Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.mft
File: YhcForItk4GoI8l5xvTnc0I1I20.mft (raw, json)
Hash identifier: SKCbk8JISZVDYNgL7CqGUEPBrBB88Y4vuI1QrDjPUho=
Subject key identifier: 66:0D:01:28:66:D1:93:E3:CB:06:27:E2:A0:00:79:FD:60:04:06:7D
Authority key identifier: 62:17:05:A2:B2:2D:93:81:A8:23:C9:79:C6:F4:E7:73:42:35:23:6D
Certificate issuer: /CN=621705a2b22d9381a823c979c6f4e7734235236d
Certificate serial: 01901CD8200E8A1CC9E3AF1E1C8747B5CEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhcForItk4GoI8l5xvTnc0I1I20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.mft
Manifest number: 0AA7
Signing time: Sat 15 Jun 2024 17:00:44 +0000
Manifest this update: Sat 15 Jun 2024 17:00:44 +0000
Manifest next update: Sun 16 Jun 2024 17:00:44 +0000
Files and hashes: 1: YhcForItk4GoI8l5xvTnc0I1I20.crl (hash: 5UOjfwPTEasgz9TIrD4BtO1VffPEwqX5vqcD5YfGOMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhcForItk4GoI8l5xvTnc0I1I20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:d8:20:0e:8a:1c:c9:e3:af:1e:1c:87:47:b5:ce:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621705a2b22d9381a823c979c6f4e7734235236d
Validity
Not Before: Jun 15 17:00:44 2024 GMT
Not After : Jun 16 17:00:44 2024 GMT
Subject: CN=660d012866d193e3cb0627e2a00079fd6004067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:22:e1:cc:81:29:04:9b:a3:13:dc:c8:be:
bf:90:1d:c4:05:85:08:18:69:0e:d8:04:74:06:6b:
71:f7:b3:c9:90:d5:80:78:ab:3d:2c:67:92:7a:b0:
5b:1b:69:5d:74:32:e9:65:99:de:4e:5e:7a:9b:67:
da:a5:49:06:8c:0b:23:7d:f2:41:e4:2f:32:f7:68:
da:0b:c2:f3:8f:4c:d5:41:dc:3e:50:81:04:d7:37:
4b:0f:27:96:00:dc:94:e2:ee:a1:52:27:32:37:f1:
48:e7:12:9d:4b:e1:17:a4:71:de:05:88:cb:b0:54:
32:00:ea:7f:24:03:f3:43:6e:d6:88:cd:5a:0e:7a:
91:14:1a:e6:cb:92:06:c7:8b:b9:b4:66:a0:05:fb:
32:b1:38:47:82:40:6d:27:60:b7:55:14:d2:ce:f8:
ca:81:4f:cc:fa:49:dd:25:7f:9e:e2:46:39:6c:4f:
82:b8:7d:5b:a8:0d:9b:f2:3a:90:2b:0c:a1:1b:e6:
5d:65:d0:66:f0:15:67:bf:f1:e0:0e:32:83:cf:53:
07:b3:de:9a:c5:0d:48:2a:2d:05:6d:60:75:d3:ec:
e9:e8:e8:2f:9e:71:a1:0c:81:58:4a:12:f4:57:09:
9c:3e:79:5e:1d:11:69:ec:9a:8e:fb:66:aa:50:b4:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:01:28:66:D1:93:E3:CB:06:27:E2:A0:00:79:FD:60:04:06:7D
X509v3 Authority Key Identifier:
keyid:62:17:05:A2:B2:2D:93:81:A8:23:C9:79:C6:F4:E7:73:42:35:23:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhcForItk4GoI8l5xvTnc0I1I20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c9234d-e133-4194-84ac-71a39db88a23/1/YhcForItk4GoI8l5xvTnc0I1I20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:27:ef:cb:8e:f1:d2:f1:52:b1:65:a0:27:5e:f6:36:5c:06:
68:5b:1e:44:96:95:a7:7f:1d:c8:5b:6d:2c:8b:a0:46:2a:22:
03:81:c9:f9:fb:91:c8:1c:94:4e:95:7c:68:97:84:b4:b2:be:
81:ed:ac:16:77:61:a1:ea:fc:6f:0d:93:d6:cc:56:ec:e6:58:
52:c1:86:64:4c:10:e5:c2:b8:9f:5b:05:1c:17:a8:39:11:4f:
09:8f:93:59:6e:c4:e1:c9:8e:42:9c:9b:61:ad:f5:20:97:7d:
c1:ba:df:2a:50:8b:e5:b3:32:e9:b8:02:a9:be:93:67:6a:df:
02:1e:9a:4f:99:57:4e:d0:54:3c:53:b9:21:76:a6:ba:22:16:
97:c0:f2:c8:a4:07:f0:f3:07:cb:89:73:33:78:25:a9:6d:d4:
f1:cb:6e:4c:2f:fe:e6:59:3a:a1:d1:93:a3:ca:c8:6c:3b:30:
0e:5f:32:52:d3:52:c2:a4:98:c8:9b:98:ef:1e:4b:54:d6:de:
2f:22:1a:d0:ec:8a:33:ba:22:73:85:72:87:cd:52:06:7e:8e:
85:3c:28:1f:58:eb:19:f4:35:f4:62:e7:ac:ac:ed:f2:5e:20:
41:6b:7f:15:b4:f2:13:0b:5d:f4:c0:ae:7c:68:bb:33:59:27:
85:47:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:26:46 2024 by rpki-client on console-fra.rpki-client.org