Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
File: 1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft (raw, json)
Hash identifier: V2xkFlJd6l//FtjfXbKx/ZqsBkEjKkG1Zr2/BmLr2dE=
Subject key identifier: D4:12:38:1B:38:5B:BC:8B:54:C3:B3:DB:E2:3C:43:AA:61:4F:B1:C0
Authority key identifier: F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01
Certificate issuer: /CN=f9f7c77bce45487dee7fac0389a6f74dbc3c3c01
Certificate serial: 01903AE356AFBFFD7FAEF6ABD5BE3ECA31A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
Manifest number: 0796
Signing time: Fri 21 Jun 2024 13:01:35 +0000
Manifest this update: Fri 21 Jun 2024 13:01:35 +0000
Manifest next update: Sat 22 Jun 2024 13:01:35 +0000
Files and hashes: 1: 1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl (hash: LMKFcj428iKbWHbNofTM3e1aPjAtSl5ijI310olysvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:e3:56:af:bf:fd:7f:ae:f6:ab:d5:be:3e:ca:31:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f7c77bce45487dee7fac0389a6f74dbc3c3c01
Validity
Not Before: Jun 21 13:01:35 2024 GMT
Not After : Jun 22 13:01:35 2024 GMT
Subject: CN=d412381b385bbc8b54c3b3dbe23c43aa614fb1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:40:c7:a3:bf:78:08:66:9f:c1:29:2a:ba:02:
64:9a:5a:0b:80:9d:ec:4b:99:92:79:d9:eb:bb:03:
74:be:ad:43:7f:ff:3d:bf:07:0b:bb:a4:de:c6:74:
21:25:e2:32:05:ae:f4:88:4b:26:a7:3f:91:25:96:
c1:25:1b:5f:93:95:be:d7:ff:40:34:9d:59:c4:77:
f6:73:df:75:e5:63:56:f3:80:ed:80:36:31:f5:49:
38:6c:40:a3:fc:27:e5:67:2d:02:fa:a2:6a:ec:b6:
6a:dd:0b:41:b7:89:55:84:af:6a:f5:db:ca:6a:9e:
aa:f0:47:04:1e:ba:6c:f7:29:33:5e:1d:c7:c2:25:
0c:21:ca:8b:12:59:f7:7e:56:74:73:fd:15:21:34:
21:18:30:2f:92:3f:8a:51:4f:f8:66:ba:11:cf:9b:
30:c0:7f:fc:86:64:fd:46:2d:a6:85:a9:06:bb:ee:
4c:97:5c:7d:0b:a6:fd:66:6e:d6:4a:ff:ac:80:56:
15:78:8f:ae:1b:66:16:55:11:a4:13:25:62:58:77:
0c:84:9d:8b:12:23:12:7a:3f:f4:4d:6e:5c:57:ac:
80:ba:b1:b8:f5:6b:1b:3a:72:18:05:89:32:9d:cc:
8e:30:e6:36:9f:c2:a5:71:0b:78:26:1c:ec:d5:eb:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:12:38:1B:38:5B:BC:8B:54:C3:B3:DB:E2:3C:43:AA:61:4F:B1:C0
X509v3 Authority Key Identifier:
keyid:F9:F7:C7:7B:CE:45:48:7D:EE:7F:AC:03:89:A6:F7:4D:BC:3C:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ffHe85FSH3uf6wDiab3Tbw8PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/9eac7f-9c21-4877-b0a0-0e9b687b5692/1/1-ffHe85FSH3uf6wDiab3Tbw8PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1b:ad:26:e3:fe:33:8e:3d:3d:94:ad:c5:47:34:5f:7d:6a:
c6:6a:64:e1:4e:7b:40:dd:ce:85:4f:00:0a:ab:3e:6c:28:ed:
42:44:8f:cf:92:f4:55:ae:f5:21:7a:51:77:42:a9:57:d0:aa:
e3:17:d9:14:24:69:04:24:8c:18:c3:3c:80:c5:8c:56:91:76:
4b:07:84:8d:09:b7:50:e6:a7:15:14:ae:df:75:cb:8a:bd:ba:
15:fc:f8:3e:d4:a6:ae:09:54:1e:59:fc:94:36:2b:3d:78:03:
b7:19:b1:63:53:e6:e7:c8:75:fa:33:c4:e6:1c:8b:c6:ab:6d:
f5:ab:99:cb:d7:25:4c:49:a9:a3:8e:97:4c:3f:3c:1d:10:5c:
b7:61:c7:65:0c:37:e8:3c:d2:10:57:df:a2:d2:5d:8b:6c:ba:
f6:7c:a5:c3:cd:35:b6:c3:84:27:0b:16:b9:ea:e2:36:6f:f5:
d1:6e:ea:ac:eb:2f:97:c5:8a:24:03:95:da:bd:74:fc:1c:3a:
f8:a2:97:67:7d:c4:d9:e8:43:d6:88:fc:30:88:fb:9f:ef:6a:
fc:b5:c1:a3:62:2d:a0:42:80:87:b3:2d:75:fc:db:69:18:ea:
28:d8:52:77:a5:ac:9a:f5:66:46:6e:11:e8:b8:12:eb:68:d1:
25:da:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:44:15 2024 by rpki-client on console-ams.rpki-client.org