Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft
File: XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft (raw, json)
Hash identifier: tf4tCc8GV17bGpMZxF0S6q24Y7qkmPsBH0ZRWoiuptM=
Subject key identifier: 41:C7:4F:74:89:49:D5:D1:ED:B6:F3:6F:3D:59:BE:74:CB:33:90:54
Authority key identifier: 5C:D7:42:AB:39:FB:68:82:CC:6B:55:B8:36:C0:EB:14:66:A2:2F:46
Certificate issuer: /CN=5cd742ab39fb6882cc6b55b836c0eb1466a22f46
Certificate serial: 0190411BFE0CA47523DC0AD58AC1265D7763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNdCqzn7aILMa1W4NsDrFGaiL0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft
Manifest number: 03C0
Signing time: Sat 22 Jun 2024 18:01:11 +0000
Manifest this update: Sat 22 Jun 2024 18:01:11 +0000
Manifest next update: Sun 23 Jun 2024 18:01:11 +0000
Files and hashes: 1: XNdCqzn7aILMa1W4NsDrFGaiL0Y.crl (hash: w0j+FqTpmdkJiRTL2tucoK0kxtVp90VYJhkFvIIQ3Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNdCqzn7aILMa1W4NsDrFGaiL0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:1b:fe:0c:a4:75:23:dc:0a:d5:8a:c1:26:5d:77:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd742ab39fb6882cc6b55b836c0eb1466a22f46
Validity
Not Before: Jun 22 18:01:11 2024 GMT
Not After : Jun 23 18:01:11 2024 GMT
Subject: CN=41c74f748949d5d1edb6f36f3d59be74cb339054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:96:07:59:c0:08:07:ff:18:79:e5:ce:03:
ba:73:8c:22:58:df:a3:98:ca:c3:45:59:55:fb:44:
fd:57:d7:ae:a1:dc:9d:0c:db:d4:9d:b2:d0:7a:be:
5a:b4:e0:02:56:95:e0:21:7e:ab:79:56:34:79:0b:
e2:c7:e3:00:bb:b9:9d:2e:db:91:80:de:89:eb:d8:
0a:9b:73:1a:31:58:9e:9f:c2:66:fe:45:27:46:4d:
6e:7c:58:19:b6:47:c3:5c:9f:b4:48:6f:2c:08:4a:
c2:6f:be:a9:ca:a7:75:11:2e:c2:62:ef:c4:e5:f1:
50:f1:bf:1a:87:96:d4:c4:63:62:09:10:f9:eb:77:
41:c4:19:77:6c:7e:cb:97:92:c0:52:f4:f3:2a:1e:
ad:7e:a4:6c:9c:a7:d6:d4:df:a9:f5:b9:48:f1:47:
3f:84:ae:04:87:20:65:d2:be:bb:0b:d2:7a:da:d6:
8a:e9:24:20:a0:28:c3:0e:85:3c:2b:ce:9c:97:cb:
17:e1:d2:73:56:5f:7f:45:63:23:71:62:4f:d1:d0:
52:7f:19:65:3a:be:06:94:25:24:94:76:23:2c:b4:
7a:6b:9f:62:a8:59:8e:8f:34:de:aa:25:e2:75:a7:
c0:15:8f:8b:18:5b:5b:e6:2b:f6:12:8b:d0:78:6f:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C7:4F:74:89:49:D5:D1:ED:B6:F3:6F:3D:59:BE:74:CB:33:90:54
X509v3 Authority Key Identifier:
keyid:5C:D7:42:AB:39:FB:68:82:CC:6B:55:B8:36:C0:EB:14:66:A2:2F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNdCqzn7aILMa1W4NsDrFGaiL0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f6cc2-5c0b-46a7-9c63-fe3fcf68d634/1/XNdCqzn7aILMa1W4NsDrFGaiL0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:9b:54:d0:27:6a:e7:31:fa:55:5b:c3:5f:93:85:69:29:42:
b5:b8:a1:89:71:51:09:a3:c5:12:2d:ea:bb:68:4a:fc:1b:1c:
98:04:c3:b6:6b:a6:45:e5:6c:0c:4a:cb:5a:f2:47:6b:c3:33:
ab:5f:cd:08:86:4b:da:7a:31:26:a2:d2:ea:da:4d:1e:16:1a:
71:8a:86:6b:7c:bb:a6:dd:4b:e4:12:c1:a2:23:d0:83:99:b1:
49:55:0f:64:8d:fe:60:ca:1a:26:9a:73:b9:30:30:50:e3:f1:
12:4b:7d:c9:89:39:25:3b:ae:08:4b:f5:6c:26:1c:a2:b2:e9:
41:f3:33:e6:57:39:69:ac:56:16:12:98:0e:e2:54:fd:42:88:
41:89:3f:fd:07:29:b0:c8:97:97:b5:db:83:37:42:a8:a1:ad:
71:ea:33:0e:ea:a7:9b:2d:f8:e5:d4:a4:39:44:87:48:6d:0f:
0e:35:e6:68:7b:b6:95:a2:c6:8a:8f:19:42:cc:57:cb:29:13:
59:f9:56:ec:3f:14:e7:cc:07:f4:f8:dd:76:bb:ea:d2:43:27:
59:65:b0:7e:3e:04:6e:73:14:89:2c:50:da:5c:0d:9e:8e:cc:
74:e8:5f:ab:88:94:0a:14:83:49:f4:27:88:df:b6:ae:c7:85:
f6:6b:cb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:29:59 2024 by rpki-client on console-ams.rpki-client.org