Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
File: 8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft (raw, json)
Hash identifier: I0rTGHmq0tRyKP4Wk97NgPG9BUP5G6fe923XywynWGI=
Subject key identifier: 9F:92:EB:03:41:7A:F1:CC:B8:ED:33:93:AF:E4:F2:EE:A6:1F:F4:69
Authority key identifier: F3:0C:57:E1:B7:D7:D6:8B:49:51:D8:C4:7E:CF:57:9A:3F:0E:F1:B7
Certificate issuer: /CN=f30c57e1b7d7d68b4951d8c47ecf579a3f0ef1b7
Certificate serial: 0192384A69034219F7A756BADBC71116B2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
Manifest number: 53
Signing time: Sat 28 Sep 2024 11:00:53 +0000
Manifest this update: Sat 28 Sep 2024 11:00:53 +0000
Manifest next update: Sun 29 Sep 2024 11:00:53 +0000
Files and hashes: 1: 8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl (hash: q9Oi+fslWQm4SpbCRhpdd4Ls5VK29tLUI1vS8z6p8Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:4a:69:03:42:19:f7:a7:56:ba:db:c7:11:16:b2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30c57e1b7d7d68b4951d8c47ecf579a3f0ef1b7
Validity
Not Before: Sep 28 11:00:53 2024 GMT
Not After : Sep 29 11:00:53 2024 GMT
Subject: CN=9f92eb03417af1ccb8ed3393afe4f2eea61ff469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:0a:8a:d9:92:cb:e5:8a:27:be:5a:3c:69:
b0:e5:74:fe:03:af:d3:49:ce:04:87:89:a1:1c:a8:
96:b4:f6:01:27:6f:b0:9a:62:ed:98:04:b7:1e:a0:
54:de:fc:fe:67:ac:96:8f:c6:ed:28:c6:6a:95:d5:
c2:ab:0d:2e:2d:77:61:60:9a:25:66:9a:2d:4d:05:
67:75:74:88:ef:46:99:95:dc:b3:87:0a:c0:26:63:
50:83:c5:73:3f:63:10:40:61:fb:ae:bf:0f:2d:5f:
d4:b3:f6:20:d2:17:6c:bb:7f:86:fe:d1:d3:3e:db:
ff:df:17:64:0b:23:40:a8:6e:97:49:0c:74:c0:18:
8b:37:79:6a:98:a0:18:95:77:83:71:37:ea:ed:5b:
3d:72:a7:e9:16:b4:5e:60:bc:92:f5:d6:9e:53:4f:
3d:df:c2:99:80:d5:c3:0a:61:56:5e:cc:71:c5:5f:
3c:fb:cb:92:3e:89:3e:c7:4e:f5:b1:a4:a8:a8:f6:
d9:c5:35:71:40:ea:5e:b7:f6:4c:90:0c:b0:47:bc:
64:f2:78:e0:64:fe:cf:89:66:d5:27:45:b3:e1:54:
af:58:b4:4e:db:45:27:e9:32:78:b4:fd:55:6c:4f:
ff:54:58:9c:92:5c:5a:e4:9a:69:3c:5e:cd:7e:54:
d9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:92:EB:03:41:7A:F1:CC:B8:ED:33:93:AF:E4:F2:EE:A6:1F:F4:69
X509v3 Authority Key Identifier:
keyid:F3:0C:57:E1:B7:D7:D6:8B:49:51:D8:C4:7E:CF:57:9A:3F:0E:F1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wxX4bfX1otJUdjEfs9Xmj8O8bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/933ad8-c0bb-4be1-84a7-1a1dc0890678/1/8wxX4bfX1otJUdjEfs9Xmj8O8bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:29:c9:12:03:f9:0d:77:17:b3:d3:8d:8a:82:ce:4f:f4:ac:
2d:2a:04:a8:cf:b9:70:c6:42:dc:3b:4e:b8:48:57:70:35:a5:
0f:63:4d:6b:13:35:bc:5c:db:7a:c2:c8:57:09:6b:88:f3:d0:
99:1d:5d:1f:af:bc:37:b6:21:64:e7:6e:30:07:a5:c9:9d:ca:
aa:8d:49:3e:2a:b7:40:31:9f:dd:41:0d:08:3a:68:c9:41:fa:
32:06:10:3f:b1:82:4b:29:a2:e1:f9:87:bf:da:7d:7e:9a:f2:
df:d4:b3:d7:19:5d:ef:c8:1e:27:1a:28:cb:91:c6:f4:ba:ae:
8f:82:d5:60:64:d0:cd:bf:2f:46:2d:f5:1c:64:63:c3:92:f4:
1d:07:05:03:d9:3c:f5:1c:3b:ca:54:74:10:d0:e7:2b:e7:6e:
41:03:89:d1:df:6b:bc:35:b8:77:0d:14:ac:21:7a:a7:5f:5c:
49:56:ca:8c:f5:da:78:b4:4f:83:2f:2c:55:0d:72:11:e1:5f:
33:c1:e2:a6:da:9e:b7:e9:bf:a8:cf:79:98:d2:01:c2:81:b2:
6d:dc:39:a8:35:d3:ce:a2:c0:7b:dc:e7:26:f7:de:25:9b:c7:
41:f3:46:c8:bc:15:22:d6:42:dc:b7:fc:8e:d1:93:90:66:4a:
16:b5:d3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:11:24 2024 by rpki-client on console-ams.rpki-client.org