Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.mft
File: fkjfjrkRmEdcx7Hmci0qsSXhZns.mft (raw, json)
Hash identifier: DNPitypkJc63udtGga51Cm0XVtTrgBuGP0m+EjngQD8=
Subject key identifier: D6:7B:28:09:EB:D5:0B:33:1A:AB:7C:CE:C5:5B:B8:0D:00:FD:8A:1D
Authority key identifier: 7E:48:DF:8E:B9:11:98:47:5C:C7:B1:E6:72:2D:2A:B1:25:E1:66:7B
Certificate issuer: /CN=7e48df8eb91198475cc7b1e6722d2ab125e1667b
Certificate serial: 01901D0F735779F3334B78DC6D015798278C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkjfjrkRmEdcx7Hmci0qsSXhZns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.mft
Manifest number: 02CD
Signing time: Sat 15 Jun 2024 18:01:10 +0000
Manifest this update: Sat 15 Jun 2024 18:01:10 +0000
Manifest next update: Sun 16 Jun 2024 18:01:10 +0000
Files and hashes: 1: fkjfjrkRmEdcx7Hmci0qsSXhZns.crl (hash: 6x7k2sVzFtO/tNrOjI4BrjKHsanBhc2A2wSDv3d/y28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkjfjrkRmEdcx7Hmci0qsSXhZns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:0f:73:57:79:f3:33:4b:78:dc:6d:01:57:98:27:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e48df8eb91198475cc7b1e6722d2ab125e1667b
Validity
Not Before: Jun 15 18:01:10 2024 GMT
Not After : Jun 16 18:01:10 2024 GMT
Subject: CN=d67b2809ebd50b331aab7ccec55bb80d00fd8a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:09:8b:71:62:f1:2c:50:e0:64:5d:80:93:
04:83:0b:51:d5:b2:6f:6a:db:da:fd:58:c2:70:03:
76:3e:74:8f:67:7a:a8:4c:19:99:7d:f5:40:1c:a0:
9c:03:0c:00:17:54:3d:1a:72:b3:56:b1:ef:ab:c2:
d0:5a:9e:86:24:c2:4c:78:b2:fd:39:e8:5e:d5:26:
15:74:41:e9:e9:56:2f:e6:7c:c0:54:92:96:d8:17:
7f:8f:74:32:98:93:fd:49:47:6a:9b:c3:a0:ce:24:
6a:86:0d:2a:04:a9:79:78:f8:90:9d:21:50:aa:f6:
cc:7f:b1:32:d3:56:d9:11:d6:41:76:91:69:a8:c4:
a2:f9:96:cd:c5:a7:7e:ff:0b:6c:22:b3:6b:ae:e1:
00:17:16:2b:45:a8:d3:68:43:65:8e:bd:42:65:94:
01:d1:13:49:05:e6:15:ad:8c:af:db:bc:93:8e:db:
8c:fd:13:9c:1f:71:ad:16:23:c5:32:14:b6:1f:60:
b4:c9:fd:e9:8c:1b:a5:ab:00:61:58:7a:c8:96:64:
13:81:8a:f6:49:eb:db:58:1c:86:cd:64:91:67:61:
df:16:b7:c6:8b:21:2f:48:b5:4e:8c:74:24:e5:43:
62:93:8c:90:a1:7c:d5:69:e5:73:32:84:e5:3f:fb:
d0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7B:28:09:EB:D5:0B:33:1A:AB:7C:CE:C5:5B:B8:0D:00:FD:8A:1D
X509v3 Authority Key Identifier:
keyid:7E:48:DF:8E:B9:11:98:47:5C:C7:B1:E6:72:2D:2A:B1:25:E1:66:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkjfjrkRmEdcx7Hmci0qsSXhZns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/547920-3b65-499f-b6ca-143e6085e01e/1/fkjfjrkRmEdcx7Hmci0qsSXhZns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:86:61:0f:0c:33:ee:dd:de:c3:16:5a:fc:52:f1:47:1f:ad:
5e:ed:42:65:b7:b5:35:b9:16:69:f9:f9:2e:5d:bf:ef:f1:d7:
13:af:1c:4c:bf:8b:7e:e0:8f:bf:36:36:07:86:d0:a0:cd:76:
35:df:da:07:b1:cc:d9:c5:bf:dd:40:7c:2f:72:f3:c5:f3:94:
b5:20:38:9f:8d:3a:0d:6c:c5:e5:de:19:f3:ba:7e:4e:3f:71:
5d:b3:60:83:1d:c6:b9:f9:1a:04:9b:cc:1e:36:37:41:c8:47:
40:1d:c6:64:6e:5e:a4:7f:96:0f:7e:95:66:eb:23:54:31:99:
86:bb:60:0c:f8:b4:6e:51:31:73:12:7a:0b:fe:5e:8c:83:b2:
dc:04:47:67:91:af:ca:ed:97:84:fd:d4:20:c5:70:75:1e:aa:
ea:22:e7:56:73:af:d8:22:04:72:a6:12:27:e7:cc:aa:9f:ae:
a7:32:3e:16:5c:7e:da:33:44:21:ec:63:c4:65:f7:5c:c3:e0:
7c:ec:cd:b7:80:0b:5c:df:7e:b8:b2:e4:f3:1e:58:24:ed:d7:
d7:53:7a:f7:f0:84:63:7e:b3:fc:83:2f:19:f3:b6:88:4f:64:
27:94:21:81:ba:17:78:25:5d:e9:68:a1:f0:e8:d4:00:27:cd:
af:e4:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:34 2024 by rpki-client on console-ams.rpki-client.org