Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
File: l37KDVyVbeF79pcQRvLrlc5hXik.mft (raw, json)
Hash identifier: e3cstmaag4vJmwxDbZGtM9Wzrry0gthNCxFmZFUR0Ws=
Subject key identifier: 1A:C7:C7:35:C8:C9:9C:FD:65:66:E8:1A:A4:5E:5F:6E:CE:AA:2D:83
Authority key identifier: 97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
Certificate issuer: /CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Certificate serial: 0190486898AFEB8502605C6A71F33348C2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
Manifest number: 11D9
Signing time: Mon 24 Jun 2024 04:02:12 +0000
Manifest this update: Mon 24 Jun 2024 04:02:12 +0000
Manifest next update: Tue 25 Jun 2024 04:02:12 +0000
Files and hashes: 1: l37KDVyVbeF79pcQRvLrlc5hXik.crl (hash: QuL3OZnPKEureHg2AHWa2y+taOL5bZ07Y3IR3sRb890=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:48:68:98:af:eb:85:02:60:5c:6a:71:f3:33:48:c2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=977eca0d5c956de17bf6971046f2eb95ce615e29
Validity
Not Before: Jun 24 04:02:12 2024 GMT
Not After : Jun 25 04:02:12 2024 GMT
Subject: CN=1ac7c735c8c99cfd6566e81aa45e5f6eceaa2d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ad:63:14:43:cf:3e:53:01:50:84:cb:b9:87:
20:28:4f:49:0c:96:11:2f:21:76:38:5e:3f:23:0f:
5c:f2:90:9d:a1:7c:c6:76:67:8b:d6:14:7d:95:01:
3b:7b:fb:02:00:f0:87:45:86:ec:32:e2:ec:64:92:
0c:31:dd:24:d5:20:dc:b8:d8:94:a8:e0:e7:2e:40:
18:32:72:23:f6:03:24:d4:5c:d8:17:06:1b:e2:d7:
86:ed:65:02:e0:e2:99:20:1f:c6:83:a0:d3:41:67:
2c:38:a3:65:ea:be:84:d7:1c:94:18:48:11:8f:a7:
98:a4:2d:e5:5e:ea:e8:b2:ba:68:e0:ce:0f:d2:9e:
a5:f2:02:17:c2:37:bc:28:74:ce:a3:55:9a:79:dc:
15:f5:c8:6a:8d:e1:4d:11:52:23:c9:9e:b5:da:0c:
3c:63:c0:f3:df:c0:e2:98:c3:25:a0:b3:34:8c:0d:
66:7c:27:73:5e:21:c0:0b:7a:1c:ec:87:7b:0d:4b:
4d:9f:c1:04:8c:93:76:b4:92:3e:9c:f8:1d:e5:3e:
8e:b5:35:8d:3e:6d:2a:80:21:9a:9c:1c:84:6a:8a:
95:2d:de:04:29:e4:b8:52:c0:20:74:0b:33:2a:42:
d2:0b:3f:f6:d2:c8:4c:81:3a:39:09:b5:9e:eb:6a:
81:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C7:C7:35:C8:C9:9C:FD:65:66:E8:1A:A4:5E:5F:6E:CE:AA:2D:83
X509v3 Authority Key Identifier:
keyid:97:7E:CA:0D:5C:95:6D:E1:7B:F6:97:10:46:F2:EB:95:CE:61:5E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l37KDVyVbeF79pcQRvLrlc5hXik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/32abd8-bedb-4b7d-a463-79706b345bbb/1/l37KDVyVbeF79pcQRvLrlc5hXik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:21:4e:a2:9a:44:00:22:2c:3b:89:49:27:21:6b:78:bd:62:
30:39:e9:e5:25:9d:db:da:66:7a:b4:4e:14:77:ee:65:9d:7a:
0b:3e:dd:bb:f2:7c:f7:93:81:7d:76:79:b7:87:0b:54:95:cd:
c2:70:68:ec:49:d0:43:fc:0f:ef:f5:1a:7d:65:2d:d6:cc:44:
9b:c3:b8:d2:f0:6f:a3:dc:75:25:36:b6:21:6e:3a:e9:0a:65:
d9:ba:8d:c9:2a:04:2f:71:d6:3d:05:d3:05:db:7a:6d:99:22:
6b:31:b5:9c:75:8c:7f:01:bb:49:88:c7:af:c9:25:63:a1:20:
69:7b:d0:26:b9:02:71:ec:31:52:86:8a:f4:64:7e:b5:ce:46:
44:02:bf:be:ac:e4:ff:29:8a:68:36:77:c5:e2:ed:c0:94:07:
9d:12:ea:25:02:16:f2:fe:b0:3b:f7:ea:af:21:a4:b8:d1:65:
cd:28:43:e1:b0:61:71:e9:34:21:94:ce:4d:55:53:78:dd:6b:
3d:4b:d8:b8:0a:33:ed:4a:8f:20:b5:4d:c2:20:15:af:44:1f:
02:91:8a:94:6d:42:33:98:c7:6f:72:aa:ec:0f:0a:f1:fd:f4:
90:b9:97:ef:9c:2e:e3:2a:7f:d5:cc:9f:62:bb:73:17:9f:cc:
1f:76:86:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:12:03 2024 by rpki-client on console-ams.rpki-client.org