Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
File: s9nxe5jDqWQThWY7jNW3X-HwpJg.mft (raw, json)
Hash identifier: 14HO57JR+CPJnmj92vAvd1oNukjVaiZDtqSSg461IEw=
Subject key identifier: CD:88:CA:41:ED:6A:B5:1E:02:9D:04:CE:5B:97:FF:58:B1:65:07:63
Authority key identifier: B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
Certificate issuer: /CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Certificate serial: 019038F57EBD2CB3A6B93EC823B0C0B70FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
Manifest number: 11CF
Signing time: Fri 21 Jun 2024 04:02:11 +0000
Manifest this update: Fri 21 Jun 2024 04:02:11 +0000
Manifest next update: Sat 22 Jun 2024 04:02:11 +0000
Files and hashes: 1: s9nxe5jDqWQThWY7jNW3X-HwpJg.crl (hash: fdWURkyNRYb5BIhF0Jz/FUzKySX7t21/3HMZVBQgl98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:38:f5:7e:bd:2c:b3:a6:b9:3e:c8:23:b0:c0:b7:0f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498
Validity
Not Before: Jun 21 04:02:11 2024 GMT
Not After : Jun 22 04:02:11 2024 GMT
Subject: CN=cd88ca41ed6ab51e029d04ce5b97ff58b1650763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:2d:60:08:36:43:5a:59:32:b5:6f:a9:ee:
1f:3d:84:0c:3f:06:73:2f:cc:78:d2:26:8b:e4:f2:
60:2c:ca:68:0e:f5:1e:4b:a3:a9:ec:5d:06:82:50:
d6:b0:5f:7c:4d:ed:30:96:52:84:ae:df:14:e9:39:
cd:7e:6d:66:f8:72:24:e8:14:b2:65:a2:92:ad:e3:
c2:f3:66:26:4f:3b:d1:e7:29:43:96:57:0f:23:7e:
88:56:99:55:08:c6:3a:a6:a9:1b:9b:6e:46:8e:0f:
70:c0:4e:b8:41:ec:ac:fc:9d:34:96:27:d8:d1:28:
8a:aa:01:08:09:4c:8a:70:ab:d9:78:4a:1a:e4:de:
24:c3:35:a4:cc:d9:62:b9:9d:c6:7d:ac:80:46:d3:
28:ae:a6:b8:4e:8a:e2:10:c1:24:e0:06:3e:32:98:
8a:a7:aa:f6:15:d3:12:67:dc:42:0f:c9:38:af:02:
15:55:f7:b8:f6:31:2c:05:ab:ea:4b:65:4e:a5:a7:
a1:77:08:d8:4c:35:bf:24:de:23:b3:36:42:61:49:
84:ff:cc:43:b9:63:c3:d3:98:f8:a3:87:0e:f5:14:
3e:0c:37:f0:12:6d:a4:76:e8:c8:44:e1:aa:87:44:
72:c2:a9:dd:18:72:ce:a6:4f:1d:c2:0c:be:8c:8f:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:CA:41:ED:6A:B5:1E:02:9D:04:CE:5B:97:FF:58:B1:65:07:63
X509v3 Authority Key Identifier:
keyid:B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3f:fa:2d:40:5f:8b:8d:2c:da:bb:17:04:6d:cd:78:2b:03:
a4:fa:76:0d:43:69:3a:57:fd:53:ab:bc:ad:30:51:a6:99:2f:
d1:dc:36:b9:d9:ac:be:96:f3:50:cd:67:2d:d8:7c:86:cf:e9:
70:46:51:9e:a4:c4:51:96:35:7d:27:e3:eb:d0:e1:d0:21:51:
d3:16:99:74:31:0d:84:d4:bc:85:66:6a:d4:49:5d:08:df:52:
09:7f:59:a2:f1:db:b2:78:96:23:47:55:8d:10:4d:12:aa:c7:
14:aa:79:f3:d3:7f:df:b3:fb:d0:7c:df:dd:63:67:ab:a0:c9:
31:bb:5f:80:45:9f:5b:86:8b:9f:f2:cb:e8:dd:63:2a:23:b0:
f0:5a:dd:89:b3:b3:75:36:2d:5e:d1:46:02:58:18:5c:63:de:
75:90:19:32:56:42:6a:63:a4:45:2f:bb:8a:9a:01:a5:de:88:
c5:3f:71:15:f0:b6:d2:8d:5a:84:d0:0b:2c:f7:47:67:2e:2a:
ab:af:90:99:5c:17:6a:d5:59:59:50:82:06:87:2a:50:ca:9a:
47:2a:f6:84:d7:60:5a:84:5e:0d:50:34:b7:b0:48:91:0a:4d:
61:57:04:ed:20:ef:8d:04:0f:04:9c:9c:d8:df:db:d8:89:05:
9f:9d:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:25:33 2024 by rpki-client on console-fra.rpki-client.org