Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
File: MT3NGHEiZlBFhpdnM8ofkvYmH14.mft (raw, json)
Hash identifier: KJ72SAQYgGjWl7WsP/OVkk35ffyMYmsLfsX60JUchQ8=
Subject key identifier: 82:AE:6B:C2:43:07:EC:BF:2F:28:F5:05:E4:98:A6:01:85:A8:57:2A
Authority key identifier: 31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
Certificate issuer: /CN=313dcd18712266504586976733ca1f92f6261f5e
Certificate serial: 01901FDACEAFE77592FACF181FD5964A029E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
Manifest number: 0FF2
Signing time: Sun 16 Jun 2024 07:02:31 +0000
Manifest this update: Sun 16 Jun 2024 07:02:31 +0000
Manifest next update: Mon 17 Jun 2024 07:02:31 +0000
Files and hashes: 1: MT3NGHEiZlBFhpdnM8ofkvYmH14.crl (hash: 09/+9trtyMsyVn6EPsaRix2ZkHdEHEQxxqK7AWvV1BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1f:da:ce:af:e7:75:92:fa:cf:18:1f:d5:96:4a:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=313dcd18712266504586976733ca1f92f6261f5e
Validity
Not Before: Jun 16 07:02:31 2024 GMT
Not After : Jun 17 07:02:31 2024 GMT
Subject: CN=82ae6bc24307ecbf2f28f505e498a60185a8572a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:db:5f:96:6d:70:2c:54:71:d0:94:b0:42:22:
4b:03:dd:96:4a:dc:b9:c1:19:90:23:07:a1:05:9d:
76:a2:a7:34:63:d8:6d:e6:64:e8:de:8b:4a:36:a9:
55:5b:d7:f9:0a:9e:7a:77:8d:06:31:c9:cb:09:ce:
80:04:ef:78:6a:cf:c2:d9:a3:22:89:90:c3:0a:44:
f3:b0:c0:f9:93:ef:2e:0f:d0:39:f2:cc:5f:7f:33:
71:60:23:f2:06:45:da:15:01:e6:0d:0c:46:8d:29:
9b:56:56:1d:cd:6b:9a:32:bf:85:68:7c:98:77:10:
56:47:b0:eb:c6:ec:db:1f:f1:97:55:82:75:92:85:
ba:b2:06:1b:e4:a9:de:4a:0a:be:61:8f:e9:4a:c0:
7d:7c:28:90:bb:4d:bb:de:c9:e1:66:84:9d:7f:44:
ac:48:92:b1:89:a9:b8:c5:df:87:53:4e:10:a3:d9:
70:16:8e:d3:9b:be:1b:37:9b:da:3a:8e:e7:45:57:
56:26:65:12:e9:23:cd:df:9f:6d:77:de:e7:2f:a2:
be:2f:09:4a:30:6e:5c:ed:09:24:c8:ed:a6:e1:78:
0f:2a:a5:f3:1a:39:79:1d:68:d6:0a:c3:10:93:4a:
80:55:e6:fa:bb:0b:0f:01:a2:1c:90:a4:c7:b0:18:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AE:6B:C2:43:07:EC:BF:2F:28:F5:05:E4:98:A6:01:85:A8:57:2A
X509v3 Authority Key Identifier:
keyid:31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d7:93:57:a7:21:ee:07:2a:f4:40:c3:1b:a0:4f:c6:57:69:
db:db:c8:37:8a:2f:9e:8a:f2:88:57:a2:7d:7d:f3:f7:3b:f0:
81:e9:a0:1b:5b:cd:b5:06:5f:b6:08:f4:93:ee:fa:90:55:35:
82:80:34:3f:2a:86:f4:9d:d6:11:a7:88:05:c5:6c:96:a6:2b:
cc:15:7e:5a:c1:5c:b2:53:c9:8b:80:cf:89:23:cf:23:8c:59:
68:48:8c:83:44:75:8a:21:b6:1e:18:7f:45:a9:1e:90:d8:f9:
a9:70:60:48:17:08:8a:aa:ad:de:90:82:d7:5a:b4:e7:0f:60:
df:50:41:2b:06:c9:f7:ed:6d:70:c7:24:40:81:5b:17:0b:ce:
83:c3:d1:6a:06:5a:03:8e:28:7e:81:a1:75:a0:88:ce:2d:5d:
33:fe:8c:ce:fa:ac:5e:7b:53:44:05:60:1b:3f:5b:15:6a:90:
d2:f0:0e:a4:35:51:87:11:df:10:44:6f:51:bc:9b:cd:56:d7:
25:be:e1:43:79:16:c3:16:c9:fb:36:9b:0d:2e:c5:ef:77:69:
2b:8c:84:96:4e:64:69:bf:77:19:21:39:77:26:9c:50:49:d1:
2f:cd:fc:a9:2b:1f:55:c6:06:f5:80:28:36:4b:ec:83:11:7f:
59:85:7c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 07:54:52 2024 by rpki-client on console-ams.rpki-client.org