Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json)
Hash identifier: QLOMRktDlmP+6+PHnYPtsLSZLslMykEDjHZAr+IMfOI=
Subject key identifier: 74:AA:B6:4D:FE:10:0D:23:DD:87:8E:99:00:3D:44:33:F3:BC:4D:C9
Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Certificate serial: 01901D463714F9B4607FE8E5F4601B21A19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
Manifest number: 11C1
Signing time: Sat 15 Jun 2024 19:00:59 +0000
Manifest this update: Sat 15 Jun 2024 19:00:59 +0000
Manifest next update: Sun 16 Jun 2024 19:00:59 +0000
Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: +YU4/c/EmYKmmEvcNJjzlvXO4fp+S9zCHNCf36Ucbro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:37:14:f9:b4:60:7f:e8:e5:f4:60:1b:21:a1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16
Validity
Not Before: Jun 15 19:00:59 2024 GMT
Not After : Jun 16 19:00:59 2024 GMT
Subject: CN=74aab64dfe100d23dd878e99003d4433f3bc4dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:38:c5:11:0c:08:c0:60:18:48:cd:13:d6:bf:
15:06:7c:06:c4:db:3d:2b:7d:b8:42:90:b7:1f:58:
29:12:bd:72:ce:c7:cf:18:1a:1b:45:02:d5:3e:f2:
7b:c0:a8:fa:b8:b8:99:dc:eb:95:39:9a:93:ef:96:
f0:f4:0a:27:e7:e7:5e:d8:ff:b8:23:a9:69:61:0c:
c4:2c:62:3d:f9:66:83:93:70:6d:88:9f:09:10:ed:
4d:cd:ca:11:43:f4:fb:12:8d:a9:8f:a6:28:6c:b5:
43:3c:d0:53:53:c5:16:95:8c:48:8f:8e:b2:01:44:
23:3c:a6:13:39:e9:45:6a:5a:4f:91:09:0a:94:bd:
20:2f:91:e4:57:32:e9:69:58:07:23:ae:64:26:3b:
e5:2c:22:ef:53:3b:8d:a5:e7:18:94:71:1f:c7:d1:
7d:0e:a7:fc:df:1e:ce:49:8e:3b:f1:84:60:0c:e8:
41:9b:3f:36:30:6a:11:8e:d5:b6:cc:74:5f:4c:c9:
67:ff:9a:5b:c3:0d:c1:12:2d:6a:76:61:e6:55:9b:
38:b0:33:b4:80:50:9f:35:6d:f2:1f:d2:cc:0a:5b:
b5:f6:f1:ea:18:bc:99:be:e7:5a:3d:95:f6:88:f1:
40:cf:65:8a:6f:3a:0c:f4:cb:df:3e:30:fc:92:e2:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AA:B6:4D:FE:10:0D:23:DD:87:8E:99:00:3D:44:33:F3:BC:4D:C9
X509v3 Authority Key Identifier:
keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a5:25:06:0e:0c:20:57:86:50:56:0b:3b:87:8b:14:44:a0:
01:98:bc:85:56:67:8d:11:a1:8c:6a:4b:25:59:22:68:dd:b6:
e5:82:28:19:68:f2:08:9d:3e:83:76:8e:9e:28:d1:3a:9c:5e:
e8:4c:5c:ac:0f:51:5b:8c:a3:d6:15:78:07:28:e1:a8:e9:9a:
d2:29:fe:4c:fc:79:ae:ac:77:05:f8:3c:43:e0:7b:f8:ee:ef:
c5:89:7e:42:02:30:7a:e5:cc:9a:ad:fb:4f:ac:45:d6:26:af:
60:d9:79:05:82:4a:a2:81:09:9c:f2:66:e9:b5:d4:ad:26:30:
18:ad:98:12:68:55:fb:97:12:7c:1e:7a:5b:a1:4a:74:d2:b4:
36:b8:41:35:13:45:05:b7:e6:6a:81:aa:3c:48:a5:87:d4:c3:
2f:66:3a:e7:57:8f:fa:b4:23:9a:b6:9b:29:73:de:7a:e5:b1:
52:cd:50:6e:f7:4a:40:da:4b:c5:c4:4d:3d:8b:7d:4a:62:36:
f6:50:1b:11:12:44:cf:ed:d9:68:0f:ff:10:41:9f:7f:66:be:
f3:c7:2f:ec:0e:43:2f:d4:a3:a6:e8:36:cd:a2:27:0c:ff:74:
82:03:4e:30:cf:d7:f9:e8:dd:c8:a5:a0:c9:58:e3:02:f8:df:
95:3b:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:23 2024 by rpki-client on console-ams.rpki-client.org