Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier: Fr3AzegmeMGi0HExC3tSIx6ZR4c7e8bkOqIbTQRGz60=
Subject key identifier: 6B:10:9C:85:76:D1:92:86:A3:4C:79:D0:7F:E7:82:70:5D:52:A9:00
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial: 019045D47DA9CB7CAE35BAA0FE3621D8BC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number: 02CF
Signing time: Sun 23 Jun 2024 16:01:11 +0000
Manifest this update: Sun 23 Jun 2024 16:01:11 +0000
Manifest next update: Mon 24 Jun 2024 16:01:11 +0000
Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: QHP+ALA8cn+Vtjs13SP8fycMLS13/UvfwunhgseXEk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:d4:7d:a9:cb:7c:ae:35:ba:a0:fe:36:21:d8:bc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Validity
Not Before: Jun 23 16:01:11 2024 GMT
Not After : Jun 24 16:01:11 2024 GMT
Subject: CN=6b109c8576d19286a34c79d07fe782705d52a900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:0b:fa:78:3f:5f:f6:57:64:5e:59:49:ef:
40:1a:51:81:71:2d:9b:83:32:54:a8:92:7d:6c:49:
74:19:a9:79:3d:1a:b9:3d:90:61:e9:29:00:3b:02:
ff:7a:38:85:00:8c:00:dd:a7:2a:cf:ca:6c:9e:6d:
2d:66:99:60:07:76:02:f4:7d:f0:26:23:5e:4d:19:
28:db:12:96:a7:1f:b7:49:1d:b6:df:4f:ae:10:d5:
8c:96:59:86:ce:fe:b5:f2:0c:55:5d:32:f6:ed:a7:
62:da:da:7b:de:cb:d0:4d:a8:02:2c:aa:ac:12:9c:
9a:f1:2f:c3:ce:cf:a1:a3:96:c7:90:e2:26:a0:02:
c5:cb:c1:8e:cb:7b:18:f8:e1:7c:0a:9f:35:97:71:
21:c5:01:c7:7f:4c:91:93:d7:79:c1:e9:35:f4:c7:
09:c5:74:9d:fd:42:ca:1a:e0:7d:11:7f:50:6e:fb:
a9:11:bf:82:93:42:b5:be:a3:83:9f:f9:63:80:5a:
a1:63:47:d7:03:ae:0c:ef:33:3f:43:60:6f:47:f1:
13:cd:d6:02:55:5a:2b:d3:84:72:c6:d4:b7:3c:68:
46:76:eb:91:94:1d:0c:f5:07:79:5b:85:42:5c:9e:
3a:c5:91:58:79:53:5f:d1:33:3b:56:bc:d9:c3:5f:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:10:9C:85:76:D1:92:86:A3:4C:79:D0:7F:E7:82:70:5D:52:A9:00
X509v3 Authority Key Identifier:
keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:bf:55:f6:30:56:59:b2:b4:1f:e0:7a:de:75:80:ec:a8:be:
00:7d:8a:ec:82:6b:a7:9d:8a:3f:b4:d0:42:ac:9e:82:19:7b:
35:83:0e:ff:32:11:67:a6:9d:c3:66:1a:71:cc:4b:45:9d:8a:
72:83:94:03:27:c5:99:2e:0f:31:aa:85:83:ef:e3:de:9d:dc:
14:79:eb:01:94:c3:3d:72:7e:e2:4c:4b:f9:16:cd:3f:d5:2a:
ee:40:bb:2e:85:3a:81:23:8c:08:59:e3:09:6c:67:61:7c:73:
0c:1d:e6:3f:2c:90:a6:bf:bc:e4:d0:62:df:f9:83:6d:b3:a5:
63:47:46:eb:9c:37:e6:fb:61:52:97:85:f1:5b:44:3e:0a:b2:
dc:e6:6b:ce:78:76:47:ba:a4:5e:14:19:4d:18:1d:66:84:f0:
56:eb:d5:1c:f7:34:9a:3e:34:61:2e:c1:65:fd:95:22:e6:14:
7c:05:9f:6b:19:fe:51:f8:f4:51:c6:40:2a:22:31:ec:51:61:
c7:63:ae:d6:45:46:2d:cb:f2:d1:76:2b:e0:82:4f:f5:94:3d:
df:08:19:e0:d7:cc:28:a0:a3:48:7b:c5:35:5d:c6:e7:69:2e:
eb:e4:85:fd:e7:9f:4e:2a:4e:ff:29:11:87:2c:21:da:41:44:
fb:5a:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:03 2024 by rpki-client on console-fra.rpki-client.org