Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: 7be8kHrs8r6rWtzA18uLEXnGAZzazXEKsQioGxrXcv4=
Subject key identifier: D2:C2:D8:24:CB:8C:AB:85:B3:DD:DA:49:71:E0:52:AF:78:42:39:D2
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 01901D461F6999EAF665FF20C6267B325B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 0C86
Signing time: Sat 15 Jun 2024 19:00:52 +0000
Manifest this update: Sat 15 Jun 2024 19:00:52 +0000
Manifest next update: Sun 16 Jun 2024 19:00:52 +0000
Files and hashes: 1: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: gKtht0nmeIBWSNLwl5JjN3cVEzRbEQApBykS0TfUPk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1d:46:1f:69:99:ea:f6:65:ff:20:c6:26:7b:32:5b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Jun 15 19:00:52 2024 GMT
Not After : Jun 16 19:00:52 2024 GMT
Subject: CN=d2c2d824cb8cab85b3ddda4971e052af784239d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1b:3e:99:47:d3:bd:53:62:14:3c:98:31:c5:
c1:22:5e:db:9f:c6:51:61:25:d8:58:b0:ac:b4:85:
f4:d6:19:c1:82:0a:3e:bd:8d:09:58:aa:69:6c:ba:
11:85:c5:8f:af:63:ae:e9:f8:91:ba:49:ec:65:64:
bc:7e:c4:87:df:ad:17:7f:88:65:8d:00:51:9b:22:
b5:5f:c7:1f:80:ea:16:b0:fa:21:72:b9:10:fd:e0:
d4:ea:0b:80:a9:91:ab:49:c5:7a:a0:28:df:e3:51:
50:c7:65:c4:a0:1c:74:26:c6:61:eb:6e:81:ab:6b:
18:ae:da:57:d4:d8:f8:2c:f5:65:b5:75:17:76:6e:
b0:ff:c8:c7:15:5c:f0:b5:2f:84:8a:31:09:4c:81:
ad:3e:68:81:a5:3f:31:a6:64:4e:0a:e9:98:76:5b:
44:44:98:b1:86:65:5e:2b:12:55:de:6c:d5:a9:fd:
02:c7:fd:f6:4d:26:2d:29:70:71:bf:73:15:47:c9:
31:12:38:68:40:56:df:fa:27:84:55:5c:5a:11:3a:
46:ab:7c:45:52:04:b6:e4:15:d9:d9:36:cc:0a:3f:
8a:71:29:1a:90:78:97:97:23:6f:70:d3:b7:dd:fa:
43:c5:65:c8:02:3b:07:25:b4:53:c9:b1:65:d2:ee:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C2:D8:24:CB:8C:AB:85:B3:DD:DA:49:71:E0:52:AF:78:42:39:D2
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:14:9d:c3:f1:e3:4c:11:6b:c8:39:de:d4:9a:4b:63:ff:5d:
be:44:bd:69:e9:88:07:dd:b9:70:29:85:0e:bf:52:1e:16:d0:
63:14:1c:a7:3b:58:7c:23:84:3d:a2:4c:24:aa:41:39:e4:16:
e1:cb:2d:06:08:ff:ff:38:e4:15:32:ad:99:0a:0d:5e:66:49:
6c:8a:5e:79:18:b8:24:66:f9:e1:d1:2c:51:de:07:96:dc:2b:
99:1a:5e:a8:1c:93:4e:6d:4a:42:ec:1a:d9:b2:3d:b6:94:a7:
a3:92:0b:ba:6b:25:fd:fc:07:e4:88:eb:1b:98:c5:da:22:3b:
55:ea:ce:ef:04:71:2c:5d:50:c5:0a:32:fc:56:97:e2:52:f9:
93:c9:8f:8d:76:bf:16:65:71:28:b1:dd:de:48:12:95:d4:2f:
44:b0:35:f7:ec:78:2e:a5:3d:6b:90:53:1f:7b:22:24:dd:a9:
8b:b5:5d:73:41:f2:98:51:34:62:98:9a:5b:7a:4d:49:7c:f1:
c0:80:62:53:40:27:70:56:10:25:af:7a:79:0c:b2:77:7b:a6:
24:83:ae:5e:eb:d2:b2:85:81:42:3c:97:89:90:59:53:88:7e:
42:84:db:33:c9:d7:34:4d:b3:7f:76:ac:ef:f6:1b:d2:82:7f:
23:59:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:47:26 2024 by rpki-client on console-fra.rpki-client.org