Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
File: Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft (raw, json)
Hash identifier: 4xAKlrDIk1bURq1dw0y2DvHUay3pxRXV/GeJ801F8Sc=
Subject key identifier: 4A:70:D7:27:04:CC:0D:03:C1:1D:3D:90:1F:06:22:93:99:5C:6C:F5
Authority key identifier: 67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
Certificate issuer: /CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Certificate serial: 0190452F783DA20A8B7C082B53F9411347E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
Manifest number: 0D1C
Signing time: Sun 23 Jun 2024 13:00:57 +0000
Manifest this update: Sun 23 Jun 2024 13:00:57 +0000
Manifest next update: Mon 24 Jun 2024 13:00:57 +0000
Files and hashes: 1: Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl (hash: B/IDgEjkk0xh+mdTkV81ExTg0qmtnlzltFIYevS/dg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:2f:78:3d:a2:0a:8b:7c:08:2b:53:f9:41:13:47:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6770c9b9405748d26548fd5fca7a64a038d5812d
Validity
Not Before: Jun 23 13:00:57 2024 GMT
Not After : Jun 24 13:00:57 2024 GMT
Subject: CN=4a70d72704cc0d03c11d3d901f062293995c6cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:62:e7:a5:a9:71:8e:81:78:8d:fd:2c:2b:
6e:b9:fa:06:0a:0c:12:6a:27:c9:98:68:d0:43:06:
22:1d:21:61:b4:69:0e:4b:22:36:29:b4:51:24:6c:
d2:89:1a:7b:3b:6b:48:53:9f:fa:e6:90:17:eb:26:
d3:e5:c6:a6:9c:2e:5d:d3:2a:e6:84:cd:e9:20:06:
fc:90:4a:87:85:af:c8:41:20:5a:0c:75:01:c3:22:
f2:90:32:d6:29:e4:76:8d:a7:81:f0:e7:41:a8:d1:
a3:8d:48:e8:1b:7f:f9:5f:ab:90:a3:de:b8:7a:07:
04:51:d1:3b:22:c4:3c:fe:c8:17:29:fb:db:f5:d5:
7e:dd:02:fa:cb:2f:ab:05:d7:38:c7:51:70:c9:27:
1f:ea:5a:02:55:c5:b8:7a:f3:90:1b:41:69:47:50:
69:d5:9f:7a:ed:58:73:d1:df:0c:00:8f:34:51:97:
ff:1c:eb:9f:1c:62:ae:21:3d:a7:c4:26:2d:eb:cb:
99:b8:3c:f2:3f:c0:9e:cd:55:0e:e0:db:a8:07:38:
41:48:39:81:fc:15:ba:64:19:61:8a:51:93:62:97:
83:ac:38:97:4c:07:94:13:a1:4f:73:60:f8:44:79:
6e:26:a8:17:ee:70:89:cc:1e:37:08:65:65:7b:6c:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:70:D7:27:04:CC:0D:03:C1:1D:3D:90:1F:06:22:93:99:5C:6C:F5
X509v3 Authority Key Identifier:
keyid:67:70:C9:B9:40:57:48:D2:65:48:FD:5F:CA:7A:64:A0:38:D5:81:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3DJuUBXSNJlSP1fynpkoDjVgS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a56c5-b28c-43c9-a465-14887876aa0e/1/Z3DJuUBXSNJlSP1fynpkoDjVgS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f4:93:64:3e:11:bb:35:fb:d6:d4:1c:8e:e0:48:d7:05:ff:
aa:af:a8:6d:33:f1:a5:17:27:26:71:81:98:76:0b:8b:1b:48:
c7:69:6f:07:bd:86:28:ee:3f:55:ab:99:ab:e8:17:ba:71:27:
16:7a:e5:4b:07:6b:3c:82:ff:85:cd:20:0e:28:cd:1d:eb:d7:
73:04:28:6d:44:50:9a:67:b5:5b:ba:e0:b3:8f:e9:25:b9:4f:
fd:95:58:19:48:76:be:03:58:b8:c4:f5:0a:61:8c:27:45:d4:
84:77:13:b4:25:2f:6f:80:17:b6:c0:e5:23:ff:4e:5a:a1:ba:
1b:a3:6e:bc:39:da:a1:b5:5d:87:93:51:ba:8a:e4:84:99:af:
96:17:f2:bd:26:39:05:b8:c0:18:60:4c:05:1d:a1:67:45:04:
35:51:c2:66:6d:be:d1:e9:22:80:5d:8f:8f:54:ab:ad:72:9c:
ee:27:dd:91:5d:fe:1e:34:97:35:6d:8f:70:99:95:d9:64:44:
e2:fe:19:05:36:2d:52:a5:d5:f0:32:5b:b4:c5:c0:78:ed:0a:
e6:40:14:27:f5:18:93:c7:9a:9c:52:8c:af:fe:76:af:e6:bb:
00:65:39:85:4f:29:d8:35:c1:d3:fd:31:ba:f3:25:d2:8d:48:
0d:2d:02:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:08:29 2024 by rpki-client on console-fra.rpki-client.org