Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
File: ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json)
Hash identifier: kLLjwk2GJ1kVYvDyCyP/2M4lK3RHXZDASsrEqHbxSpA=
Subject key identifier: 71:84:9C:72:C4:BF:D9:F8:94:CF:DB:F2:60:AE:E9:18:29:BF:1C:8C
Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
Certificate issuer: /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Certificate serial: 019237DD0B93E8B98872301DAA3E310E4BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
Manifest number: 032B
Signing time: Sat 28 Sep 2024 09:01:26 +0000
Manifest this update: Sat 28 Sep 2024 09:01:26 +0000
Manifest next update: Sun 29 Sep 2024 09:01:26 +0000
Files and hashes: 1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: hNJ6nEeHnReYW4bpY7b9fFHAkPYU0TUwNyUOlEBfiTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:37:dd:0b:93:e8:b9:88:72:30:1d:aa:3e:31:0e:4b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d
Validity
Not Before: Sep 28 09:01:26 2024 GMT
Not After : Sep 29 09:01:26 2024 GMT
Subject: CN=71849c72c4bfd9f894cfdbf260aee91829bf1c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:27:e9:37:73:8e:cd:d0:4b:bd:70:14:f5:
e0:59:75:06:d2:17:53:4f:59:c6:32:96:44:09:37:
6b:9f:06:af:97:bf:7c:5e:f4:d9:b9:56:64:3b:80:
af:5b:e6:0b:3c:76:bf:a0:f9:93:27:b5:58:17:44:
67:79:03:33:67:b1:81:6e:af:24:b3:d9:69:1a:c6:
08:fb:51:f1:02:04:64:27:d8:f1:27:ea:3e:67:8e:
84:78:59:ea:f2:11:a6:3c:33:ef:e1:35:5c:9b:c6:
0c:7e:13:77:44:c2:1b:8c:9e:29:00:d4:dc:f1:d8:
4c:cc:f7:e7:fd:65:46:e2:34:fc:d3:ef:50:bd:b8:
45:3c:e4:d4:23:5c:a6:c4:2d:33:32:87:ac:0a:f5:
07:ca:82:af:b0:88:ab:36:f2:48:b7:e0:0d:0f:a4:
0b:25:29:dd:a6:e0:19:ad:42:09:d2:66:b4:4a:d6:
41:df:98:bb:f8:0d:28:1d:b2:2e:25:86:a9:52:14:
95:03:bd:c6:ae:35:cf:6f:5e:ac:2f:b7:27:d9:28:
b7:9c:9b:8c:3a:aa:a8:47:73:a8:de:e3:1e:9e:45:
2b:03:06:3b:cc:a3:db:ad:5c:13:ec:d9:92:dc:86:
48:e4:39:3d:7e:ec:c8:c3:c5:5f:12:cd:be:69:ca:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:84:9C:72:C4:BF:D9:F8:94:CF:DB:F2:60:AE:E9:18:29:BF:1C:8C
X509v3 Authority Key Identifier:
keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ad:78:6e:59:30:e6:59:93:5c:82:bf:c0:57:b4:b7:99:47:
a5:32:fc:39:da:ce:aa:b6:2c:95:f9:2f:30:18:e2:2b:f5:8b:
0e:f5:a1:d2:8c:13:73:c4:63:a6:5e:5a:00:fe:9d:3e:93:33:
a1:20:54:2e:05:18:62:2c:c5:fe:06:00:b7:34:21:7f:33:00:
c4:62:24:ce:78:98:e4:bf:c6:12:7e:0b:28:94:9b:72:d1:d5:
9c:d7:99:8e:17:6f:72:38:9a:b4:9c:e1:1b:47:b3:eb:d7:f5:
5d:10:cd:8f:dd:0a:33:3b:ca:1e:2d:b4:d9:a2:cd:0a:61:9c:
7b:ee:94:e6:e4:cb:c3:f8:86:17:62:b9:6b:c4:88:b5:de:c8:
1f:da:a0:58:53:34:2a:cb:4b:c6:f7:0b:94:aa:e7:8a:af:37:
f7:48:77:8f:c7:c7:da:2f:cb:3f:5a:b1:14:5c:4c:01:ca:71:
a1:90:1e:3a:49:48:a7:6f:02:f6:8f:94:dd:ab:7a:a9:50:92:
4f:21:3b:ef:e1:f4:b5:65:e0:30:1e:e2:3d:92:42:d7:75:9d:
fc:4f:69:c8:18:da:86:70:8f:a2:0b:95:74:42:20:c3:40:c1:
e5:7c:4f:11:5f:0a:e4:65:11:fe:80:f7:cb:29:66:1d:e2:3d:
7b:56:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:56:26 2024 by rpki-client on console-fra.rpki-client.org