Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: kNbJ+vwNDkUvuYPjM9Xf0TCFmlklOr3seE1OzP4c5Kk=
Subject key identifier: 32:94:E3:4E:D9:21:0A:94:55:7C:65:57:8D:F1:2B:A0:8E:37:C8:31
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 01903396CB9F3CC096357677C1D565D0CCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 11CE
Signing time: Thu 20 Jun 2024 03:00:38 +0000
Manifest this update: Thu 20 Jun 2024 03:00:38 +0000
Manifest next update: Fri 21 Jun 2024 03:00:38 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: V0XAob3p3p21DxQUW/xX+S7GkzA42o3euLqxQSkgr/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:33:96:cb:9f:3c:c0:96:35:76:77:c1:d5:65:d0:cc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Jun 20 03:00:38 2024 GMT
Not After : Jun 21 03:00:38 2024 GMT
Subject: CN=3294e34ed9210a94557c65578df12ba08e37c831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:e3:fb:98:d9:33:b4:9c:2b:42:fd:6a:d1:
e9:aa:d7:b5:e9:5c:41:b6:5f:11:d9:f6:42:fb:51:
4a:f1:7e:da:95:01:df:94:31:d0:8c:b4:55:93:12:
dc:4f:f4:77:1e:15:d9:d1:09:f7:de:5c:07:27:f2:
ca:06:3b:23:01:93:cd:37:6b:67:c9:5a:9c:13:bb:
97:be:0f:dd:8c:c2:20:25:12:b3:b1:f5:7d:ca:da:
e4:c3:25:f5:69:1f:93:a6:94:51:2e:a7:4a:aa:74:
3e:26:b6:c1:ee:b9:70:0f:79:72:7c:e2:96:2d:d0:
31:ee:5a:83:c4:b9:0e:9d:6a:a4:fc:1a:e8:c1:3c:
09:20:20:f9:73:18:f7:2e:e4:83:39:f3:ac:ea:62:
50:12:e8:0c:e6:25:4d:a7:b8:2a:f5:32:51:91:26:
d0:63:e9:d9:0f:f0:66:85:22:3c:06:e9:6c:77:38:
a4:59:d2:c5:af:7f:9e:7b:98:7e:70:e4:b8:6f:10:
4f:9d:e1:0d:bf:e5:42:3b:d2:aa:28:f5:b5:35:c2:
b9:9e:94:7a:72:4c:8d:86:32:4f:f8:f8:46:5d:7f:
c2:23:60:79:e5:b2:7e:2d:05:21:60:32:e4:a7:10:
c5:03:99:f8:a0:69:26:39:16:46:9e:36:72:3e:e8:
53:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:94:E3:4E:D9:21:0A:94:55:7C:65:57:8D:F1:2B:A0:8E:37:C8:31
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:15:7b:9b:80:3b:68:40:ca:7c:b2:91:68:4a:47:4e:6d:50:
b6:d7:f4:23:80:22:9a:9e:04:37:9a:43:ba:55:cc:a2:b8:67:
ed:4c:88:d0:ff:ef:69:f3:86:d9:6f:c2:40:a3:7b:ce:f8:39:
b5:4d:5c:29:9d:17:83:e5:8a:05:89:82:c5:e3:d6:33:14:cf:
56:8a:88:6d:0e:c1:7a:dd:4c:65:f3:d6:80:a8:75:67:f9:92:
3a:93:7f:3a:cc:f0:2b:81:d3:5a:68:e0:6d:60:11:33:86:e1:
84:3e:1e:5e:00:4f:2e:f5:9b:7c:fd:e1:ba:b9:c3:bf:e0:39:
cd:a8:f9:5d:59:31:57:68:b2:94:3d:10:b4:df:3a:18:d7:55:
58:b1:ea:6a:0e:d1:11:74:8e:5d:10:3d:19:65:bb:20:d8:bc:
d7:3d:40:ed:fe:b3:dd:f2:83:7e:3f:c2:ba:3a:d4:fa:34:cf:
b4:e5:d1:00:0d:44:31:62:06:e2:fe:d4:b4:79:2b:4b:6a:19:
31:84:b8:cb:aa:6c:4d:ae:0e:bc:9a:48:9b:80:21:b4:28:5f:
89:ed:83:07:74:72:34:19:9c:90:0f:2c:ff:51:c5:00:4f:a9:
26:b2:0d:63:5c:9e:46:50:a1:72:9b:fa:7f:e5:08:83:66:1e:
0b:ed:73:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:03:56 2024 by rpki-client on console-fra.rpki-client.org