Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
File: PpPoAxz911eQjNyf-ZJLfEukR48.mft (raw, json)
Hash identifier: SgZgTeoXxPWUkZyoaAQdCD51fwwxPeZKgFFAAmKHprs=
Subject key identifier: 9C:A6:E2:68:A3:34:5D:6A:17:1A:5F:1A:1D:1A:FD:C6:B9:A3:83:0E
Authority key identifier: 3E:93:E8:03:1C:FD:D7:57:90:8C:DC:9F:F9:92:4B:7C:4B:A4:47:8F
Certificate issuer: /CN=3e93e8031cfdd757908cdc9ff9924b7c4ba4478f
Certificate serial: 018F866CBEB13D16B72046C0670831593794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
Manifest number: 0284
Signing time: Fri 17 May 2024 12:00:24 +0000
Manifest this update: Fri 17 May 2024 12:00:24 +0000
Manifest next update: Sat 18 May 2024 12:00:24 +0000
Files and hashes: 1: PpPoAxz911eQjNyf-ZJLfEukR48.crl (hash: 03JAQRHCeyXBHXGICTyeos/6QSKM6RwK3GQcest/lXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:6c:be:b1:3d:16:b7:20:46:c0:67:08:31:59:37:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e93e8031cfdd757908cdc9ff9924b7c4ba4478f
Validity
Not Before: May 17 12:00:24 2024 GMT
Not After : May 18 12:00:24 2024 GMT
Subject: CN=9ca6e268a3345d6a171a5f1a1d1afdc6b9a3830e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b7:50:68:f1:c1:f6:ae:dc:35:e7:34:c1:91:
83:f3:05:be:75:e9:cd:32:2b:46:67:29:0e:dd:fc:
96:07:1d:fe:e7:4a:39:13:2d:b4:2b:88:a1:c1:5c:
24:36:53:db:e2:0e:1f:fc:aa:9a:64:b4:bf:47:6e:
42:d1:05:6c:de:d3:fd:09:e6:89:e8:71:4a:c7:97:
19:87:53:66:c8:3f:74:1c:08:c9:1b:98:ff:83:74:
f3:f7:71:ff:a0:f4:75:9d:bd:e0:5b:77:5f:f4:44:
95:20:77:f5:e7:69:d5:59:23:26:2d:e4:38:1d:e0:
8b:51:95:32:cb:41:db:e7:f4:00:f6:44:2d:1f:6d:
82:09:ca:97:27:37:81:44:f2:21:73:4c:ad:6e:6d:
a0:37:bd:94:11:28:2d:fe:74:d5:f8:76:ff:85:4c:
11:d5:cf:8d:21:b6:e8:05:48:81:c9:68:aa:80:36:
be:59:e8:de:2b:a6:f0:c1:b2:94:fb:2c:f1:2d:a2:
08:68:b0:96:35:b4:25:b2:b4:f1:75:5b:0a:1f:60:
26:41:76:3d:3d:31:f3:4f:c1:82:76:66:db:ee:a9:
03:d0:94:e8:ce:6c:e2:08:06:1a:9b:e6:8d:19:c0:
11:fe:87:3a:29:8d:75:27:4c:bf:cd:bc:2f:f1:a9:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A6:E2:68:A3:34:5D:6A:17:1A:5F:1A:1D:1A:FD:C6:B9:A3:83:0E
X509v3 Authority Key Identifier:
keyid:3E:93:E8:03:1C:FD:D7:57:90:8C:DC:9F:F9:92:4B:7C:4B:A4:47:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:36:e0:3f:99:bf:df:15:7d:65:35:6e:2d:d7:49:36:5e:99:
9e:73:1d:67:86:86:28:7e:86:b4:b0:13:0b:3f:67:56:97:92:
19:2f:d5:42:f5:65:9b:0f:e3:2d:30:d8:e2:26:46:48:b0:2f:
10:36:25:c0:86:23:1c:35:49:b2:c2:f8:6a:2b:fd:72:64:4e:
50:4b:a2:b3:3d:08:2b:a2:aa:a4:fd:bc:a2:ed:51:ab:95:93:
00:25:95:e2:26:aa:73:94:31:aa:6b:db:78:d0:68:63:2d:ff:
1b:5b:71:38:23:e8:d6:fa:65:66:52:b6:89:0b:88:7c:44:a5:
89:3e:d2:00:dd:64:5d:24:de:50:1d:9c:65:60:0d:f6:81:5c:
fe:98:81:11:77:02:78:1f:99:12:90:e3:62:48:95:16:23:b4:
1c:36:06:cb:ec:77:8f:a0:3d:0d:d1:d7:ce:58:5c:63:61:26:
7f:a2:9c:ee:82:8c:7b:03:a6:4b:e1:29:f1:d1:99:63:67:ea:
2a:69:d1:f1:80:e2:21:de:f4:52:88:0c:2e:ef:11:04:06:4f:
e7:3a:87:44:71:d8:aa:b4:89:8a:66:7f:20:ff:1c:15:e9:f6:
69:7c:f6:ff:10:8e:12:08:1c:a8:12:07:02:55:c3:80:01:35:
ff:79:5d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:16:15 2024 by rpki-client on console-fra.rpki-client.org