Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: T6OEgfifM9VTNu1mTBNC6Gbcn3rUovrdkUwxLXyxqK0=
Subject key identifier: 4E:91:38:99:4D:DF:E2:4F:AA:0F:20:44:CF:76:DF:E4:D9:75:2E:22
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 019040AEBA18EFC01F79284F89668EB1BB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: B6
Signing time: Sat 22 Jun 2024 16:01:50 +0000
Manifest this update: Sat 22 Jun 2024 16:01:50 +0000
Manifest next update: Sun 23 Jun 2024 16:01:50 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: j0iALJY5HoeoRqcM5bhDiw3eRjpmuhpRHL9HZgZ3dFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:40:ae:ba:18:ef:c0:1f:79:28:4f:89:66:8e:b1:bb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: Jun 22 16:01:50 2024 GMT
Not After : Jun 23 16:01:50 2024 GMT
Subject: CN=4e9138994ddfe24faa0f2044cf76dfe4d9752e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:e8:92:c4:07:93:9b:fa:70:76:0a:3a:9f:
da:2e:ea:13:05:83:33:00:95:14:fc:10:1d:d8:8e:
4b:95:cd:e7:3e:81:16:a8:e7:f9:55:1a:67:c5:88:
e1:bb:f4:0e:ff:86:6e:0e:c0:cd:e7:89:6c:ac:23:
e0:a0:cb:41:0c:b2:87:72:4e:1b:13:a3:d4:2b:9f:
3a:75:29:6c:f0:08:f9:36:e8:2e:ae:55:13:63:08:
68:19:f5:d4:73:95:20:d3:d4:f1:7f:07:f9:3f:35:
48:8b:68:27:82:9d:c2:d2:54:2d:5a:2c:df:d8:a6:
7f:63:e8:50:90:59:1d:50:b3:7f:36:b0:2b:7e:9d:
0a:e1:ec:0a:59:ae:21:9e:e1:28:2c:cd:77:9e:79:
15:ff:72:0f:c4:c3:04:0a:76:4d:5f:84:58:08:b6:
4a:ed:bc:9f:fb:c0:a1:c5:2a:4d:8b:a1:0d:75:5c:
d5:11:7d:93:a8:25:55:0c:02:03:6c:ee:cc:5c:09:
d4:2e:3f:03:10:77:79:84:23:b7:dd:46:f5:16:e3:
87:da:29:05:b0:d9:38:0e:f8:81:a0:bb:02:bc:ad:
e0:d1:3a:49:fc:ef:d1:1f:20:0d:38:41:3b:a8:04:
62:88:e6:7d:a1:78:dc:74:fd:a4:ca:cb:a7:6e:9d:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:38:99:4D:DF:E2:4F:AA:0F:20:44:CF:76:DF:E4:D9:75:2E:22
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:22:71:eb:fb:e4:47:10:56:bb:3b:f7:7b:1a:60:b0:9e:d7:
19:bd:7b:70:df:7f:2f:14:1b:61:0c:2a:25:61:39:7b:f5:dd:
30:52:bf:ac:f2:a1:e0:b4:c4:78:43:95:08:c4:8e:37:c6:5f:
01:2b:fd:ee:80:f9:d7:89:45:44:5b:bd:59:59:25:7d:b7:20:
9e:dc:2e:b6:fd:a1:00:20:4f:41:ae:87:c6:91:d6:1c:46:a3:
3e:b1:3c:a6:73:f6:e8:83:62:33:d5:87:20:80:1f:8a:b9:6e:
1a:dd:4b:9b:e0:b9:2b:1f:8c:19:10:1f:c3:d7:1d:07:54:91:
4c:e7:1b:cd:41:c0:a7:8d:cf:00:44:32:94:e6:44:7d:fe:0b:
d4:83:83:c8:b2:19:6a:93:58:45:8d:04:83:1c:e7:e5:68:eb:
e2:45:d2:20:ed:bf:5c:cc:05:d8:0d:55:02:b1:48:28:f0:e2:
93:43:aa:f2:9b:4b:00:a7:8d:4b:b9:4e:dc:f9:81:72:a0:1d:
06:74:6b:98:2c:66:82:c2:30:b4:45:fb:7a:7c:59:a4:1b:bf:
a5:e7:72:ae:ab:85:fd:b3:91:3e:49:32:9c:28:08:21:1f:00:
b5:2f:26:6c:88:45:3b:f2:67:75:e2:69:af:42:70:57:6d:52:
38:59:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:38:01 2024 by rpki-client on console-ams.rpki-client.org