Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
File: sxwNSGRgtxY3A-X_TYre2XiIx00.mft (raw, json)
Hash identifier: MOU+c3EtArS6QTN1WIZ6DSGA15f1bpy/cbTIHUGnXjU=
Subject key identifier: 2F:35:C7:22:16:AC:8C:EE:73:24:99:EB:64:6A:A2:E1:7C:56:74:11
Authority key identifier: B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
Certificate issuer: /CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Certificate serial: 019045D49C6178681AE1F9D5A217BBB377C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
Manifest number: 038F
Signing time: Sun 23 Jun 2024 16:01:19 +0000
Manifest this update: Sun 23 Jun 2024 16:01:19 +0000
Manifest next update: Mon 24 Jun 2024 16:01:19 +0000
Files and hashes: 1: sxwNSGRgtxY3A-X_TYre2XiIx00.crl (hash: MLLbjppTQ1sxcpC4v5Yl/lAS46mbr2kxRNfRUnC8IHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:d4:9c:61:78:68:1a:e1:f9:d5:a2:17:bb:b3:77:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c0d486460b7163703e5ff4d8aded97888c74d
Validity
Not Before: Jun 23 16:01:19 2024 GMT
Not After : Jun 24 16:01:19 2024 GMT
Subject: CN=2f35c72216ac8cee732499eb646aa2e17c567411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:7a:07:d7:cd:c3:bb:67:2b:ea:8f:b7:da:
24:ca:46:37:5f:1e:4e:52:75:56:bd:cd:62:3f:f8:
59:b1:56:1b:54:60:7a:cd:66:b3:a7:43:d7:fa:83:
46:fd:90:6d:e4:38:b1:89:66:d1:b2:d4:57:f4:70:
ac:06:8f:5e:a5:94:c7:ef:8e:61:d0:52:e0:01:d9:
81:46:ce:7a:ef:ed:bd:10:ff:a9:0b:d2:8f:18:45:
ff:2b:da:16:f3:a3:db:f1:82:ad:56:0f:b4:b5:44:
de:70:07:c9:e4:5b:46:d0:39:6c:28:e7:d5:bc:38:
d3:f1:d5:2f:f0:cc:bb:20:58:f7:b0:4b:78:09:77:
7b:4b:29:ed:78:ec:75:0b:c0:2b:c2:53:2a:55:fd:
80:1e:df:12:6f:94:73:a4:ec:c2:8c:09:0e:03:3f:
a3:1c:09:9a:39:3a:54:4e:a6:89:13:ae:98:65:90:
6d:01:b3:b9:86:0f:05:32:de:03:3b:83:79:39:f6:
51:f5:23:d6:3c:de:c3:bd:2e:a9:42:fc:6c:4d:68:
d8:b2:ea:19:fd:17:44:85:8b:ee:d3:a5:46:0d:df:
f5:9f:dc:15:83:66:66:f0:4f:a7:44:97:39:51:ec:
4b:f8:8a:47:c1:35:b6:a0:a4:49:79:ff:72:24:89:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:35:C7:22:16:AC:8C:EE:73:24:99:EB:64:6A:A2:E1:7C:56:74:11
X509v3 Authority Key Identifier:
keyid:B3:1C:0D:48:64:60:B7:16:37:03:E5:FF:4D:8A:DE:D9:78:88:C7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxwNSGRgtxY3A-X_TYre2XiIx00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29441c-281c-4e02-9a91-8243b7db105e/1/sxwNSGRgtxY3A-X_TYre2XiIx00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4a:69:1f:71:8c:50:f2:a8:85:2b:6a:1b:21:cb:8f:db:c6:
25:7b:13:74:89:f5:6e:e1:fd:28:43:8d:85:22:8c:15:c5:47:
6e:d5:08:fe:99:bc:85:af:d0:67:e8:f5:ee:c2:40:6b:50:52:
69:19:4b:38:10:47:1a:92:5c:d6:5d:53:b3:f6:53:24:ec:3b:
d1:22:a9:27:e4:33:d0:33:aa:07:1f:18:18:bf:7c:fb:c0:57:
1a:84:f8:ca:93:ba:06:69:cb:2a:43:ea:5a:e4:ec:e1:50:2b:
ee:47:86:e1:de:f7:b4:1c:bd:3b:40:7b:4e:4e:b3:1c:4e:eb:
77:d3:bd:86:ef:c2:46:e7:64:b8:8d:ff:e1:7f:c4:cf:0f:f1:
5d:4b:5c:e2:c8:97:64:64:da:97:f8:6e:30:c1:15:8f:7f:f4:
3c:99:24:21:cf:9b:36:02:3d:e8:0b:e4:de:ee:e3:cc:fc:09:
05:fc:a1:6c:8a:07:bc:33:cc:4b:64:a6:b5:b6:2d:26:d2:8b:
ba:2a:bc:e1:c2:68:4e:ab:19:8c:55:d8:ac:9a:ed:e5:e1:58:
67:47:20:52:77:d3:7c:26:61:ac:57:87:c1:ab:cc:56:73:33:
42:6e:34:72:db:c4:e7:2c:af:bd:6f:5c:cd:27:43:b2:ca:4b:
4d:e3:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:10:38 2024 by rpki-client on console-fra.rpki-client.org