Jun 16 17:01:03 2024 GMT
Subject: CN=7f7013426079d414925ea1add0e11ae0d69ce60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3d:ae:1e:8d:61:f4:74:9c:36:75:e0:ac:b1:
66:18:ce:ce:19:0a:54:4e:5b:89:0d:0e:a6:7d:ee:
1a:13:c5:e6:42:9d:a8:e4:3b:44:5e:5b:2b:3b:56:
e7:ff:fa:c1:a2:25:02:29:77:e4:64:95:1c:9d:69:
43:6f:0c:57:1c:4e:7b:6e:da:e8:84:b2:24:96:ac:
9f:9e:1f:c6:98:54:9c:dd:37:54:54:1b:83:ba:5a:
f2:d8:03:90:ab:7a:36:dd:0a:44:f3:ae:24:bd:38:
d8:76:35:2e:9c:d8:62:d4:c2:86:3f:bb:64:25:13:
0e:5b:c9:79:87:76:74:79:a9:bf:72:8e:6a:fd:70:
2a:80:c5:32:85:b5:67:0b:d2:8d:7d:18:14:2d:7e:
01:f0:86:9a:6f:7c:c1:fc:3a:1e:3c:08:16:54:42:
56:fa:a5:56:72:b7:31:20:59:a0:e2:09:0f:34:9c:
ff:c8:44:a1:a4:6c:b9:c0:e5:f6:7e:cd:6c:3c:f8:
f5:4e:4e:f1:9e:e1:cc:28:c4:35:0a:3d:3a:37:cb:
13:1b:33:04:0b:f3:aa:4d:dd:50:9a:00:a4:bc:93:
ba:55:31:7a:5d:aa:a2:fb:d7:7c:d7:86:ee:dd:c9:
73:c4:98:92:1c:00:a4:44:26:3b:15:9f:5e:24:9a:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:13:42:60:79:D4:14:92:5E:A1:AD:D0:E1:1A:E0:D6:9C:E6:0C
X509v3 Authority Key Identifier:
keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:60:2e:d3:7b:89:23:ab:0e:42:a5:e4:95:11:2e:33:e1:78:
a3:55:cb:bf:1c:e2:cb:66:ac:45:17:ed:f2:cc:77:e4:76:bf:
96:e3:ca:63:ef:21:2f:9a:b9:ef:8b:7c:9c:51:c5:6d:18:80:
e1:1e:9f:60:61:db:ef:4e:b7:9d:a8:86:d2:f3:8d:79:eb:83:
49:80:7a:d2:e7:b6:c0:ac:0a:72:ee:52:d2:0a:91:11:9c:19:
96:ae:1d:ed:0d:49:b9:3d:a8:03:c6:7f:a3:6b:0a:26:31:71:
57:a4:c7:9d:32:d3:ff:38:95:50:68:f1:ad:72:c9:ca:e2:33:
16:38:cc:0a:8b:24:d4:49:03:97:d6:2e:3a:1c:c7:61:6d:c8:
24:95:31:48:01:6b:9f:c2:cd:a7:26:7e:89:27:fa:1c:a4:c9:
f0:c2:81:91:65:e5:0a:f2:a3:cc:e4:f8:13:1a:5d:94:3a:ec:
fd:03:1c:78:ac:2b:e8:72:44:22:6b:ba:57:b7:20:ec:bd:f2:
1c:1f:94:9e:ea:1e:f7:11:41:05:47:c4:43:11:8d:3d:cf:39:
f3:5f:cb:10:eb:b0:b6:44:39:74:e8:2c:0c:ca:49:74:6f:95:
c0:92:4a:c0:6d:28:d7:45:40:e6:33:af:59:d0:77:a2:b5:5d:
19:98:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:37:56 2024 by rpki-client on console-fra.rpki-client.org