Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
File: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json)
Hash identifier: ZTrVqTPoCHFYgHBmRYd8MgwRggI4djF0OQLqABvFpFw=
Subject key identifier: 2C:54:F7:C3:D6:F7:7E:7F:04:FE:95:90:D4:99:51:FC:D6:40:29:D7
Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
Certificate issuer: /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Certificate serial: 01901DED17F8C7F743A1CDC9118EC23CDF5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
Manifest number: 08FC
Signing time: Sat 15 Jun 2024 22:03:15 +0000
Manifest this update: Sat 15 Jun 2024 22:03:15 +0000
Manifest next update: Sun 16 Jun 2024 22:03:15 +0000
Files and hashes: 1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: K9caHbT05bGnm6DhAFyLgrEZ3EkBLanpZShKuGGJWVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 22:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:ed:17:f8:c7:f7:43:a1:cd:c9:11:8e:c2:3c:df:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Validity
Not Before: Jun 15 22:03:15 2024 GMT
Not After : Jun 16 22:03:15 2024 GMT
Subject: CN=2c54f7c3d6f77e7f04fe9590d49951fcd64029d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:c3:ca:c2:e3:2e:07:9a:d7:08:d5:2d:73:
80:ed:ba:08:7d:ce:10:ae:26:a0:ff:e3:c1:7d:8f:
4f:fa:85:d9:1b:eb:93:b2:75:9a:4e:80:cc:3a:81:
2a:fa:54:84:f1:84:08:99:96:6d:12:f6:f0:a3:96:
70:d2:8c:60:9f:e4:4c:14:ff:b3:6b:c0:d0:38:ab:
2b:bd:d4:b4:7d:0c:07:29:3f:80:3d:70:40:c9:81:
3d:ea:1a:ad:2c:19:ba:50:55:8e:f2:0b:d6:a3:07:
4d:3a:f9:64:2f:d6:3a:c8:fe:eb:9d:56:0b:df:26:
82:6c:3c:1a:f3:58:98:33:e2:0e:a0:cd:60:f8:66:
51:d6:48:65:18:cf:a9:18:74:0d:ba:fe:11:24:84:
e3:38:71:70:78:4e:c8:d3:4e:93:d2:9e:c4:27:4b:
bf:30:81:4d:48:25:46:be:f9:bb:bb:92:1e:90:60:
7e:fe:26:8b:c0:18:c0:03:15:2e:b8:51:f1:f8:89:
8f:d3:3f:c6:1f:3a:7b:c0:0c:9d:26:5b:63:b5:fd:
91:b7:6f:fd:84:d1:f2:c1:86:6f:d6:c8:0a:d3:2b:
e5:20:b4:eb:16:fa:ed:77:d0:82:cc:87:3a:bb:ea:
75:01:c4:e1:f8:5b:79:d0:05:29:31:51:e7:b8:a2:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:54:F7:C3:D6:F7:7E:7F:04:FE:95:90:D4:99:51:FC:D6:40:29:D7
X509v3 Authority Key Identifier:
keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f2:82:d6:8e:6d:92:1e:43:64:b6:03:2a:99:47:24:b3:d3:
d6:3a:8a:b7:8a:6c:d9:99:1b:e1:3e:31:27:5c:c8:1c:9c:8c:
38:1c:43:e9:d4:8a:2e:c2:38:a1:69:59:39:35:33:e6:5d:e0:
91:be:f6:7a:16:a0:55:c6:a5:a4:5e:a4:e9:4d:c0:bf:2e:e1:
a3:f8:80:75:5d:a4:a5:8a:7c:e7:cd:84:a5:5e:f9:b9:a7:23:
d4:09:f4:36:7f:99:28:14:3b:54:7d:1b:44:60:6a:de:54:19:
ce:08:8b:c8:46:67:f2:84:e8:12:20:5f:72:0c:fd:23:22:93:
fd:be:de:05:f6:66:fd:38:8f:30:2c:c0:f4:42:eb:a0:72:d1:
66:38:d0:85:2a:6b:e9:82:1c:0a:07:c6:9b:fd:8f:bb:62:28:
c9:b6:33:6f:4c:2a:ef:75:0c:16:bd:a3:d0:d4:38:d3:98:c3:
b7:35:31:ad:cc:e5:96:34:cb:a6:a2:69:57:17:3d:81:67:15:
36:42:63:ef:95:bf:1b:18:1f:eb:cd:20:ae:4c:e4:0c:22:b7:
46:cb:87:48:15:9f:aa:87:e0:31:34:bc:3a:2c:84:d3:6f:51:
c9:9e:e6:38:90:f7:52:ae:ea:d9:4d:1e:83:71:18:08:c9:8f:
79:b1:74:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:58:54 2024 by rpki-client on console-fra.rpki-client.org