Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File: fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier: w0oQWUymBpWsWXlQz1psHDRIrdFJC4o70WKZSsZUwtc=
Subject key identifier: 37:0E:70:9E:D2:B8:29:FA:07:2A:9B:31:FB:3D:5D:AE:1C:99:DB:65
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer: /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial: 01901CD8986563F5D51FE0D42B1F52BEEA7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number: 0EDC
Signing time: Sat 15 Jun 2024 17:01:15 +0000
Manifest this update: Sat 15 Jun 2024 17:01:15 +0000
Manifest next update: Sun 16 Jun 2024 17:01:15 +0000
Files and hashes: 1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: 3SzDPTMpcUhBekpMpAa4VYN3BduGzmytcN+E6NiTtH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:d8:98:65:63:f5:d5:1f:e0:d4:2b:1f:52:be:ea:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
Validity
Not Before: Jun 15 17:01:15 2024 GMT
Not After : Jun 16 17:01:15 2024 GMT
Subject: CN=370e709ed2b829fa072a9b31fb3d5dae1c99db65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:39:b7:a2:69:bf:64:38:2f:9a:28:f6:7d:1c:
f6:fc:76:78:4e:5c:c1:c9:c2:8d:4d:62:ca:66:22:
18:60:0b:ce:76:fd:30:15:e3:48:a0:9f:28:c5:63:
44:c3:d2:bb:32:04:63:93:ae:07:cf:16:71:34:e1:
da:d0:d9:26:e0:b5:07:db:57:8a:60:ba:63:af:96:
bb:3c:62:e2:2f:5d:1e:d6:d7:9e:dd:cf:88:9a:81:
be:ca:ea:87:56:51:86:f3:98:68:71:c4:26:f4:4b:
a7:e8:74:da:de:fb:40:09:ff:4e:dc:0b:d1:cb:b0:
dd:9d:bb:1a:d8:e3:e0:3b:29:56:47:dc:95:37:64:
73:77:63:33:3f:3d:06:70:33:e6:fa:a7:2c:ca:aa:
27:b6:be:97:eb:cd:9b:fb:ed:c4:4c:a7:8e:d2:db:
ac:7e:b0:97:a6:a3:08:a9:b8:f7:0c:59:91:da:d1:
95:77:52:63:64:f8:6b:71:47:fd:67:db:8f:35:a3:
e4:31:48:9a:1e:c7:c7:fa:3f:8a:58:52:53:56:e5:
77:d5:02:d6:29:ba:8a:01:e6:2f:8c:c9:0f:e5:10:
13:14:9a:58:64:64:45:47:7a:e2:5a:e6:3e:a4:48:
a3:9b:28:2c:61:9b:31:27:93:03:c2:49:a9:30:ff:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0E:70:9E:D2:B8:29:FA:07:2A:9B:31:FB:3D:5D:AE:1C:99:DB:65
X509v3 Authority Key Identifier:
keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d0:d0:7d:2e:dd:4f:38:1a:e7:76:0c:f6:29:f1:f4:51:e3:
18:53:6b:ec:c3:5c:9f:48:ab:f9:52:61:c3:ca:bb:7f:a9:b1:
a5:9b:50:66:6a:77:10:d5:05:5f:cb:2e:6c:cd:f7:0f:af:19:
81:0f:37:30:57:16:55:eb:cc:96:d5:d1:0b:ab:33:be:43:df:
da:2c:c3:81:4c:7e:1d:f4:80:7d:cb:14:65:18:4c:2d:d7:b3:
85:6f:bb:ba:2f:66:d0:2a:b5:3d:2d:67:a9:68:4e:9b:9c:1e:
91:b3:66:f6:ff:23:af:9e:63:98:cc:44:06:42:4d:23:4d:18:
ba:85:4d:f1:57:d7:47:82:20:00:ed:f1:91:31:d5:12:a7:a7:
5c:a1:db:fd:b6:29:6c:8e:16:2f:83:98:e7:68:7a:b2:78:de:
77:03:a6:91:16:6d:4a:bc:35:bf:c9:23:b9:7a:f3:39:e7:0f:
84:bb:55:26:26:68:98:2b:f3:5a:cf:ae:b4:c5:3b:fb:4a:98:
68:3b:8e:87:a2:f0:e4:c6:f6:34:95:b9:fa:7a:b8:65:c8:bb:
5f:cf:ef:54:a9:6d:a6:85:71:83:ab:10:14:5a:67:36:02:b0:
dd:65:0c:62:00:2d:77:d5:a6:11:f3:99:6b:eb:55:07:d8:b5:
c7:70:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:25:26 2024 by rpki-client on console-ams.rpki-client.org