Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.mft
File: XhG23vM9-aR3sofFIN7ExPYLOo8.mft (raw, json)
Hash identifier: u3eHADAgbMLDGEbCExPLb2XVeYYuCm9d+ShjC09mvl0=
Subject key identifier: AF:EE:97:62:64:FC:91:5F:34:4A:8A:47:D7:F1:05:B7:38:A3:32:FE
Authority key identifier: 5E:11:B6:DE:F3:3D:F9:A4:77:B2:87:C5:20:DE:C4:C4:F6:0B:3A:8F
Certificate issuer: /CN=5e11b6def33df9a477b287c520dec4c4f60b3a8f
Certificate serial: 0190448A8908347E3AC3C98FBB9BAD05F77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhG23vM9-aR3sofFIN7ExPYLOo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.mft
Manifest number: 0706
Signing time: Sun 23 Jun 2024 10:00:48 +0000
Manifest this update: Sun 23 Jun 2024 10:00:48 +0000
Manifest next update: Mon 24 Jun 2024 10:00:48 +0000
Files and hashes: 1: XhG23vM9-aR3sofFIN7ExPYLOo8.crl (hash: MjJgasvWW7ySypig+yHLsrIk7iKfOz7YdNpSIpj3UTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XhG23vM9-aR3sofFIN7ExPYLOo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:8a:89:08:34:7e:3a:c3:c9:8f:bb:9b:ad:05:f7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e11b6def33df9a477b287c520dec4c4f60b3a8f
Validity
Not Before: Jun 23 10:00:48 2024 GMT
Not After : Jun 24 10:00:48 2024 GMT
Subject: CN=afee976264fc915f344a8a47d7f105b738a332fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:ff:8c:f2:b1:b0:c7:99:38:6e:96:86:63:
07:a1:d0:a6:64:2e:f5:0e:24:9e:6b:8a:97:1a:4a:
eb:da:ec:d2:a0:64:88:0e:07:72:c1:ef:be:09:de:
cf:e0:63:05:b4:a3:54:44:e4:5b:d2:58:9f:12:99:
82:fb:63:04:4b:21:73:f3:38:79:42:48:74:ad:4d:
db:97:24:d6:01:96:cd:a5:2d:d7:82:de:8a:e5:0f:
00:40:00:6b:fc:68:2b:40:4e:88:ec:b2:f7:43:ca:
b6:5f:de:0f:12:36:e8:6d:a3:74:92:2e:f8:cb:48:
21:28:8e:53:be:b7:68:a3:4b:9b:6f:96:ef:ff:ca:
35:31:42:47:a8:05:80:f1:86:f3:37:7b:c7:42:0d:
53:43:2d:07:85:e1:7b:63:63:ed:d4:b7:2c:77:73:
02:2c:5a:45:12:c4:dd:20:12:51:3a:3f:b3:fc:c3:
65:02:db:0a:f7:5a:5d:e2:a1:1d:bb:48:40:87:c9:
3d:cb:36:ea:fc:6b:78:a5:4a:49:af:de:f3:fc:51:
89:46:8b:83:08:c2:a0:48:23:73:7f:b1:2b:fd:4d:
ae:09:fd:0c:88:bc:a4:f6:6c:97:70:cb:b6:a3:e0:
d8:4e:cf:9d:69:af:db:e7:70:5c:50:61:2f:2f:54:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EE:97:62:64:FC:91:5F:34:4A:8A:47:D7:F1:05:B7:38:A3:32:FE
X509v3 Authority Key Identifier:
keyid:5E:11:B6:DE:F3:3D:F9:A4:77:B2:87:C5:20:DE:C4:C4:F6:0B:3A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhG23vM9-aR3sofFIN7ExPYLOo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c28c37-f7ea-4886-8ea8-40cf3e01f06f/1/XhG23vM9-aR3sofFIN7ExPYLOo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5c:88:ae:6a:eb:97:b6:17:4f:32:06:22:75:4d:fe:de:58:
e4:4e:5b:e9:00:6c:05:b0:9f:ce:79:0e:44:bf:99:e5:b5:34:
e2:c8:a7:b1:b9:cf:67:56:06:36:f5:d2:0c:ef:31:b8:2b:29:
2f:a0:65:6a:0a:5c:46:6d:d1:e4:af:fc:b9:28:4a:8b:a0:6c:
81:70:57:3a:3c:4c:75:d4:fe:01:3d:22:03:85:7e:a9:0b:0c:
57:f9:61:98:ef:3a:00:6c:97:0f:6d:2b:e8:7b:e4:74:58:07:
57:39:d8:dc:04:8a:97:d5:1b:4a:8c:dd:83:ce:e2:10:47:00:
cf:02:0e:bd:95:60:7a:df:1f:b5:a0:fe:44:89:d9:7a:4f:bc:
ec:88:09:fe:53:92:fc:26:72:7d:f1:fb:93:c0:cb:17:f8:09:
17:20:d6:2b:f0:a8:ca:c7:95:fd:d5:48:09:5f:10:c4:1d:71:
ab:16:54:0b:eb:10:ec:aa:f5:28:0d:af:e8:c9:69:03:fa:ee:
a8:91:ce:82:80:f0:57:85:d2:51:5a:27:67:a8:4a:f1:d6:84:
79:e5:2b:8a:7a:a3:b0:dd:d7:33:a6:c5:4b:4c:a5:e4:69:32:
bc:c2:71:d1:b9:5b:d7:e6:26:d6:56:a8:75:80:0a:6e:d9:61:
38:4f:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:01:38 2024 by rpki-client on console-fra.rpki-client.org