Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: gRODE4ceNgTuu5Jc3CF550cZGXugdgscJo4iuQW89LY=
Subject key identifier: 27:05:C6:89:2B:D2:DE:AD:C7:8A:B8:72:16:6C:70:91:F0:71:AD:B2
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 019041F7422DB7769C136EB4C43C2AF93223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 0E6A
Signing time: Sat 22 Jun 2024 22:00:41 +0000
Manifest this update: Sat 22 Jun 2024 22:00:41 +0000
Manifest next update: Sun 23 Jun 2024 22:00:41 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: 9WI2pMkgFBr89s3Bo2MMkQWmVGkqoLPotuFW88lrmp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:f7:42:2d:b7:76:9c:13:6e:b4:c4:3c:2a:f9:32:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Jun 22 22:00:41 2024 GMT
Not After : Jun 23 22:00:41 2024 GMT
Subject: CN=2705c6892bd2deadc78ab872166c7091f071adb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cb:4e:2c:13:ab:b0:04:45:72:00:cf:3f:5f:
e7:c9:f7:4f:a3:db:8e:c4:55:fb:74:a7:3c:d7:6d:
32:b1:9b:29:6e:ff:1a:bf:da:0c:b5:03:f3:d8:b1:
55:2c:e0:3e:a5:b2:c6:bf:04:12:3d:ee:63:b3:0d:
cc:d4:b0:31:a4:ff:fd:e2:2f:ca:6c:2a:bf:34:ee:
fd:2b:e0:e2:d6:01:5a:1c:97:ae:09:25:ef:0c:b4:
fb:d0:8c:f7:81:95:e5:b3:e9:fc:db:31:08:1f:d9:
4d:95:21:ca:80:57:87:3f:7c:d7:5e:ec:4c:33:ef:
d6:4c:e1:73:f0:77:f9:6f:d3:a5:d6:57:6a:27:12:
7b:8e:14:1b:07:88:3b:bc:35:ac:10:83:4c:f8:ab:
fe:c8:a8:2b:3e:29:a3:7c:dd:ad:b6:27:6d:2e:a4:
ec:35:b8:e2:a5:5b:95:8b:b4:e9:95:1b:4b:c4:b1:
d3:db:43:4d:2b:f0:a0:2a:73:e8:e5:d8:54:a0:0e:
21:ef:3c:08:96:04:9b:84:e5:08:b5:ca:e9:46:12:
66:74:97:d2:0b:2a:d9:69:ee:29:ef:b1:97:38:2e:
9d:7a:13:0a:0f:7b:dc:cb:ee:88:0e:79:e0:cf:47:
32:d2:cb:b0:d5:69:95:94:ac:97:58:da:02:cd:49:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:C6:89:2B:D2:DE:AD:C7:8A:B8:72:16:6C:70:91:F0:71:AD:B2
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c3:e1:a1:97:d9:a6:28:bb:22:30:d8:da:9e:ae:4d:e4:83:
97:2b:9f:1e:c7:ad:c4:d8:9e:69:bd:ac:e4:94:69:5f:1b:76:
4d:c4:e1:83:b4:96:a7:aa:96:8f:c2:51:30:c3:7d:b4:48:8f:
f1:be:02:95:a0:a8:f5:96:2c:76:94:9c:a5:ec:6e:9b:c4:7c:
61:a1:c8:fb:db:07:cc:56:17:d2:db:2c:c1:03:73:86:9f:39:
dd:54:9e:a8:56:da:8b:f9:15:c9:27:0f:a6:c4:8a:7d:24:2f:
4e:21:b0:7d:f1:e9:67:b3:6e:47:5d:af:3b:68:a2:78:78:06:
b1:c6:3b:5b:1a:91:1a:05:f2:d7:ce:49:4a:86:5e:b7:4d:bf:
c0:32:f4:93:28:74:fa:d0:1a:b0:24:40:c2:c1:d9:70:d0:07:
38:ab:d9:c6:74:7b:dd:19:73:9c:6d:be:1c:49:93:34:01:87:
f4:c1:8a:0e:d2:ee:0e:3a:8f:b1:8f:34:61:8f:cc:e7:8c:9b:
06:de:69:61:12:78:60:7b:eb:04:d5:39:f0:4b:e8:2b:2a:b1:
be:7b:ea:5b:aa:e5:10:24:cd:60:86:22:e7:f1:d2:99:10:bc:
d6:e3:1a:d7:4e:22:83:41:81:a1:b2:76:d0:ee:a9:8a:0c:62:
49:2e:96:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:17:41 2024 by rpki-client on console-ams.rpki-client.org