Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
File: 1T5Pyhar83QtTaK_nD2abpHpbuU.mft (raw, json)
Hash identifier: vc3QWOq3GyIK3s5aLoud8NDBQbPuUtMmCouqTjice/o=
Subject key identifier: BD:28:2E:B4:EE:5D:A1:FA:A1:31:6C:FF:EF:46:84:EA:36:76:34:93
Authority key identifier: D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
Certificate issuer: /CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Certificate serial: 01901EC70EC2A45A10B44184E5191D80375C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
Manifest number: 0ED9
Signing time: Sun 16 Jun 2024 02:01:20 +0000
Manifest this update: Sun 16 Jun 2024 02:01:20 +0000
Manifest next update: Mon 17 Jun 2024 02:01:20 +0000
Files and hashes: 1: 1T5Pyhar83QtTaK_nD2abpHpbuU.crl (hash: BSNsy/XvdkWvX+jrb5d/rn5XA3icG7E2z7AoieTigkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1e:c7:0e:c2:a4:5a:10:b4:41:84:e5:19:1d:80:37:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Validity
Not Before: Jun 16 02:01:20 2024 GMT
Not After : Jun 17 02:01:20 2024 GMT
Subject: CN=bd282eb4ee5da1faa1316cffef4684ea36763493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:d4:19:4d:9a:37:d9:d9:a2:67:1b:e7:44:
85:70:41:80:fa:19:34:8e:29:58:e0:11:23:ec:42:
15:2e:2b:15:7e:1b:a0:be:6e:d7:01:22:c4:81:6e:
7a:1f:4b:e9:54:ba:8a:5e:0d:41:0a:1d:69:28:75:
ee:bb:f4:c7:85:a2:b6:d4:fd:aa:d7:23:86:a5:f6:
bf:25:bf:cd:26:5f:a9:49:70:4a:44:87:45:72:05:
de:8c:a8:0f:df:23:e4:5a:d9:62:77:b4:46:a3:97:
f4:6f:f8:5e:1f:3c:b0:b3:6c:39:9f:36:2e:35:26:
de:f6:11:b1:78:f6:10:22:ff:23:a1:83:ef:60:52:
45:71:cf:60:24:dd:f6:b7:50:ce:4a:4f:c7:64:f5:
a5:25:e0:c0:89:8e:8c:ce:11:2a:42:a3:dc:e1:81:
72:4a:7c:b5:75:c4:b5:2f:a6:a3:b5:58:48:80:a4:
35:78:d1:45:42:cc:51:1f:9c:09:75:86:b9:5a:9b:
82:84:eb:d6:76:c5:61:5c:7f:da:d8:b2:d3:61:78:
ca:6a:17:cb:d1:f8:0a:76:d4:1e:cb:32:15:cf:fa:
41:c3:26:d3:f8:3c:f3:29:06:a4:78:d8:80:14:3f:
90:9e:5c:d9:1d:4e:d5:b3:d4:f8:f0:32:da:2c:4c:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:28:2E:B4:EE:5D:A1:FA:A1:31:6C:FF:EF:46:84:EA:36:76:34:93
X509v3 Authority Key Identifier:
keyid:D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:62:5e:dc:7f:09:e1:66:bc:9a:bf:a0:35:ce:fa:ec:6a:55:
67:75:1f:0b:be:7e:c8:97:fb:84:41:51:53:9e:de:91:8e:c8:
33:e7:ed:ef:14:ec:b8:f3:45:c3:54:c6:a5:d1:8d:e2:45:cb:
37:a7:50:b6:b4:c2:c0:65:de:8d:04:30:9b:29:a1:46:07:8d:
15:6f:1e:9a:c8:eb:54:c9:d1:13:e5:98:ec:e0:e9:22:88:b0:
74:bc:a6:f7:90:82:c1:d6:88:b6:9e:78:15:58:50:27:3b:ff:
a3:52:1a:d9:5c:84:16:b3:42:51:c7:c1:38:e3:61:96:e8:c5:
30:e6:3f:b5:2f:31:71:04:62:32:95:48:69:36:8c:f1:9a:d8:
21:bd:69:12:ae:7b:e6:17:01:fc:84:29:d9:5a:b2:b6:4a:83:
09:cb:4a:94:2a:5e:0f:3d:7d:88:1f:ce:ed:24:a6:74:58:8c:
4a:de:52:2e:c0:f3:bf:6a:b5:f2:78:38:f6:e0:7c:04:4b:bb:
95:09:df:6e:a6:3e:9c:e1:43:28:a8:3f:1c:68:ef:34:da:96:
05:c4:aa:ec:f6:7e:5c:cb:47:80:ba:9f:a7:44:73:87:1f:bf:
70:bf:24:c9:b4:b9:57:3b:ec:fd:34:27:34:92:3f:8e:2d:43:
86:8a:65:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:10:56 2024 by rpki-client on console-fra.rpki-client.org