Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5ec01d-73aa-448b-8eac-d1f784a657af/1/tbHnuvg0cgaIfbi9k-i-y5jxNMU.mft
File: tbHnuvg0cgaIfbi9k-i-y5jxNMU.mft (raw, json)
Hash identifier: dfQ7GVLYrvKJTGz+GKyRXNmgachoOxJxmnUq5/kYpeI=
Subject key identifier: 49:6B:FD:42:AB:16:8B:16:EE:AB:B0:5B:E6:43:E1:A6:49:1F:41:90
Authority key identifier: B5:B1:E7:BA:F8:34:72:06:88:7D:B8:BD:93:E8:BE:CB:98:F1:34:C5
Certificate issuer: /CN=b5b1e7baf8347206887db8bd93e8becb98f134c5
Certificate serial: 0190448AE4D25B70068BADA8390C7A1CB6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbHnuvg0cgaIfbi9k-i-y5jxNMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5ec01d-73aa-448b-8eac-d1f784a657af/1/tbHnuvg0cgaIfbi9k-i-y5jxNMU.mft
Manifest number: 035B
Signing time: Sun 23 Jun 2024 10:01:11 +0000
Manifest this update: Sun 23 Jun 2024 10:01:11 +0000
Manifest next update: Mon 24 Jun 2024 10:01:11 +0000
Files and hashes: 1: tbHnuvg0cgaIfbi9k-i-y5jxNMU.crl (hash: NFC/cfVvCwtM4t88l5yysw/ltDAspi49YWfH/pV3Ugk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5ec01d-73aa-448b-8eac-d1f784a657af/1/tbHnuvg0cgaIfbi9k-i-y5jxNMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5ec01d-73aa-448b-8eac-d1f784a657af/1/tbHnuvg0cgaIfbi9k-i-y5jxNMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tbHnuvg0cgaIfbi9k-i-y5jxNMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8a:e4:d2:5b:70:06:8b:ad:a8:39:0c:7a:1c:b6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b1e7baf8347206887db8bd93e8becb98f134c5
Validity
Not Before: Jun 23 10:01:11 2024 GMT
Not After : Jun 24 10:01:11 2024 GMT
Subject: CN=496bfd42ab168b16eeabb05be643e1a6491f4190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:85:09:b1:ee:c5:d5:ee:e1:c5:65:9d:f3:
d1:cc:ad:26:74:87:fe:7a:cf:d4:a7:6a:0d:a3:ad:
ca:88:2f:f5:84:25:be:d0:1b:24:71:f3:ab:d4:02:
21:54:24:9a:ba:b1:c5:b6:e5:1d:4c:01:f6:d7:e4:
c2:f9:78:80:7e:5d:30:03:c1:04:a0:f7:70:3a:91:
ee:50:9c:84:78:d1:1b:c5:9e:a9:db:cd:dd:9f:39:
62:29:9d:62:7d:c7:4c:ac:7a:55:35:fd:9e:06:62:
2c:4d:1c:3b:6c:eb:7f:25:1b:b9:2a:45:b6:9d:db:
60:42:78:e5:d8:e1:11:8d:c1:b6:1a:0a:d6:8a:c7:
23:64:b1:1d:fd:27:9c:0a:3b:86:66:d9:e8:78:2b:
11:e1:40:b8:b5:00:24:0b:c0:2d:ad:c5:02:ba:9b:
8f:f0:b2:35:01:84:5b:cc:af:54:af:53:06:f3:a8:
d3:9f:e0:72:05:9d:97:66:61:36:2d:4b:e4:14:c1:
54:1b:9c:f4:0e:a1:d2:82:03:88:ec:67:65:b6:47:
72:5a:f1:0e:ae:fb:f5:fb:12:1b:68:f1:d5:e5:e6:
fb:62:4e:6e:01:e1:80:74:fd:b1:36:1e:44:86:7d:
8a:a6:de:5d:20:e6:9b:ca:f1:be:fe:09:a1:a2:5a:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6B:FD:42:AB:16:8B:16:EE:AB:B0:5B:E6:43:E1:A6:49:1F:41:90
X509v3 Authority Key Identifier:
keyid:B5:B1:E7:BA:F8:34:72:06:88:7D:B8:BD:93:E8:BE:CB:98:F1:34:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbHnuvg0cgaIfbi9k-i-y5jxNMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5ec01d-73aa-448b-8eac-d1f784a657af/1/tbHnuvg0cgaIfbi9k-i-y5jxNMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5ec01d-73aa-448b-8eac-d1f784a657af/1/tbHnuvg0cgaIfbi9k-i-y5jxNMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:be:b0:b5:f7:b2:b8:11:05:bf:49:97:03:5c:65:f2:6d:b4:
ec:01:f6:03:42:c8:49:69:5f:c0:a9:89:ff:2c:e8:d8:f4:47:
5a:28:0b:f4:62:a2:e0:98:de:c6:ef:a2:3d:f8:20:90:d7:56:
92:b2:fd:fa:f3:ce:22:f8:e8:ea:bb:33:65:b0:db:6b:b9:c1:
8f:dd:67:3d:79:1d:12:f0:c7:bf:56:87:41:d9:92:f2:43:54:
76:4d:be:8e:aa:4c:a8:a3:3d:87:bb:c7:79:72:18:89:45:f2:
8f:8c:43:e6:8c:90:72:e7:03:1b:62:15:e7:7c:ec:be:f2:36:
ae:86:51:fd:05:c5:56:35:70:81:05:31:a5:67:2f:cd:e3:15:
68:6d:50:2a:a1:c1:27:39:94:8d:5f:42:90:0a:24:01:fb:54:
e7:7b:91:ed:40:51:ea:a4:bb:b7:99:ba:db:7c:33:d4:f6:7c:
64:7c:84:5c:8f:de:12:ae:13:33:b6:8e:40:12:82:df:aa:f8:
7a:7a:0c:58:8e:1d:c5:d3:42:b3:e6:25:ee:c5:bc:91:70:58:
c5:4e:07:04:65:e7:2b:da:c7:bb:d6:7a:19:7d:8c:62:95:a8:
84:bb:0c:21:b2:19:9f:00:76:d4:b2:53:7c:04:f3:55:d6:c6:
1c:85:49:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:45:00 2024 by rpki-client on console-ams.rpki-client.org