Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
File: z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft (raw, json)
Hash identifier: tgw3ssQUsWFbtXxNq32uq+h4XjTWNg8kdSfWbYxJWqQ=
Subject key identifier: 99:56:6A:0B:26:C4:87:D5:12:CD:D3:90:46:DF:4D:EC:3C:CF:C9:66
Authority key identifier: CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
Certificate issuer: /CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Certificate serial: 01901DECF7A69F9C5A8F76B485EBA7F289A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
Manifest number: 11CF
Signing time: Sat 15 Jun 2024 22:03:07 +0000
Manifest this update: Sat 15 Jun 2024 22:03:07 +0000
Manifest next update: Sun 16 Jun 2024 22:03:07 +0000
Files and hashes: 1: z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl (hash: X1hOcxWqXXwJdzeLcvTLCohydSqTYSsJbxYnMiSZ8ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ec:f7:a6:9f:9c:5a:8f:76:b4:85:eb:a7:f2:89:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfea8dbf21588b5f0c96471cea33b54ed10917e8
Validity
Not Before: Jun 15 22:03:07 2024 GMT
Not After : Jun 16 22:03:07 2024 GMT
Subject: CN=99566a0b26c487d512cdd39046df4dec3ccfc966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:30:1f:33:9c:cc:c9:67:46:c9:ec:ae:47:36:
bc:87:c2:fc:dc:c4:8b:65:be:a0:88:9c:08:3f:ad:
9b:45:82:84:b4:88:a4:bc:29:f2:0c:aa:94:9e:59:
4f:04:00:31:dd:7b:82:c3:b1:45:df:af:55:6b:0a:
93:38:3d:1a:5c:dc:c8:de:2d:0a:c7:32:93:84:dc:
fc:f3:cf:1a:87:7c:0e:94:8c:43:49:8d:60:1c:b4:
84:a2:1c:bf:b5:57:72:44:19:20:03:90:76:2d:2d:
18:03:57:9d:2e:1f:28:b3:d1:79:f7:db:30:b0:10:
7a:a6:6e:e4:a3:89:c9:cd:c6:6c:b5:61:0d:55:1a:
ca:c9:c3:b2:3b:30:a9:5f:e7:f2:99:ff:32:32:1d:
a9:f6:25:a1:73:2b:60:ce:24:82:80:86:e2:f4:45:
77:e8:a9:e9:c7:96:81:4e:f5:35:ca:35:c3:27:4b:
74:34:d0:0a:9e:c4:4d:d8:af:d7:75:74:9b:f6:42:
f0:21:31:03:41:92:0e:fc:b4:23:01:ef:9d:ec:87:
64:42:d4:a5:97:69:a9:ea:7a:fd:6d:4e:3e:07:2f:
a8:23:c3:42:54:b5:54:f8:35:2b:f3:db:39:60:e5:
44:04:b6:c9:d6:33:65:b2:54:75:8c:71:b2:69:03:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:56:6A:0B:26:C4:87:D5:12:CD:D3:90:46:DF:4D:EC:3C:CF:C9:66
X509v3 Authority Key Identifier:
keyid:CF:EA:8D:BF:21:58:8B:5F:0C:96:47:1C:EA:33:B5:4E:D1:09:17:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-qNvyFYi18Mlkcc6jO1TtEJF-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/032686-0d24-4660-ae72-7391207eac33/1/z-qNvyFYi18Mlkcc6jO1TtEJF-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9c:af:79:4f:01:15:78:06:c4:d9:7b:97:09:86:fa:ee:ba:
be:d2:e3:fe:17:37:ba:25:d0:f5:d8:7b:6c:66:eb:ff:eb:8d:
66:a5:77:a1:aa:03:f6:b9:30:65:fe:03:db:d4:4e:2a:99:ec:
a1:20:99:14:e3:f3:c7:c7:4e:23:2f:a5:73:3b:67:97:9b:c7:
24:9c:9b:0e:98:46:c6:df:b4:0b:78:ea:0d:9e:05:66:03:d4:
25:c3:8f:f5:a2:63:f2:fd:36:99:bc:55:24:f7:c5:6b:72:50:
b3:32:6a:b0:ca:2d:8e:7f:9b:13:31:10:84:32:0e:5a:ec:71:
60:c6:61:1c:83:b8:bb:dd:c0:81:18:8d:dd:89:1b:64:b8:af:
87:c3:f4:76:d7:df:c3:e8:1e:e8:86:af:da:e2:44:c7:66:e3:
73:27:0b:75:c3:d4:68:fa:e9:d5:6d:60:03:f7:97:24:15:2f:
c2:aa:9c:49:c4:9f:8d:20:a7:87:2a:5d:ed:26:a0:09:88:5e:
38:5a:a3:e8:57:b8:99:53:b7:1b:fe:0c:7d:4b:92:86:78:7a:
4a:bd:d2:e1:1a:75:db:5e:45:a8:c2:09:1f:16:f4:6d:b8:60:
4d:f5:60:56:b1:f2:05:38:12:15:ff:42:d5:93:0a:3b:4a:68:
10:4b:b1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:34:42 2024 by rpki-client on console-ams.rpki-client.org