Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
File: mXZKyKibCft4hQ10xo4dqo8-KvE.mft (raw, json)
Hash identifier: ZIUD1EB3oeBA2JWZn2l/rmluUFwgFim24TsguFAKJ3c=
Subject key identifier: DA:E2:2B:4C:F4:53:0C:26:2B:2D:25:5A:39:F4:E5:DC:6C:A5:B5:50
Authority key identifier: 99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
Certificate issuer: /CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Certificate serial: 01901C6AD8F07CCC8F8D4FDD59E7AD5CF5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
Manifest number: 03D8
Signing time: Sat 15 Jun 2024 15:01:22 +0000
Manifest this update: Sat 15 Jun 2024 15:01:22 +0000
Manifest next update: Sun 16 Jun 2024 15:01:22 +0000
Files and hashes: 1: mXZKyKibCft4hQ10xo4dqo8-KvE.crl (hash: Zxga+2Ltsv4xAC/JUxElpzIYeWYmAn8swhz6QYK2QEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 11:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:6a:d8:f0:7c:cc:8f:8d:4f:dd:59:e7:ad:5c:f5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99764ac8a89b09fb78850d74c68e1daa8f3e2af1
Validity
Not Before: Jun 15 15:01:22 2024 GMT
Not After : Jun 16 15:01:22 2024 GMT
Subject: CN=dae22b4cf4530c262b2d255a39f4e5dc6ca5b550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:5b:82:08:0c:a9:04:3f:fb:6a:d6:e8:43:
17:7b:86:48:70:0c:2d:0b:c7:58:60:c4:ff:fb:63:
ee:91:b7:cf:14:e1:8a:ad:d2:98:39:fd:23:c1:1a:
b4:ef:e9:fc:4e:94:2b:c2:f0:d4:2c:76:c2:09:cd:
9d:60:c1:25:49:46:72:ad:0f:05:a2:2d:84:48:e0:
a2:0c:20:95:73:13:e1:58:9c:c1:cb:7e:ac:00:07:
7d:50:77:1a:f1:ca:65:35:9b:82:28:08:70:44:50:
52:09:f0:58:bb:f8:84:31:24:23:b8:aa:01:a5:bb:
67:9c:b5:e5:bb:f7:41:35:5a:2a:e0:ba:4b:db:8b:
c9:d2:38:08:b7:65:a2:a6:0d:50:d6:76:d8:13:66:
41:6e:6d:a2:97:03:b3:d0:d1:b5:85:19:c5:1b:b8:
6f:ad:1a:6c:a7:9b:66:23:2c:7b:3f:7b:f6:a3:47:
1d:87:82:9e:e5:be:f3:e6:74:2e:ce:52:56:e7:d0:
09:df:03:20:fb:16:33:ce:17:96:7a:41:68:d5:1a:
a2:40:d8:22:d3:a5:b9:47:b1:72:37:48:7f:52:4e:
76:f8:c6:39:96:91:46:a8:16:13:24:2b:a1:a9:e2:
4c:67:3a:6d:53:9d:41:d2:8e:cf:15:79:61:8c:03:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E2:2B:4C:F4:53:0C:26:2B:2D:25:5A:39:F4:E5:DC:6C:A5:B5:50
X509v3 Authority Key Identifier:
keyid:99:76:4A:C8:A8:9B:09:FB:78:85:0D:74:C6:8E:1D:AA:8F:3E:2A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXZKyKibCft4hQ10xo4dqo8-KvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb58eb-7c04-4cb9-8f33-8168cf472962/1/mXZKyKibCft4hQ10xo4dqo8-KvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:32:a5:1e:18:56:2b:12:a1:6e:6b:37:10:1f:e8:69:7e:e2:
49:d9:df:8a:59:43:e0:1d:fb:47:90:a3:ea:af:84:21:59:f0:
db:d6:d8:25:5c:d9:53:68:fd:0d:fe:d7:7c:a0:58:da:b1:03:
84:60:9a:b5:0d:06:89:7a:fc:4e:5e:7b:1b:d8:89:e9:39:a8:
01:11:aa:dc:12:5c:8e:79:78:80:9e:69:22:6e:28:4e:ba:54:
30:bd:33:9f:bf:30:1a:e6:5f:5c:38:ef:b3:57:69:af:01:a5:
b1:9a:51:0b:30:bc:2a:92:a1:83:ac:f5:15:c6:fd:e6:0f:9d:
6e:b4:89:40:27:1b:d2:c4:8a:e4:0b:a8:13:78:bf:97:b8:36:
ff:36:45:18:59:bc:34:5b:42:3f:ef:8d:41:3f:49:64:0f:2f:
a8:78:74:59:9d:c9:f8:78:5c:dd:70:bd:a5:2e:da:e7:a7:d5:
f6:17:d4:bf:22:fd:74:70:85:7c:c6:c1:2b:da:03:eb:60:fd:
8f:3a:11:41:5f:74:21:e4:92:69:7e:9b:a6:20:94:08:de:fa:
ff:0c:61:d5:f0:95:39:22:29:44:fd:ab:36:d4:f6:eb:e2:70:
85:d0:35:93:3b:3a:69:71:01:67:84:bc:55:77:09:20:2d:bd:
dd:91:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:52:06 2024 by rpki-client on console-ams.rpki-client.org