Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
File: ThDafpumSZaP9RoB5aLULyK35N0.mft (raw, json)
Hash identifier: YCoXHZ81RGomSb0WSU3Gy0Oh8PsVwz3nnHMv+q91WQ8=
Subject key identifier: D7:6F:D3:8C:84:AB:7E:C3:84:7D:3D:04:08:7B:2A:38:7F:97:3D:E3
Authority key identifier: 4E:10:DA:7E:9B:A6:49:96:8F:F5:1A:01:E5:A2:D4:2F:22:B7:E4:DD
Certificate issuer: /CN=4e10da7e9ba649968ff51a01e5a2d42f22b7e4dd
Certificate serial: 01903707C8BCE67A17E035490FC7136FA48B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
Manifest number: 0478
Signing time: Thu 20 Jun 2024 19:02:55 +0000
Manifest this update: Thu 20 Jun 2024 19:02:55 +0000
Manifest next update: Fri 21 Jun 2024 19:02:55 +0000
Files and hashes: 1: ThDafpumSZaP9RoB5aLULyK35N0.crl (hash: VSGCvA/JISXRinjRPiJxkglK+aR+yCvy5jb6G2DmDn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:07:c8:bc:e6:7a:17:e0:35:49:0f:c7:13:6f:a4:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e10da7e9ba649968ff51a01e5a2d42f22b7e4dd
Validity
Not Before: Jun 20 19:02:55 2024 GMT
Not After : Jun 21 19:02:55 2024 GMT
Subject: CN=d76fd38c84ab7ec3847d3d04087b2a387f973de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:32:7b:4c:b3:54:55:c9:40:c8:43:a8:00:
03:42:33:ad:ee:09:b9:7f:57:1f:39:fc:60:4e:b3:
e5:f8:68:9c:6e:73:8f:9e:16:e4:cf:f1:c0:3f:05:
b1:d5:b9:06:ae:a6:74:73:7a:c5:9b:dd:02:d7:b8:
e5:2f:4d:ba:ae:e7:1d:43:79:7a:36:75:8f:ff:4d:
6f:d4:85:51:6d:d5:c7:87:4a:3e:f4:77:37:64:5c:
db:b9:f7:99:37:47:7c:b7:52:eb:ea:9c:28:00:8b:
de:8d:9b:0e:0c:09:5b:e3:e8:5b:a3:57:32:44:b7:
9c:0b:f7:bc:4b:c1:2f:ef:2f:28:99:c2:40:c0:fb:
d4:d5:be:f1:82:cc:16:38:5d:1e:69:c4:af:02:fb:
e2:c9:3d:7a:0a:4f:61:9c:12:7d:3a:0f:2a:76:4e:
20:eb:9d:00:eb:33:94:70:f1:a5:ed:56:a3:2f:1d:
c4:25:ff:26:93:fb:f8:9b:64:48:7d:dd:0c:84:a7:
b3:e4:24:2f:2c:9d:f6:ac:6b:e5:2c:d3:71:83:f3:
f3:5d:e5:6b:f3:13:0e:c6:33:bc:c1:ff:5d:24:ce:
aa:20:e0:a5:fc:81:7e:ff:29:54:93:e3:b1:f8:b7:
ac:f2:fd:86:90:b5:53:48:0f:1a:ca:47:7c:69:ad:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6F:D3:8C:84:AB:7E:C3:84:7D:3D:04:08:7B:2A:38:7F:97:3D:E3
X509v3 Authority Key Identifier:
keyid:4E:10:DA:7E:9B:A6:49:96:8F:F5:1A:01:E5:A2:D4:2F:22:B7:E4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:59:1f:2b:c5:4e:d8:1b:ae:02:14:43:69:c4:25:96:ad:22:
7e:a2:3c:5a:09:db:dc:f2:a8:f2:45:5e:a2:65:35:82:04:96:
bd:42:f3:46:67:00:16:ea:ca:45:57:a5:5b:50:28:c8:e9:94:
61:c2:a4:09:09:c2:45:21:df:0c:a1:f0:1e:97:f8:13:5c:a3:
56:cd:3b:b9:d8:35:47:70:7a:a0:a1:a0:e3:54:f7:1c:9c:15:
ea:90:f0:e3:c7:ed:77:b2:47:56:32:3e:16:dc:0a:36:ba:3c:
c7:82:86:d0:0f:f9:d5:26:81:f7:fc:65:01:98:77:4a:d1:79:
22:c4:c8:4c:29:92:f2:74:ef:ed:50:71:35:b0:66:76:25:4b:
1a:ba:ac:27:23:78:de:ad:97:b0:dd:87:71:cf:4f:38:36:4d:
1e:ee:89:1a:ea:30:a2:b7:62:cf:82:96:87:ec:d7:96:d6:06:
80:1e:c2:7f:65:fc:34:50:5e:cd:ce:43:a3:26:27:c8:72:77:
be:42:7a:46:59:6a:d4:fe:b8:32:e1:47:eb:69:0c:55:52:64:
2a:9e:e6:32:b1:c7:83:cf:7e:91:d4:46:19:b0:8b:7d:98:57:
45:f8:a5:7c:a1:3e:fe:93:4e:41:c6:9e:00:3e:ad:7b:db:00:
9e:0b:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:22:31 2024 by rpki-client on console-ams.rpki-client.org