Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
File: u0WFtGeSNzbELHly4QQvGy4w3GY.mft (raw, json)
Hash identifier: JPaSzX70HVrhSa9cFBW2UPEuZRwWh+yPBOYThftGFVU=
Subject key identifier: 89:D6:90:FC:59:79:C6:29:69:3C:54:CB:24:51:B2:6D:FD:73:DD:A5
Authority key identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
Certificate issuer: /CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Certificate serial: 0190448CCD5584B76A3E81C40DA8DFF9C86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
Manifest number: 11D8
Signing time: Sun 23 Jun 2024 10:03:16 +0000
Manifest this update: Sun 23 Jun 2024 10:03:16 +0000
Manifest next update: Mon 24 Jun 2024 10:03:16 +0000
Files and hashes: 1: u0WFtGeSNzbELHly4QQvGy4w3GY.crl (hash: 5mFOCYnp+b2v38fA3mi6aPgoa8BeJG16CJtq1orqmXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8c:cd:55:84:b7:6a:3e:81:c4:0d:a8:df:f9:c8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Validity
Not Before: Jun 23 10:03:16 2024 GMT
Not After : Jun 24 10:03:16 2024 GMT
Subject: CN=89d690fc5979c629693c54cb2451b26dfd73dda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:20:9f:9e:9f:8a:2b:15:76:c1:e7:2d:5a:
72:9b:66:20:4e:88:2a:f0:7b:a7:6c:be:3c:1e:b1:
06:93:6d:f5:aa:55:70:52:94:7b:73:df:a7:39:bc:
96:a9:e3:6f:2c:23:5f:ed:ba:03:ba:2a:d1:18:75:
b7:37:c7:8c:cc:36:54:6b:9e:97:d3:8e:86:87:5b:
67:83:c6:f0:5a:78:3d:f6:40:f2:20:6a:00:fe:dd:
6e:3b:83:e9:55:db:da:cc:1d:d3:40:4b:90:43:16:
47:8a:e9:68:6a:77:fb:35:c9:bd:30:b7:28:17:34:
e9:2c:50:d8:cd:43:e7:99:e3:e4:5d:ee:68:08:c7:
1e:a5:c7:f7:cb:16:6d:f0:5f:0b:44:42:04:e0:90:
dc:99:c6:3d:6f:bf:ad:8c:b8:01:33:70:98:71:3a:
21:8b:a5:49:a6:84:06:83:e9:df:3e:0d:e6:51:38:
c5:7f:bb:8e:d6:d2:4c:4d:5b:21:2f:38:a5:77:1a:
c3:fe:82:25:e3:36:38:7a:86:5b:6a:4e:2c:c2:e2:
1d:5d:6b:c0:8a:ec:bc:12:31:3a:57:30:45:d7:92:
dd:57:2a:0e:1d:ac:96:b5:d0:b9:c0:b1:a8:7a:f8:
16:27:5b:69:95:10:3f:74:92:7d:5e:19:d9:7c:b5:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D6:90:FC:59:79:C6:29:69:3C:54:CB:24:51:B2:6D:FD:73:DD:A5
X509v3 Authority Key Identifier:
keyid:BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fd:7c:f8:c5:ed:0b:b4:10:52:e9:81:0a:47:93:6c:16:e1:
f3:c9:11:0d:f7:a7:0e:08:7e:2d:23:70:01:60:c4:59:67:25:
d6:58:81:73:92:28:07:03:75:e2:66:c1:bb:7b:cd:e9:e7:ff:
4f:8e:60:24:40:7a:ba:c0:f5:1c:af:03:3d:2c:56:19:ff:ea:
7f:2a:17:be:e0:7b:30:e1:2b:ef:e3:db:35:8e:3a:79:55:98:
ae:7f:e2:87:b3:de:f8:56:82:4b:87:66:5e:19:f7:2e:68:d3:
ef:ab:51:6a:8b:4b:0b:14:6d:b2:f6:3c:13:4a:82:ea:fe:dc:
c8:4d:25:3f:07:b2:4e:73:52:49:87:10:5f:38:a1:d5:c6:89:
92:e3:9f:25:11:14:40:ab:75:95:ec:ed:f7:cb:07:b6:1e:6a:
97:04:09:0f:de:75:0b:7a:5a:45:ad:23:ae:c0:58:16:00:4d:
01:97:87:68:fb:ed:9b:f0:cb:d9:4c:b7:4c:9c:f5:2d:7e:53:
92:ab:e5:32:e3:23:a8:91:92:63:b9:8d:7b:b3:b7:03:1c:6c:
95:6d:90:cc:0d:ce:27:60:66:82:b3:9d:cd:37:fb:74:4d:c7:
92:d5:5d:58:ab:4b:f0:88:3e:7b:98:0b:73:ef:cb:80:7b:8f:
ce:db:45:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:13:47 2024 by rpki-client on console-fra.rpki-client.org