Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json)
Hash identifier: PXusd549PlVI+JSHAdj0MvtBn21GQS2XU9D9b5MJetw=
Subject key identifier: 9B:8D:C0:01:55:2C:29:F1:D8:E5:44:F3:DB:F2:73:A2:A1:D9:E8:68
Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f
Certificate serial: 0190490C4EB2CC2E2772152E6224E5E5F294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
Manifest number: 01D6
Signing time: Mon 24 Jun 2024 07:01:01 +0000
Manifest this update: Mon 24 Jun 2024 07:01:01 +0000
Manifest next update: Tue 25 Jun 2024 07:01:01 +0000
Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: ezFjo9pveok2VS3kPAfUoZ18CBgzkQFFRuEFGIorPIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:0c:4e:b2:cc:2e:27:72:15:2e:62:24:e5:e5:f2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f
Validity
Not Before: Jun 24 07:01:01 2024 GMT
Not After : Jun 25 07:01:01 2024 GMT
Subject: CN=9b8dc001552c29f1d8e544f3dbf273a2a1d9e868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:09:e4:5c:4a:5e:ef:6a:ab:5e:42:6e:4c:
b9:be:96:22:b2:6b:51:e0:25:ff:e9:d3:9d:a5:26:
87:5f:7a:3e:88:c0:3f:8b:21:b6:2f:22:cd:46:ff:
4d:45:6e:36:24:32:24:b0:f3:8e:14:a9:ba:77:ee:
05:92:bb:20:38:a1:b6:77:38:48:c3:a6:9c:c0:b8:
8d:3b:46:32:4e:ba:fd:67:23:22:5a:26:d9:cb:2e:
d2:86:19:67:7c:ad:bb:7b:f7:6a:bd:66:96:f9:63:
d8:0c:3b:d0:e1:ad:7b:31:18:77:93:e3:91:1b:b2:
9f:40:4d:92:bb:30:8f:0a:c9:36:3a:36:40:08:83:
c1:97:a7:3f:3d:01:ed:04:f1:d0:2c:4a:2b:33:86:
33:e4:a5:f7:57:ca:24:8e:c5:04:8d:62:46:7c:91:
d8:e0:a2:92:cd:1b:51:93:33:7e:de:23:8e:94:94:
f2:ac:94:ca:13:96:79:9a:28:d9:de:d3:76:a3:84:
4f:38:e8:98:25:3e:ba:0c:10:42:34:c8:3d:bc:a9:
1a:e2:f7:00:65:09:b8:3a:49:f9:77:59:a5:dd:3e:
33:a8:fe:f8:0f:ce:c1:3c:55:29:e8:f7:bc:6a:f4:
96:da:98:74:d4:cb:e5:fc:14:29:0d:dd:af:55:78:
2c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8D:C0:01:55:2C:29:F1:D8:E5:44:F3:DB:F2:73:A2:A1:D9:E8:68
X509v3 Authority Key Identifier:
keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c5:03:0e:18:50:f3:b0:5a:8a:15:21:a1:71:12:ab:5e:1d:
69:bd:48:03:20:12:98:e3:be:ef:c3:ce:36:c0:d7:c3:eb:69:
85:d6:5e:2f:43:85:32:c8:f1:4f:30:08:82:db:b5:73:73:6c:
d9:c2:84:97:40:a4:bc:28:f2:f5:51:af:dc:cf:2b:b9:c7:e8:
5f:a2:ad:9b:fd:9c:5d:6e:7f:8e:7f:e8:a7:ec:4c:92:be:dc:
6e:50:9f:91:39:54:8e:46:42:b5:fc:16:f9:23:84:2d:e1:d4:
c6:72:64:cd:3a:2f:17:99:34:e4:89:50:e9:8b:48:05:df:1f:
59:c1:3f:0f:9b:88:0c:b9:f0:ce:99:68:22:4e:48:16:7e:93:
41:0c:a8:d5:c7:2d:d3:eb:39:50:04:90:9f:5d:09:05:90:3f:
aa:ec:7a:60:71:bc:7b:37:95:b4:e8:5e:91:ec:01:1d:04:32:
a0:f9:3d:ee:5b:45:b3:df:13:21:ec:67:e5:33:23:57:d1:de:
c3:05:f7:d3:a4:bf:5d:22:93:54:cd:60:c3:2a:3e:30:f7:83:
f0:e3:cc:38:07:b6:d2:55:1a:66:48:e6:b3:6c:a7:c4:4d:41:
a4:1a:cc:e4:c3:d2:47:25:44:ec:36:7b:9e:4d:55:80:fe:d6:
2a:89:a5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:42:04 2024 by rpki-client on console-fra.rpki-client.org