Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
File: bxfKsp3wkGVUwRzpqynGDR56Z1w.mft (raw, json)
Hash identifier: 5qD7OUWS1lOLbanAHg8dwDqJ1NnPN6AkVFJWqk/Yvyg=
Subject key identifier: 30:4F:39:8F:51:91:B8:81:D7:E2:59:25:5C:13:22:99:65:6F:EF:BC
Authority key identifier: 6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
Certificate issuer: /CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Certificate serial: 01901CA126DD8E50A3B9AC3940825CA211EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
Manifest number: 9C
Signing time: Sat 15 Jun 2024 16:00:41 +0000
Manifest this update: Sat 15 Jun 2024 16:00:41 +0000
Manifest next update: Sun 16 Jun 2024 16:00:41 +0000
Files and hashes: 1: bxfKsp3wkGVUwRzpqynGDR56Z1w.crl (hash: kGQE2S3PsK5vxTupUf2B3HX6tZrHw0fCvwzbptdX1GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:a1:26:dd:8e:50:a3:b9:ac:39:40:82:5c:a2:11:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f17cab29df0906554c11ce9ab29c60d1e7a675c
Validity
Not Before: Jun 15 16:00:41 2024 GMT
Not After : Jun 16 16:00:41 2024 GMT
Subject: CN=304f398f5191b881d7e259255c132299656fefbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:45:d7:3b:83:cb:74:3b:31:63:7f:af:b9:
9b:00:d6:a2:98:4f:eb:52:94:a5:51:90:31:6d:f7:
a8:71:d0:5e:93:2d:dd:06:76:3b:7f:30:24:bb:d4:
82:a4:7e:de:45:15:60:82:09:76:8f:05:33:1b:8f:
b4:2c:c5:6a:02:42:6f:19:d0:8d:e2:03:35:91:01:
93:b8:04:46:2a:33:27:84:35:3b:b5:b5:3a:21:17:
78:71:04:74:51:c3:d7:9e:6f:99:fb:a7:f0:9f:dc:
e3:ef:15:f6:87:8a:32:89:6e:8d:9b:c9:d3:6e:18:
1c:7b:72:12:46:a3:fa:b0:50:3b:89:a9:9b:59:32:
8f:33:2c:1e:02:9d:72:7a:4d:79:b9:4d:ba:96:1c:
07:38:c8:20:bd:ad:b0:16:ce:f9:8b:be:f8:fc:eb:
97:ef:6a:3f:5d:12:e1:91:23:79:c0:f3:fb:36:fa:
6f:cc:73:c0:c8:59:af:66:07:45:ac:a0:49:e2:9e:
a9:06:f7:2f:af:57:aa:2b:1e:81:ee:2c:de:68:d2:
c4:63:4b:6f:7c:19:6a:ae:21:9e:25:95:2d:da:f3:
29:a9:46:58:fc:3f:09:8a:34:b6:4c:60:77:b3:a8:
28:75:9f:37:08:7d:53:ce:8f:2e:7f:06:68:ab:08:
ac:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4F:39:8F:51:91:B8:81:D7:E2:59:25:5C:13:22:99:65:6F:EF:BC
X509v3 Authority Key Identifier:
keyid:6F:17:CA:B2:9D:F0:90:65:54:C1:1C:E9:AB:29:C6:0D:1E:7A:67:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxfKsp3wkGVUwRzpqynGDR56Z1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3113e1-4230-4380-971e-6782a73c2b47/1/bxfKsp3wkGVUwRzpqynGDR56Z1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:24:d3:13:40:36:ce:8b:0b:df:ab:31:52:b0:26:19:7b:40:
4d:27:43:ad:c0:0e:94:60:ba:6c:04:83:85:c2:ac:c2:dd:ed:
b8:53:bc:83:6a:16:a9:99:8f:31:ee:ed:99:88:95:00:f6:5e:
a9:a2:b8:08:bd:74:9c:98:8e:f5:30:25:46:4e:a2:6e:59:e7:
2c:53:df:da:e0:0d:2f:c0:f8:13:66:85:08:33:12:49:74:bd:
5d:5e:9b:4f:96:16:0f:b6:89:7e:7c:c2:c4:1b:79:57:ff:33:
9e:6b:f9:07:fc:da:6b:19:c6:0b:6d:dc:a5:c7:a1:b8:06:d8:
a6:78:0d:03:33:0a:b3:67:e2:b4:81:d4:76:f3:bb:b0:db:02:
b0:3e:33:82:d1:7d:0b:9e:67:81:ef:be:38:58:7b:e9:d1:2e:
c9:0b:2d:5d:a9:81:2a:e0:ec:c9:f0:74:fd:1e:fb:a8:75:98:
ed:33:a1:74:66:fb:00:05:c2:1a:a8:66:b1:1f:bc:65:ac:91:
27:e1:6f:a2:1d:ad:49:c0:1b:03:50:18:7a:cf:8d:87:56:78:
bc:cf:6e:da:d4:17:77:b6:8a:61:f7:13:6f:05:18:f4:78:17:
b8:e8:db:b8:68:3a:ef:df:07:16:ae:64:1a:85:bd:1b:6f:a9:
f9:54:2b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:53:54 2024 by rpki-client on console-fra.rpki-client.org