Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
File: mtVmfEEoFBE5zKfFBH_BclC_Y68.mft (raw, json)
Hash identifier: BgWVr2wo1nTDv9oNzX69n1gV1l9V5xYT9LOOO63p2MA=
Subject key identifier: 63:99:14:F7:CD:C1:5E:B5:3A:D1:83:F2:81:F2:1C:80:91:93:5E:9B
Authority key identifier: 9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
Certificate issuer: /CN=9ad5667c4128141139cca7c5047fc17250bf63af
Certificate serial: 01901E59261C609B8B9224994364B54F1394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
Manifest number: 11C3
Signing time: Sun 16 Jun 2024 00:01:17 +0000
Manifest this update: Sun 16 Jun 2024 00:01:17 +0000
Manifest next update: Mon 17 Jun 2024 00:01:17 +0000
Files and hashes: 1: mtVmfEEoFBE5zKfFBH_BclC_Y68.crl (hash: w7VdNvbwHVJ2LQdeMPrqmENEBY5QsBqMEjRRfQoEitk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:59:26:1c:60:9b:8b:92:24:99:43:64:b5:4f:13:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ad5667c4128141139cca7c5047fc17250bf63af
Validity
Not Before: Jun 16 00:01:17 2024 GMT
Not After : Jun 17 00:01:17 2024 GMT
Subject: CN=639914f7cdc15eb53ad183f281f21c8091935e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:20:4d:09:b2:1a:f9:82:dd:48:bb:16:4c:
79:82:0b:ec:75:23:5f:bc:0c:a6:e5:a1:21:77:5f:
42:91:ec:b8:5b:90:96:9e:aa:d8:28:55:0a:94:be:
94:fc:c3:f5:e8:60:e5:38:49:ad:34:4d:b0:35:cd:
70:5b:17:f0:19:a7:a0:bd:d6:be:0f:1e:70:01:2e:
9a:67:58:6d:ba:8e:88:87:52:63:db:8d:3f:74:05:
98:a6:a2:ad:cf:ff:d9:92:56:95:37:31:b3:df:23:
ef:35:b7:5b:9c:32:69:f6:ed:9a:95:09:3f:e2:1d:
22:50:6c:5d:e9:7e:e1:90:67:d9:e9:47:7c:76:2b:
86:f4:1f:e4:97:6b:93:cf:94:5d:b2:52:b3:38:e6:
03:ab:aa:f0:56:cd:51:7b:d8:ee:80:d1:c6:cf:11:
41:16:52:14:92:e5:e4:76:5a:7b:72:81:cf:1a:e7:
30:ff:13:16:d2:24:ff:96:eb:2c:a5:18:0b:e3:fe:
30:81:f1:bb:64:b4:b7:36:f2:ac:d5:ea:dc:cb:a8:
05:92:63:e6:5e:2b:a0:40:87:3a:85:4d:91:9c:cc:
bc:93:aa:7d:17:7a:1f:c3:be:f5:09:d9:d0:5e:4b:
71:21:7d:14:ab:ad:c9:23:be:98:9a:58:dd:6a:e9:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:99:14:F7:CD:C1:5E:B5:3A:D1:83:F2:81:F2:1C:80:91:93:5E:9B
X509v3 Authority Key Identifier:
keyid:9A:D5:66:7C:41:28:14:11:39:CC:A7:C5:04:7F:C1:72:50:BF:63:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mtVmfEEoFBE5zKfFBH_BclC_Y68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/579f0f-070e-443d-8ecd-6872355838a2/1/mtVmfEEoFBE5zKfFBH_BclC_Y68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:30:fd:d9:3f:82:e7:71:b8:b5:e9:e5:53:d4:34:1c:b8:94:
af:a1:6f:8f:df:41:b3:c3:39:6f:11:c9:b4:e0:ac:60:e8:63:
50:c1:e9:77:72:18:7b:2b:ea:97:61:1b:60:5b:ef:85:5a:fe:
12:af:ad:07:d4:22:ba:19:d8:40:e2:40:20:b8:55:c6:9e:aa:
d0:df:71:41:3d:b6:5f:be:aa:3f:12:6d:fd:06:f4:ac:5b:6f:
c3:6a:ae:01:e9:ce:4f:7c:c8:3c:dc:8b:69:3c:c2:e1:6c:de:
10:2b:e2:78:76:c7:b3:dd:aa:36:52:a0:3f:57:7e:1a:06:2a:
2f:da:5a:b1:6e:15:18:29:80:3d:b3:6f:8e:f1:3c:65:78:1b:
a6:3a:8a:c4:f6:a3:4d:d1:82:12:33:3f:92:48:df:df:a4:14:
1c:87:3f:79:57:27:9a:43:35:33:6e:bf:2f:9a:61:f0:6e:fa:
67:70:d0:d8:44:32:36:df:94:52:85:b3:4c:76:7f:9b:f3:3e:
6d:b4:03:d2:5a:66:c5:2c:8a:ee:8d:ce:a6:48:73:f1:2d:59:
3d:d7:5e:93:2b:56:d0:1e:44:24:7b:e9:35:3c:c7:ef:11:1d:
58:da:c3:44:8b:bd:78:79:e5:c6:96:ce:75:42:fa:5e:f1:7a:
58:4e:aa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:47:29 2024 by rpki-client on console-fra.rpki-client.org