Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
File: u0WFtGeSNzbELHly4QQvGy4w3GY.mft (raw, json)
Hash identifier: xzBnBqJ5yXb+Hh3Uqwgk2TgM26y25Pnd9b4+ITNG8ys=
Subject key identifier: 46:D3:F9:88:3B:A7:AA:76:3D:67:96:74:1E:CC:29:62:D3:89:C9:22
Authority key identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
Certificate issuer: /CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Certificate serial: 01901DEBE754BBE50C0616F67CC8CBEB81A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
Manifest number: 11C4
Signing time: Sat 15 Jun 2024 22:01:57 +0000
Manifest this update: Sat 15 Jun 2024 22:01:57 +0000
Manifest next update: Sun 16 Jun 2024 22:01:57 +0000
Files and hashes: 1: u0WFtGeSNzbELHly4QQvGy4w3GY.crl (hash: VRAsBKhR82l1vB8ITk0qEXLgXX8lgF6SCOUn5Z4J/D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:eb:e7:54:bb:e5:0c:06:16:f6:7c:c8:cb:eb:81:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Validity
Not Before: Jun 15 22:01:57 2024 GMT
Not After : Jun 16 22:01:57 2024 GMT
Subject: CN=46d3f9883ba7aa763d6796741ecc2962d389c922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:c8:e6:d5:61:6d:62:0c:fe:21:a8:f5:e6:
a9:bc:51:46:44:5d:90:93:71:99:88:48:51:e1:18:
be:05:e4:09:49:7f:3d:67:86:40:f8:e1:60:c2:40:
5b:d2:ea:43:97:5f:b2:67:4f:91:f3:0d:06:be:33:
0a:cb:dd:8a:51:04:85:45:7d:c6:14:1d:84:91:e8:
6c:53:27:39:70:e9:ca:17:6b:49:35:d5:77:ef:3d:
e3:d8:c9:8f:85:99:a3:c0:95:75:34:f0:03:4c:8d:
1c:2c:b2:64:2a:ed:05:17:3f:ee:c0:c4:0c:a8:5a:
9e:95:b4:5f:68:b1:07:5b:d0:6e:cc:9e:29:b5:4c:
e6:64:f6:1c:03:73:72:4a:f5:ed:e6:d6:d7:2c:7c:
85:de:4c:5b:8f:14:f1:87:59:e2:8d:8d:a3:48:df:
4d:6b:5c:65:df:fd:2a:e5:c4:7a:6c:7c:94:bc:36:
8a:3f:48:1a:5e:0c:7a:67:ad:20:de:48:11:fc:14:
c7:50:8d:f3:50:90:cb:94:1f:37:ed:f5:68:09:b3:
78:5d:85:dc:21:30:ac:3d:e3:e7:66:92:ac:e3:3d:
d3:88:5e:0c:ed:f6:75:b4:a0:a8:87:13:02:2d:e8:
01:ca:56:94:65:69:f0:4d:78:ee:6d:d8:1e:e3:63:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D3:F9:88:3B:A7:AA:76:3D:67:96:74:1E:CC:29:62:D3:89:C9:22
X509v3 Authority Key Identifier:
keyid:BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:79:54:9c:a8:6c:bd:af:ae:ee:b9:91:b2:a2:b1:b1:e8:ff:
65:89:d5:b9:75:02:77:b7:8f:46:3f:e9:03:62:08:5b:66:65:
0e:cc:fa:0d:c5:a9:52:b5:4e:e5:15:b4:df:e9:90:d9:49:96:
8c:6a:94:09:5a:50:dc:8b:92:97:d3:30:31:aa:19:3f:06:87:
86:1d:05:c4:7f:da:34:62:ed:59:f8:72:9b:c7:34:05:e4:3d:
86:81:44:cc:99:d9:a8:0c:08:59:d6:76:ff:24:ef:37:cd:08:
fc:75:b6:76:c0:d2:3a:1d:7d:dc:e0:fb:03:7c:53:82:0f:5a:
0c:cc:fe:0b:75:5c:7f:96:8b:77:35:2c:58:6d:4b:d4:ff:82:
04:a4:38:f2:c2:35:85:8a:f7:20:d0:39:80:11:05:01:27:b5:
8d:28:32:7b:56:f3:40:03:41:9a:fb:a5:e0:d5:2a:ff:c0:46:
fd:3f:9f:fa:e8:5a:5e:bc:0c:ac:b0:86:f2:c4:aa:c3:57:59:
ae:75:07:03:ea:39:d9:e8:23:a2:4e:d6:01:b1:52:14:a3:62:
b7:73:2a:41:41:71:e6:8d:03:ea:39:66:47:c3:19:c9:c8:cb:
11:4a:15:b7:b7:14:4f:b9:81:19:fa:d8:08:df:d6:cc:21:41:
18:d2:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:15 2024 by rpki-client on console-ams.rpki-client.org