Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
File: aXC3r07RGKBaFTFefYuUY0yf6iA.mft (raw, json)
Hash identifier: OFbM1TOtrfKDFrRi0NEd9Ym3Dx0WeLU2B/7TWLQm4wA=
Subject key identifier: A4:BD:2E:85:31:9A:B1:1C:B7:87:43:1E:A5:1D:4A:3E:5F:84:3F:B3
Authority key identifier: 69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
Certificate issuer: /CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Certificate serial: 01901B57FB90C25329AF2046403E029F1648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
Manifest number: 074F
Signing time: Sat 15 Jun 2024 10:01:09 +0000
Manifest this update: Sat 15 Jun 2024 10:01:09 +0000
Manifest next update: Sun 16 Jun 2024 10:01:09 +0000
Files and hashes: 1: aXC3r07RGKBaFTFefYuUY0yf6iA.crl (hash: tTup1G5ZaMCf6Rv3R+gWafdsXSBKqSYZS/JddFm3FTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:57:fb:90:c2:53:29:af:20:46:40:3e:02:9f:16:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6970b7af4ed118a05a15315e7d8b94634c9fea20
Validity
Not Before: Jun 15 10:01:09 2024 GMT
Not After : Jun 16 10:01:09 2024 GMT
Subject: CN=a4bd2e85319ab11cb787431ea51d4a3e5f843fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ac:f2:7f:61:2b:73:bd:ca:38:0e:d7:e3:ca:
01:0c:09:84:ab:79:23:95:c2:29:13:8a:39:3a:50:
29:b2:59:5c:f2:af:ff:1e:29:1c:50:c3:ab:51:e7:
cc:6f:64:53:70:33:61:66:bf:d8:6e:c6:32:bd:5d:
f7:6c:9d:db:98:4d:a3:bb:f3:69:32:50:d5:7c:60:
53:a5:48:23:bd:dc:ca:ac:6c:bd:98:84:6b:b8:01:
55:3c:40:51:36:77:c2:05:87:0c:53:dc:a0:99:2a:
55:69:37:09:52:81:5c:67:45:4b:5c:5d:c7:d5:9c:
76:9b:1f:40:17:c8:78:51:ef:23:36:36:a9:cb:d9:
d7:a4:d8:79:82:72:8c:ad:2e:33:40:ff:a1:d6:34:
26:40:bf:cd:78:a5:be:39:b5:41:da:d0:7b:9f:7b:
2b:ba:ae:aa:e7:49:91:82:2f:30:95:58:38:a2:cd:
3f:00:17:c4:14:fe:06:52:68:33:ae:57:55:34:ee:
d1:6c:f8:fc:5b:dd:35:0a:22:4f:eb:07:cc:ab:ee:
2e:8a:c9:37:b7:34:58:b3:3e:f1:bc:0a:04:8c:ef:
4e:2a:a5:a9:49:4d:f8:78:d7:fe:ad:0b:06:92:0a:
57:e0:29:48:e7:70:f8:9e:27:0c:f4:46:c3:96:10:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:2E:85:31:9A:B1:1C:B7:87:43:1E:A5:1D:4A:3E:5F:84:3F:B3
X509v3 Authority Key Identifier:
keyid:69:70:B7:AF:4E:D1:18:A0:5A:15:31:5E:7D:8B:94:63:4C:9F:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXC3r07RGKBaFTFefYuUY0yf6iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6c13ac-38a7-468c-b7f1-b106232a342c/1/aXC3r07RGKBaFTFefYuUY0yf6iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:00:12:f3:3c:ef:dc:fe:f4:eb:eb:b2:b0:50:0e:a2:ea:19:
58:79:2d:44:19:37:1f:d6:96:50:8f:bb:36:4c:45:00:90:7d:
cc:16:d0:c1:71:ff:ab:24:06:80:be:e1:61:c2:f4:f5:c1:2c:
0a:c6:ec:eb:cc:20:1c:bc:fe:3f:06:18:34:0d:9a:48:83:4b:
d1:ff:45:73:b2:55:ff:a5:f9:be:ee:1f:58:69:49:03:db:4f:
11:79:03:be:31:4e:34:5e:b1:d3:c9:51:f6:f2:52:2e:48:ba:
d4:32:5c:43:85:c2:45:b7:08:8e:15:73:18:e9:de:10:1b:08:
29:f1:a0:16:47:b2:0e:af:23:bd:33:0f:f7:b4:84:07:56:31:
8e:68:44:f7:ed:b0:49:92:fe:02:d1:9e:ff:b6:d8:47:35:9c:
d9:0b:e4:6d:78:80:9c:12:55:cc:8e:c3:19:f9:7c:98:1d:26:
85:17:f0:cf:84:0e:ae:cd:70:b8:ea:10:fc:1e:e6:02:16:aa:
e2:c0:34:7d:48:0e:ee:9d:a3:d7:dc:86:4e:59:6c:02:93:90:
22:4b:26:5d:b8:5a:1e:f8:a6:8f:b1:48:e7:de:42:d5:00:44:
ab:20:90:b4:b1:87:76:da:02:87:43:73:b8:13:3b:a8:c4:2d:
80:f3:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:51:56 2024 by rpki-client on console-fra.rpki-client.org