Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
File: vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft (raw, json)
Hash identifier: cMWZzy7oMG58aQOlDsI6WyNd8ljBwEZddxM5juUeqD0=
Subject key identifier: 3A:B1:FF:75:12:AA:5B:59:D1:9C:69:C6:1C:29:71:8F:10:E9:14:D0
Authority key identifier: BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
Certificate issuer: /CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Certificate serial: 01904152EF9EF67E741E4665329FD7CB410B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
Manifest number: 0194
Signing time: Sat 22 Jun 2024 19:01:12 +0000
Manifest this update: Sat 22 Jun 2024 19:01:12 +0000
Manifest next update: Sun 23 Jun 2024 19:01:12 +0000
Files and hashes: 1: vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl (hash: oYBgexQTWziWEsoVaqxBBr0tPvminvkqIofcM5ND+Fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:41:52:ef:9e:f6:7e:74:1e:46:65:32:9f:d7:cb:41:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf3617102dd47ea4a3f2ef0279cf67f14916a3c
Validity
Not Before: Jun 22 19:01:12 2024 GMT
Not After : Jun 23 19:01:12 2024 GMT
Subject: CN=3ab1ff7512aa5b59d19c69c61c29718f10e914d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cf:82:e5:ec:f1:df:dd:5c:5a:b9:c2:51:29:
a8:78:13:0b:31:86:8a:19:e5:58:d5:61:ae:2d:ed:
07:cf:14:3a:60:57:2d:85:d1:8e:92:eb:d5:7c:5d:
6a:26:45:75:e7:b3:3f:0d:f3:dd:80:29:e9:5b:2f:
98:24:27:3c:01:b1:b3:69:b9:69:e2:ab:37:61:5d:
d9:66:da:4c:5a:37:53:c9:2c:f8:9b:20:46:02:c6:
48:f5:0e:58:c1:d0:e3:28:72:64:06:47:37:09:b8:
1e:17:78:f3:1b:e1:83:0c:d4:4c:ea:09:8f:14:85:
b9:e0:e4:e3:42:ae:e3:ee:f5:3d:5b:c4:06:fb:a0:
20:18:85:46:b5:e7:04:18:f2:85:b3:76:47:43:d8:
c4:a7:72:c5:e0:eb:92:95:82:0a:dd:94:65:f5:66:
35:40:74:54:f0:42:37:cc:a8:f5:46:42:7b:d1:a0:
ba:d7:af:ce:fe:43:d9:e3:54:d0:de:39:44:25:0b:
3b:39:6f:41:6e:0d:d3:a4:74:7e:a8:93:29:a9:9a:
15:4e:0e:86:d0:84:8c:de:94:c9:c0:00:5e:17:aa:
20:7b:32:e8:eb:34:02:1a:a3:b5:5e:d1:c2:c0:9d:
ed:28:ad:c9:6e:ab:fd:ae:af:b9:07:86:81:8a:c7:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B1:FF:75:12:AA:5B:59:D1:9C:69:C6:1C:29:71:8F:10:E9:14:D0
X509v3 Authority Key Identifier:
keyid:BD:F3:61:71:02:DD:47:EA:4A:3F:2E:F0:27:9C:F6:7F:14:91:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfNhcQLdR-pKPy7wJ5z2fxSRajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d7da56-9965-4bf0-8f4d-9f52de227621/1/vfNhcQLdR-pKPy7wJ5z2fxSRajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6c:35:c1:63:cc:38:fe:a9:a4:b5:50:39:2e:13:ef:f8:9c:
48:39:c9:a1:f0:3e:68:8f:77:09:38:da:75:39:02:e8:60:bc:
0c:02:0b:0f:5a:c6:be:7f:f2:e9:04:53:a2:68:bf:0c:94:9b:
ed:40:d2:c2:65:97:dd:d6:fe:84:41:0a:e9:5a:23:3e:cf:02:
b6:48:9b:5f:41:aa:e3:53:61:0e:07:ea:ec:fa:9e:5a:da:b5:
87:d0:22:cc:79:85:08:6b:e4:48:49:23:c2:37:e6:c6:8b:ba:
3c:34:e7:1f:fa:af:a5:52:2d:29:89:d2:23:16:90:c5:86:64:
07:4b:8a:d8:79:a7:66:8d:83:39:9a:6a:aa:a4:e9:71:5e:7f:
84:3f:76:08:4b:7d:11:ce:cf:f0:50:0c:64:aa:86:09:83:df:
fe:64:dd:b6:8b:b0:fc:c4:02:a2:f9:f7:6c:9a:0c:27:92:df:
71:1b:77:ed:2f:39:3f:c3:a6:c0:55:b0:5b:15:31:3e:91:f8:
fc:27:74:27:23:47:9b:70:f0:f6:78:f5:f0:fb:84:cc:c9:36:
6c:95:ba:74:d4:74:bf:21:7e:fb:f8:bc:5c:4f:d0:d0:24:de:
d0:2f:2c:fd:33:a9:e1:ef:18:38:53:ff:ab:0d:2e:56:c0:e2:
bf:15:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:50:59 2024 by rpki-client on console-fra.rpki-client.org