Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
File: 2xjQrivPZ9QUonXLOE8tOWCoN70.mft (raw, json)
Hash identifier: 0qbp7Lq6kjVGy2vNR9ugtr6Bc+8mhilfhneMdhw3myY=
Subject key identifier: 5A:CF:94:90:D9:C8:58:8A:E4:4B:6B:AA:24:E3:2D:CB:67:9F:D9:EA
Authority key identifier: DB:18:D0:AE:2B:CF:67:D4:14:A2:75:CB:38:4F:2D:39:60:A8:37:BD
Certificate issuer: /CN=db18d0ae2bcf67d414a275cb384f2d3960a837bd
Certificate serial: 01901C6A6CB15FC6F7EC389187A3B6D73E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xjQrivPZ9QUonXLOE8tOWCoN70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
Manifest number: 093D
Signing time: Sat 15 Jun 2024 15:00:55 +0000
Manifest this update: Sat 15 Jun 2024 15:00:55 +0000
Manifest next update: Sun 16 Jun 2024 15:00:55 +0000
Files and hashes: 1: 2xjQrivPZ9QUonXLOE8tOWCoN70.crl (hash: JwNO8dW3gfHtWM7ws11gi6a7is82ofTAKJBDV5H2oUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xjQrivPZ9QUonXLOE8tOWCoN70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:6a:6c:b1:5f:c6:f7:ec:38:91:87:a3:b6:d7:3e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db18d0ae2bcf67d414a275cb384f2d3960a837bd
Validity
Not Before: Jun 15 15:00:55 2024 GMT
Not After : Jun 16 15:00:55 2024 GMT
Subject: CN=5acf9490d9c8588ae44b6baa24e32dcb679fd9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:10:bb:37:90:bf:73:ec:82:ae:44:97:da:c9:
76:97:a4:7b:f2:96:97:4a:e3:5a:8d:01:0c:a0:2a:
38:ff:ee:27:a4:34:3a:cd:17:fe:16:d7:69:13:00:
44:b5:12:04:be:c4:67:f1:e4:8e:2b:d3:92:06:db:
de:0f:d1:f9:7a:c5:d6:87:36:d9:a9:ca:7c:91:c1:
30:71:84:33:4f:3f:d6:0a:87:46:47:3c:62:03:80:
06:10:0f:45:9d:74:87:d3:c4:b7:71:55:6b:bd:01:
4b:62:66:3d:55:aa:7e:45:e2:e5:9d:9b:2e:c1:06:
00:d0:d3:20:a5:d7:6b:2a:3e:0f:bd:e9:e2:44:c8:
8e:6e:fa:f7:3f:df:3c:0e:c1:0f:24:20:b7:64:c9:
e6:5a:46:60:28:b7:25:ee:83:ae:90:0f:fd:fe:54:
23:74:d9:46:36:ca:b6:0a:16:55:07:87:a7:5f:b0:
98:05:df:7e:6a:f1:88:2f:9c:be:51:5c:e5:a5:56:
1f:69:57:d4:d1:69:9a:c5:80:79:c3:fb:f5:6b:5d:
0e:0f:f3:2f:4d:dc:2f:6c:76:35:a5:a3:31:99:94:
c9:1a:65:57:6e:62:7a:6a:95:a3:70:73:87:fd:b0:
4b:aa:05:46:57:48:7f:4e:4e:df:d9:de:c6:31:7a:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CF:94:90:D9:C8:58:8A:E4:4B:6B:AA:24:E3:2D:CB:67:9F:D9:EA
X509v3 Authority Key Identifier:
keyid:DB:18:D0:AE:2B:CF:67:D4:14:A2:75:CB:38:4F:2D:39:60:A8:37:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xjQrivPZ9QUonXLOE8tOWCoN70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cef896-f968-4c2f-80c4-0acebaa67b79/1/2xjQrivPZ9QUonXLOE8tOWCoN70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:36:7b:2f:9e:09:45:33:72:7b:1f:3f:37:23:8d:7e:7c:da:
0b:9e:72:4d:0f:5f:b7:73:56:38:c0:81:c9:35:1e:92:a9:ff:
be:38:1b:32:a4:11:37:e4:b2:aa:0b:92:63:45:43:61:ef:a2:
27:d9:0f:99:6f:20:fc:74:23:d0:ab:f2:55:d9:f8:a5:fb:30:
50:89:63:73:9d:02:a9:51:bd:66:27:8d:66:a4:83:ab:02:63:
1e:67:b7:06:1f:40:28:f5:54:80:fb:0c:fa:f7:25:66:1b:ce:
62:8a:64:77:f8:5d:e5:e7:76:93:49:50:27:90:58:23:d3:38:
dd:05:6d:9d:6d:7b:a8:dc:c9:de:b3:d5:37:fe:8b:eb:23:d0:
e2:9e:0e:fe:54:e4:42:91:22:9a:34:4d:a7:85:5c:0d:57:a7:
15:f9:35:e9:20:37:ca:46:9b:df:00:c5:63:5b:6f:32:5a:bc:
94:0c:7a:42:f7:bc:fc:cf:ca:6f:f0:ae:e2:7c:9f:c9:d5:7d:
96:0e:04:34:b0:e3:bb:bd:b4:36:7a:ae:a2:6f:26:3d:a9:83:
09:63:19:ea:4a:6b:78:12:3a:fb:76:4e:07:82:b9:38:2b:3d:
a4:fc:c2:ff:9c:95:00:80:ac:e6:72:cb:ee:0a:ed:f0:5e:91:
68:c8:84:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:39:54 2024 by rpki-client on console-ams.rpki-client.org