Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9c7703-8d14-4bc0-88a9-b9a86ac3e8be/1/XtGkql_QUBs-ptafQzwvFkIRYIk.mft
File: XtGkql_QUBs-ptafQzwvFkIRYIk.mft (raw, json)
Hash identifier: /OMHRzoep+6cgNIj3gkC2S3iXCWlHvPLrSc8th77S2w=
Subject key identifier: 5F:10:87:BE:B2:0D:6C:26:47:81:89:6B:4E:D6:EC:CC:70:90:4A:96
Authority key identifier: 5E:D1:A4:AA:5F:D0:50:1B:3E:A6:D6:9F:43:3C:2F:16:42:11:60:89
Certificate issuer: /CN=5ed1a4aa5fd0501b3ea6d69f433c2f1642116089
Certificate serial: 019044F8E7AA4F532F8D471C614A95488683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtGkql_QUBs-ptafQzwvFkIRYIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9c7703-8d14-4bc0-88a9-b9a86ac3e8be/1/XtGkql_QUBs-ptafQzwvFkIRYIk.mft
Manifest number: 11D5
Signing time: Sun 23 Jun 2024 12:01:21 +0000
Manifest this update: Sun 23 Jun 2024 12:01:21 +0000
Manifest next update: Mon 24 Jun 2024 12:01:21 +0000
Files and hashes: 1: XtGkql_QUBs-ptafQzwvFkIRYIk.crl (hash: w/IJUjFcZtL9x7eJBxECedz/C+wExQjGYcIz4ds1pkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9c7703-8d14-4bc0-88a9-b9a86ac3e8be/1/XtGkql_QUBs-ptafQzwvFkIRYIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9c7703-8d14-4bc0-88a9-b9a86ac3e8be/1/XtGkql_QUBs-ptafQzwvFkIRYIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtGkql_QUBs-ptafQzwvFkIRYIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:f8:e7:aa:4f:53:2f:8d:47:1c:61:4a:95:48:86:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed1a4aa5fd0501b3ea6d69f433c2f1642116089
Validity
Not Before: Jun 23 12:01:21 2024 GMT
Not After : Jun 24 12:01:21 2024 GMT
Subject: CN=5f1087beb20d6c264781896b4ed6eccc70904a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:27:25:b0:6d:8f:fe:ed:6e:b0:fd:dd:04:
1a:a7:50:a1:69:cd:9a:e5:85:0c:d4:21:f1:73:71:
d8:bb:2b:06:4b:3c:e7:68:cb:c4:e5:11:56:22:fc:
17:64:97:81:3c:d5:8a:d2:56:8e:ca:24:ea:1b:0d:
96:18:ce:ed:a9:43:ff:0a:0a:6d:73:dd:52:99:11:
ae:eb:f6:d0:80:7b:5f:23:b1:21:49:db:81:dd:23:
82:2a:07:92:70:e5:8f:8c:ef:24:78:a9:ec:61:4e:
8a:a5:62:fc:09:01:91:72:4d:f4:f8:de:f1:a5:04:
a7:05:55:da:9b:7c:ce:ca:1b:8d:5b:d8:43:a9:cc:
c8:05:0f:88:c4:a3:49:19:1f:b6:2d:4e:7b:6d:00:
ac:0f:a6:2d:0f:d9:f9:9a:cd:99:f8:b4:f5:f2:15:
d5:d8:86:f4:49:c0:fe:9a:6e:fb:dd:b9:9e:30:89:
06:99:fb:8d:60:d8:92:ca:99:f6:81:75:d4:63:23:
f0:cd:0d:42:c5:1d:24:51:8b:98:b8:27:86:85:48:
bb:01:0e:87:d7:99:4c:09:90:b4:7c:46:e8:e3:db:
63:ad:d2:d2:24:46:32:dc:ec:ef:8d:17:63:c9:7c:
06:0c:e3:66:20:7c:80:af:ae:f5:ad:72:82:2a:4f:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:10:87:BE:B2:0D:6C:26:47:81:89:6B:4E:D6:EC:CC:70:90:4A:96
X509v3 Authority Key Identifier:
keyid:5E:D1:A4:AA:5F:D0:50:1B:3E:A6:D6:9F:43:3C:2F:16:42:11:60:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtGkql_QUBs-ptafQzwvFkIRYIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9c7703-8d14-4bc0-88a9-b9a86ac3e8be/1/XtGkql_QUBs-ptafQzwvFkIRYIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9c7703-8d14-4bc0-88a9-b9a86ac3e8be/1/XtGkql_QUBs-ptafQzwvFkIRYIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:43:a9:73:b4:18:a2:28:c3:a5:ca:dc:1a:ae:12:c7:8f:ac:
17:ca:54:5c:0e:26:37:c9:67:3a:69:34:46:96:1f:33:24:0b:
d6:a9:c7:bb:75:4e:ae:8d:88:0f:db:3b:11:bf:35:d3:ea:f5:
d9:15:7a:34:c8:85:ea:1b:f0:1c:82:a5:1e:53:8b:e8:86:29:
6a:bb:58:29:23:de:b4:e0:34:a3:c7:45:c0:f1:0e:63:c0:29:
d6:24:ea:fb:bb:51:18:4d:fe:7b:41:c7:a5:fb:0a:76:6b:97:
d0:c3:98:4e:ab:cf:a6:54:fb:83:63:26:08:0d:a1:a5:32:f3:
a1:4c:80:3c:1c:65:41:0a:1d:8e:d4:03:27:49:ce:49:98:11:
2d:61:9b:2a:2c:fa:e4:ac:33:e3:fa:a2:d3:3f:a6:e2:56:9d:
53:de:63:91:d4:23:a7:58:52:a2:28:c0:37:58:ba:f2:15:42:
3c:7a:5e:04:cc:c7:08:ab:59:c4:51:f7:a2:bc:bd:1b:70:b2:
22:81:56:1c:27:64:91:04:c7:3c:5c:79:53:55:ac:a1:f2:86:
83:ca:ff:e5:b4:0a:75:fa:7d:fc:c1:82:ac:4e:60:8d:aa:d9:
a7:11:86:f5:89:b1:bb:a7:c8:31:ee:a2:5d:82:40:32:47:b9:
6b:01:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:04:34 2024 by rpki-client on console-fra.rpki-client.org