Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
File: sNcTFlrGKE-0HV38gmV3_B2gtzA.mft (raw, json)
Hash identifier: LNJPG8USQddYHRcLMpRvOic7PPizgbvemdyjKsJz9dk=
Subject key identifier: 23:9C:D1:7A:66:67:45:E6:39:D6:98:C8:FF:D3:92:9A:0E:66:9A:C9
Authority key identifier: B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
Certificate issuer: /CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Certificate serial: 01901BFCB1F2D48B35BF5406772F05D9EE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
Manifest number: 0EDB
Signing time: Sat 15 Jun 2024 13:01:03 +0000
Manifest this update: Sat 15 Jun 2024 13:01:03 +0000
Manifest next update: Sun 16 Jun 2024 13:01:03 +0000
Files and hashes: 1: sNcTFlrGKE-0HV38gmV3_B2gtzA.crl (hash: oUcbrI4xAJwaLVjIsfR2DdwcOlSVbYk64ce/9MuysQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1b:fc:b1:f2:d4:8b:35:bf:54:06:77:2f:05:d9:ee:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Validity
Not Before: Jun 15 13:01:03 2024 GMT
Not After : Jun 16 13:01:03 2024 GMT
Subject: CN=239cd17a666745e639d698c8ffd3929a0e669ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:ae:8b:6d:90:13:b5:b6:56:52:72:df:fd:
22:8e:04:de:55:e7:c6:83:cc:05:46:dc:c3:0c:9f:
47:d9:1e:b4:0f:63:74:64:4d:ac:f0:c5:09:41:f3:
a8:0e:74:40:6e:53:47:e2:45:3d:84:da:9b:19:e7:
64:f1:77:2e:5d:71:2c:d9:dd:6d:25:49:b6:93:5f:
02:ec:c5:50:d8:14:a8:47:a2:2b:9f:86:52:85:5c:
bf:9a:f0:a4:3f:09:3d:c6:3a:92:56:4b:35:ff:d0:
8b:1c:fb:02:37:b7:7e:bd:51:ae:40:18:bd:d0:18:
ab:60:39:0b:ac:9e:8e:2e:a1:75:fb:40:24:7f:c9:
96:fa:ba:b0:98:63:a9:2d:16:23:8d:9d:a9:72:cc:
f0:61:9e:18:94:c1:e0:c0:6c:1d:7a:a2:46:9b:0f:
d4:c1:1d:b3:69:68:e8:30:18:33:a3:f3:d6:59:bf:
11:31:c8:cc:be:fa:da:b5:a7:8f:b9:1a:6b:0f:a1:
28:fa:c7:8a:a9:93:eb:ce:5f:44:25:13:1e:f0:d7:
4f:67:5e:1d:d7:30:9d:55:bf:b1:cb:08:0a:a2:f7:
95:b7:72:86:67:4f:dc:5b:cd:5d:58:ef:2e:13:d3:
75:5e:e6:d6:b0:5e:c2:07:d0:ec:21:59:40:31:2d:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9C:D1:7A:66:67:45:E6:39:D6:98:C8:FF:D3:92:9A:0E:66:9A:C9
X509v3 Authority Key Identifier:
keyid:B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5c:cc:0e:b6:2f:0e:05:7e:87:f3:11:b1:de:29:f8:dc:f3:
68:f1:40:c1:2b:6f:9b:da:af:8b:45:b2:af:75:cb:7b:4c:e2:
56:c8:80:f5:9c:2b:5d:c6:cd:2a:56:d9:e2:65:02:09:03:08:
ff:b9:3f:6c:40:58:78:8e:bb:eb:71:11:e8:0b:8a:0a:ac:69:
91:ec:78:71:05:c5:93:25:1d:cf:af:25:3f:f8:43:90:3e:a5:
4c:cd:a7:f3:24:2f:64:82:c6:f3:00:ae:33:15:97:be:ce:c7:
ed:f7:25:b5:f7:1f:93:aa:41:51:d0:63:ef:ff:fa:59:76:c9:
9b:7f:32:e0:07:d6:76:fa:ca:df:6c:c6:40:a6:ee:05:bf:54:
98:75:22:75:4b:64:17:21:eb:ab:bf:9c:90:9d:22:b7:2b:e5:
f9:87:48:7d:c5:ac:d0:ee:6c:1f:4f:6e:75:82:41:83:33:79:
17:0c:ce:28:cb:97:ba:d2:c9:d5:1f:8c:e3:ad:14:90:54:9a:
ea:50:3d:a7:42:3a:98:96:54:08:f1:00:18:41:4e:3d:e3:29:
64:c3:f5:f3:ca:85:a0:93:ea:d9:76:0a:87:67:68:1a:55:c0:
a0:d9:ca:8c:4e:6c:de:a2:03:87:7f:90:4f:d4:13:9a:5b:c2:
32:cd:e1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:39:12 2024 by rpki-client on console-fra.rpki-client.org