Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
File: xgFrbMmH1H-VES1qQ_OHsShaM28.mft (raw, json)
Hash identifier: B6Aeil8g4+U5x742RgKYls8nMv715mMBnLy3I80N/tQ=
Subject key identifier: D2:3F:2F:0A:0D:0E:2E:E1:D5:99:B7:0D:2E:4B:B4:F2:7F:A3:5B:3D
Authority key identifier: C6:01:6B:6C:C9:87:D4:7F:95:11:2D:6A:43:F3:87:B1:28:5A:33:6F
Certificate issuer: /CN=c6016b6cc987d47f95112d6a43f387b1285a336f
Certificate serial: 0192384A6D76EA37C38758474EBFECB714C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xgFrbMmH1H-VES1qQ_OHsShaM28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
Manifest number: 0193
Signing time: Sat 28 Sep 2024 11:00:54 +0000
Manifest this update: Sat 28 Sep 2024 11:00:54 +0000
Manifest next update: Sun 29 Sep 2024 11:00:54 +0000
Files and hashes: 1: xgFrbMmH1H-VES1qQ_OHsShaM28.crl (hash: maNXpEQrVh5PzVJYk/NcUjjn4UEftIOocCndLpO3fwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
rsync://rpki.ripe.net/repository/DEFAULT/xgFrbMmH1H-VES1qQ_OHsShaM28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:4a:6d:76:ea:37:c3:87:58:47:4e:bf:ec:b7:14:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6016b6cc987d47f95112d6a43f387b1285a336f
Validity
Not Before: Sep 28 11:00:54 2024 GMT
Not After : Sep 29 11:00:54 2024 GMT
Subject: CN=d23f2f0a0d0e2ee1d599b70d2e4bb4f27fa35b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e9:b9:f1:f5:ce:6b:de:42:66:eb:ec:95:e5:
5b:c6:1b:0f:45:d4:bf:63:2e:90:43:61:46:d9:4c:
e9:14:1e:ae:8b:50:fc:81:f4:7e:a0:40:cf:b7:be:
2d:ca:99:c9:b8:ba:6c:6e:c3:7d:8c:a4:a0:5b:7e:
84:6d:32:7b:13:81:4b:62:69:dc:83:9c:89:61:ef:
01:56:96:f6:bf:d0:f2:bb:eb:56:25:7e:96:b1:83:
db:73:f6:9b:40:85:29:17:47:91:32:04:1e:94:e9:
c3:ff:b0:86:c7:59:18:23:30:ca:f7:0f:45:e4:3c:
91:c3:00:52:20:b6:48:d0:54:58:65:54:c3:6c:77:
c6:01:8b:14:e0:c7:9a:3a:ad:e5:7f:0b:b4:37:20:
36:37:ea:cd:ca:f9:fe:5b:97:ca:21:a5:5e:76:7d:
70:11:d2:b8:36:af:bb:ef:3f:d4:c5:81:43:f1:20:
da:68:d4:0f:72:c2:cb:6d:a9:d9:56:91:2c:01:8b:
e0:43:df:21:c1:92:6b:32:9e:43:f4:e0:7b:3a:f7:
bf:1c:2c:69:31:5a:da:13:61:9f:04:43:80:91:20:
c2:ff:7e:7b:60:bb:0d:bd:c9:49:87:cd:ee:6f:11:
d0:4d:e5:65:11:0f:1b:c6:8b:06:03:c2:c9:6b:22:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3F:2F:0A:0D:0E:2E:E1:D5:99:B7:0D:2E:4B:B4:F2:7F:A3:5B:3D
X509v3 Authority Key Identifier:
keyid:C6:01:6B:6C:C9:87:D4:7F:95:11:2D:6A:43:F3:87:B1:28:5A:33:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgFrbMmH1H-VES1qQ_OHsShaM28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fb6691-1657-4695-b689-974de2cb66e9/1/xgFrbMmH1H-VES1qQ_OHsShaM28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1d:78:66:b5:83:c3:f8:ad:42:57:ce:85:6c:62:89:cc:fc:
f0:b6:67:19:84:40:21:1c:5a:1e:d2:80:38:00:cd:b1:0f:bc:
53:a4:d4:ca:11:75:1b:18:25:78:88:30:09:5a:b4:e6:f4:f0:
45:b7:48:6e:c3:bd:c4:68:5b:19:01:f6:6d:58:07:fe:21:da:
a3:52:3e:3d:6a:c8:03:b3:72:87:c9:67:c7:cf:47:d9:3a:b7:
ab:87:73:2f:da:86:3f:aa:df:af:02:b2:67:ed:26:39:7c:c3:
31:09:8a:b6:a0:91:53:60:5c:a9:5f:68:d9:d1:7e:6b:90:14:
be:ac:8b:2f:7d:43:81:ef:9e:b0:26:0b:02:c8:e0:60:60:54:
2b:ff:33:78:e7:81:90:bb:0c:55:12:5d:59:c4:cd:80:30:7f:
59:ac:5c:99:74:39:c6:c8:64:7f:ee:89:74:b2:7c:4d:cc:15:
5e:42:e0:61:cb:15:52:fa:6d:fe:42:a8:44:0e:1a:74:dd:02:
07:12:6d:01:4a:be:19:9a:2e:0f:2b:8a:c7:d8:41:77:67:43:
1d:43:4f:f1:ee:c5:61:bf:31:b8:7f:27:2e:48:3b:6e:b3:ca:
25:6b:a2:99:b7:38:1b:2d:52:51:d7:c3:00:87:86:1c:59:2c:
af:ba:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:02:45 2024 by rpki-client on console-fra.rpki-client.org