Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.mft
File: WnMRox5rU6F10ZE1sryZOh-5hLE.mft (raw, json)
Hash identifier: xbEZQdBISCUYVB1MGFg7E4VFqbX49PyXPAxi2kpe/3I=
Subject key identifier: DF:55:A3:18:A7:16:99:22:78:1B:B7:3E:9F:E4:DF:7E:1B:2B:A7:C9
Authority key identifier: 5A:73:11:A3:1E:6B:53:A1:75:D1:91:35:B2:BC:99:3A:1F:B9:84:B1
Certificate issuer: /CN=5a7311a31e6b53a175d19135b2bc993a1fb984b1
Certificate serial: 019045D3EF2C1B02ACDFE9F5DF4320C2FF3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnMRox5rU6F10ZE1sryZOh-5hLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.mft
Manifest number: 1000
Signing time: Sun 23 Jun 2024 16:00:35 +0000
Manifest this update: Sun 23 Jun 2024 16:00:35 +0000
Manifest next update: Mon 24 Jun 2024 16:00:35 +0000
Files and hashes: 1: WnMRox5rU6F10ZE1sryZOh-5hLE.crl (hash: UNssPPcYIAYVvbI1ReGxQX60NIXv/jij0JCJt3GetNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnMRox5rU6F10ZE1sryZOh-5hLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:d3:ef:2c:1b:02:ac:df:e9:f5:df:43:20:c2:ff:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a7311a31e6b53a175d19135b2bc993a1fb984b1
Validity
Not Before: Jun 23 16:00:35 2024 GMT
Not After : Jun 24 16:00:35 2024 GMT
Subject: CN=df55a318a7169922781bb73e9fe4df7e1b2ba7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:97:0a:25:e7:d4:d1:35:06:06:88:28:a2:
d0:c5:6e:67:91:7b:58:e8:7a:08:f1:2c:a4:cd:09:
f3:ad:78:0b:ea:0f:20:7f:c8:83:f0:85:e2:13:f2:
30:7a:49:e3:f5:60:2a:43:0c:51:2c:0c:c3:1d:96:
18:88:40:42:ce:34:0e:c0:1e:da:66:da:8d:b0:05:
e4:2a:cc:0a:07:eb:7f:11:4d:34:71:87:e5:ac:20:
3c:ff:e8:e7:1a:13:8f:31:38:65:f9:1d:92:2f:7d:
5d:85:a9:55:db:0f:47:2f:48:f8:c0:ca:e3:74:05:
d8:02:14:ff:27:12:09:60:ee:b5:47:01:f7:98:d4:
82:90:dd:b4:06:ce:20:77:50:62:d7:db:74:06:d1:
b1:ab:a8:65:16:9e:59:98:df:71:09:e5:04:83:9b:
54:3f:d4:81:7e:e9:fd:4d:b9:0d:d2:dc:3f:6a:7d:
a1:c5:6b:9e:79:9b:2b:1a:72:10:79:df:58:bc:3b:
d2:cc:09:0e:b3:ca:c9:7d:80:4d:26:18:0b:1d:4d:
80:9d:73:16:c7:d4:23:19:cc:19:76:42:cd:4a:e4:
db:2d:32:0b:4a:03:8b:9b:86:7e:ee:6d:b0:04:24:
af:50:ab:bb:8d:c4:90:b5:49:65:21:33:04:32:4c:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:55:A3:18:A7:16:99:22:78:1B:B7:3E:9F:E4:DF:7E:1B:2B:A7:C9
X509v3 Authority Key Identifier:
keyid:5A:73:11:A3:1E:6B:53:A1:75:D1:91:35:B2:BC:99:3A:1F:B9:84:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnMRox5rU6F10ZE1sryZOh-5hLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e67781-171d-40d7-9037-1baa83c8a036/1/WnMRox5rU6F10ZE1sryZOh-5hLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:87:c9:8c:9c:a2:ec:16:4d:c3:96:98:a1:c4:14:11:fb:90:
ea:9c:46:b0:b4:07:e6:85:00:4c:a5:14:fd:83:c5:cc:aa:12:
d8:ce:45:f6:b5:81:40:d0:f0:73:a7:09:70:a2:c3:a3:1f:45:
48:e3:c5:31:28:ef:23:f5:bd:37:f5:c9:65:6c:96:c3:dc:ac:
2b:99:4e:6d:78:96:ed:18:b5:63:e9:b2:e4:dd:3b:a0:07:e7:
e0:8e:61:64:91:8a:7a:12:eb:fb:4f:37:36:77:3e:fd:64:aa:
b9:46:a8:1c:5a:f8:07:a2:7b:c6:fb:42:d9:0b:4c:1b:f1:9d:
1c:26:0c:51:8e:ca:e2:25:be:21:7f:2a:cd:b3:24:ef:8a:e6:
a6:8d:cb:56:4d:39:b3:e2:ba:8d:b7:e4:f0:2a:d1:38:62:48:
29:9f:20:d2:3f:69:24:35:5e:27:af:25:7a:a4:96:ee:3f:b4:
83:c0:d3:f3:2e:93:d2:24:70:fe:ac:2d:50:e2:8c:71:47:85:
80:b6:6a:0d:74:1c:7a:40:2d:38:ba:ba:0d:7c:f0:82:8d:98:
4a:35:ae:f5:d5:55:e5:ee:42:83:1b:eb:45:a5:42:b8:95:9f:
22:49:fd:fe:43:b1:a3:5f:2f:b7:18:2d:19:c2:24:51:33:81:
be:07:6f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:03:48 2024 by rpki-client on console-fra.rpki-client.org