Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: xBt+auToZFFHI3M8tqXPezhijJN0Zf65uBAyc8PQc6c=
Subject key identifier: 72:EF:E3:86:E1:4D:96:57:86:C1:97:6B:43:1B:AA:D1:B0:B3:10:E9
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 01903E1A74300B629D3DA0411FB4B9D58488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 11D3
Signing time: Sat 22 Jun 2024 04:00:39 +0000
Manifest this update: Sat 22 Jun 2024 04:00:39 +0000
Manifest next update: Sun 23 Jun 2024 04:00:39 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: 6gEcORta+Ymwg5GOGnIVamryNEIYU67xShzknK1HIWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3e:1a:74:30:0b:62:9d:3d:a0:41:1f:b4:b9:d5:84:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Jun 22 04:00:39 2024 GMT
Not After : Jun 23 04:00:39 2024 GMT
Subject: CN=72efe386e14d965786c1976b431baad1b0b310e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:3d:1c:b0:1d:3b:9d:50:1c:8b:6c:c4:f9:
ea:9f:3b:4d:bd:82:fb:45:6c:f1:b7:c1:8f:e2:b4:
d5:09:a2:27:70:b1:54:cd:7d:87:c7:ea:81:bf:40:
eb:10:5c:8f:25:06:14:92:ab:f8:b8:6d:e4:7e:6c:
ee:04:70:a8:c8:08:5f:a8:ed:16:5f:af:9d:5e:0d:
96:a2:d5:87:a6:a7:89:b4:73:57:a9:94:4b:af:c9:
ff:51:35:2d:c0:91:94:e8:db:be:3e:9b:cb:77:35:
41:4e:08:cf:75:25:fb:4b:88:dc:a5:be:7b:70:48:
56:9f:b5:b6:23:68:aa:b3:76:af:41:0e:0d:38:21:
c2:4e:a8:2e:b5:f0:46:72:67:b3:21:7a:89:91:19:
ae:f1:41:c2:06:a2:09:4a:37:a8:1b:d2:8a:9c:ea:
ab:ad:7d:c8:4c:e3:2b:b2:07:9a:69:2d:60:e2:1b:
65:f0:de:66:a2:07:cc:db:8f:9e:8b:6b:a7:67:e0:
87:fa:ee:72:0e:91:36:e4:01:c3:70:f8:aa:f7:7c:
c8:22:38:f7:b0:1c:4e:2f:75:8a:f8:7f:c1:ac:12:
49:35:31:c7:ed:e3:34:20:65:32:8d:e6:f6:1d:a9:
7f:ee:29:48:06:4e:e8:c3:18:dd:5b:40:39:3d:61:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EF:E3:86:E1:4D:96:57:86:C1:97:6B:43:1B:AA:D1:B0:B3:10:E9
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:09:d1:15:13:05:9b:4b:cb:bd:84:b4:37:da:f2:e9:d4:05:
67:09:0e:3e:65:66:19:d7:26:d1:2f:4d:ce:d4:d0:a0:a8:02:
87:78:59:d0:e8:2d:1e:ba:7d:0d:ac:ca:1b:e3:7f:3a:b2:2e:
73:62:4d:dc:d6:c6:5a:42:09:9c:27:62:fd:94:17:94:dc:c8:
2e:ab:25:c2:46:21:c8:ba:aa:b2:0c:00:00:29:5c:f9:f2:05:
a9:9f:a3:81:3b:0f:b7:ea:c0:64:3c:67:a0:d0:c3:f9:35:d9:
14:5a:bb:80:7c:ee:79:d9:f2:56:85:67:16:e9:a3:f1:98:17:
ee:a9:bd:88:fb:60:aa:23:51:bc:f7:3b:76:66:72:da:da:21:
e1:e5:ff:f0:35:de:e8:09:52:3d:27:9b:10:c7:68:fb:cf:71:
d5:13:68:16:d4:4d:2d:c6:c5:8f:82:ae:4a:cf:84:a6:11:db:
4c:68:9c:c0:bc:81:eb:e7:ee:5d:5e:cb:31:9b:33:9f:73:8f:
47:a9:cc:6b:15:17:1a:82:89:ce:30:12:4b:4a:0f:4d:c1:c0:
99:95:71:62:0e:6d:1a:e9:86:18:a3:5b:5c:e4:fc:76:ad:90:
a8:33:0e:64:ed:b5:5b:2e:29:0d:7b:f6:8b:d3:94:87:80:d9:
36:b1:db:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:14:56 2024 by rpki-client on console-fra.rpki-client.org