Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
File: h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft (raw, json)
Hash identifier: 3Omrg2ntcRWzGLfQEAM0bCrCIs6uilYcit9dagU3m2k=
Subject key identifier: 1D:CA:71:2F:95:7E:A9:08:77:BA:73:1F:46:CD:FE:D4:5F:0F:23:47
Authority key identifier: 87:C0:A7:B4:3D:42:92:49:17:A5:90:59:8B:44:32:5E:4C:C9:2E:E4
Certificate issuer: /CN=87c0a7b43d42924917a590598b44325e4cc92ee4
Certificate serial: 01901CD835BC65900393E60D4D08119782E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
Manifest number: 0599
Signing time: Sat 15 Jun 2024 17:00:49 +0000
Manifest this update: Sat 15 Jun 2024 17:00:49 +0000
Manifest next update: Sun 16 Jun 2024 17:00:49 +0000
Files and hashes: 1: h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl (hash: l7byKbV4TtFsTWQo151h2HTAWLjriiNnLwy21vcyjuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:d8:35:bc:65:90:03:93:e6:0d:4d:08:11:97:82:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c0a7b43d42924917a590598b44325e4cc92ee4
Validity
Not Before: Jun 15 17:00:49 2024 GMT
Not After : Jun 16 17:00:49 2024 GMT
Subject: CN=1dca712f957ea90877ba731f46cdfed45f0f2347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:6f:2b:c3:38:b6:96:dc:15:f6:52:13:ab:
a5:b1:ff:44:0f:7e:b4:61:ec:1b:90:72:94:c0:49:
21:56:32:c5:0d:81:2b:ee:7b:5e:b6:4c:6f:df:19:
9a:58:46:7e:ef:9e:94:a3:11:89:8f:8c:9f:cd:7b:
e9:dc:ed:bb:b6:bf:21:b8:b7:e5:40:9e:c5:59:f2:
23:61:c6:70:e4:72:f7:b6:95:47:a4:12:ba:ab:78:
d7:67:f4:0f:d7:16:37:31:03:3c:2e:3e:32:5f:94:
ce:59:e1:02:ab:bb:54:8c:17:f0:60:31:59:9b:fd:
ba:e1:20:ed:77:9b:79:da:74:e3:9e:8b:3f:1c:47:
28:b8:0f:a4:98:12:14:88:61:44:26:ff:b2:52:87:
b7:d0:46:ed:96:bc:89:44:06:3f:62:58:f6:34:a6:
7d:d8:93:36:4a:47:aa:d5:00:18:02:62:ff:eb:e4:
73:47:59:0d:f1:e8:3d:60:c0:4c:b1:da:b2:ea:b6:
cb:7b:94:4c:54:6d:d7:33:a7:f8:d1:d6:48:ed:11:
4a:dc:01:19:4b:61:cd:10:d7:e4:b9:cc:45:d0:37:
99:b4:42:f2:17:76:ec:f5:51:bc:45:1b:96:9b:74:
60:0d:b5:37:fe:55:53:80:ba:5d:e1:12:04:8b:94:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CA:71:2F:95:7E:A9:08:77:BA:73:1F:46:CD:FE:D4:5F:0F:23:47
X509v3 Authority Key Identifier:
keyid:87:C0:A7:B4:3D:42:92:49:17:A5:90:59:8B:44:32:5E:4C:C9:2E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:97:34:55:76:b5:71:1e:ff:eb:ac:bb:70:27:e5:6d:2e:84:
fb:ec:da:ff:96:90:c0:ce:ba:69:d2:2f:4d:66:5d:12:f6:8e:
9c:2a:18:1d:c3:75:f4:1d:42:ef:8f:c2:2c:9f:6d:09:ec:fa:
dc:82:5a:09:b9:61:3d:e9:94:20:39:61:39:88:f2:41:12:05:
0f:02:24:f2:d7:f8:45:4d:f6:5d:8a:bc:80:b3:67:46:57:e4:
cd:ba:08:b8:41:47:59:85:0e:cf:0b:ce:5d:98:62:4b:20:2e:
2e:7a:d3:90:1d:dd:8b:8d:23:ab:ce:dc:40:88:33:bf:ae:bf:
5a:34:4d:90:ac:2e:8d:04:eb:76:7b:88:e5:ea:79:70:25:14:
8d:ac:d9:09:73:27:ab:8d:1c:60:b4:e8:f8:89:f7:af:c8:ca:
28:18:c7:c1:14:1d:0e:c0:1c:7e:3d:37:33:6d:c9:f6:35:a5:
26:3e:0b:ab:d9:5a:ac:22:41:85:fb:31:72:fd:d1:67:50:a6:
5a:df:40:e1:02:30:21:0a:51:f7:66:a2:42:e9:70:ac:1e:7e:
e4:db:a2:ca:27:dc:31:4d:11:b0:6a:33:ea:8c:1b:e6:e9:2f:
07:78:1c:1e:4b:ec:e3:98:37:41:f1:97:df:0b:b5:28:d2:36:
c1:91:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:29:26 2024 by rpki-client on console-fra.rpki-client.org