Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
File: PpPoAxz911eQjNyf-ZJLfEukR48.mft (raw, json)
Hash identifier: KmJ3a4ml2kzjRfnhGL4O+0c5kQFu12qvKWYlFvAjUSg=
Subject key identifier: 7D:B4:E5:7B:F3:46:FC:0D:FE:50:8F:DA:94:68:E8:5D:CD:10:BF:76
Authority key identifier: 3E:93:E8:03:1C:FD:D7:57:90:8C:DC:9F:F9:92:4B:7C:4B:A4:47:8F
Certificate issuer: /CN=3e93e8031cfdd757908cdc9ff9924b7c4ba4478f
Certificate serial: 0193579B831A13F55E261B2A28FDDDD01DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
Manifest number: 047E
Signing time: Sat 23 Nov 2024 06:00:29 +0000
Manifest this update: Sat 23 Nov 2024 06:00:29 +0000
Manifest next update: Sun 24 Nov 2024 06:00:29 +0000
Files and hashes: 1: PpPoAxz911eQjNyf-ZJLfEukR48.crl (hash: DX8IE47P6GT1U2KfZL31k9XO9YFMk7vEi+AqYMOevFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
rsync://rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:83:1a:13:f5:5e:26:1b:2a:28:fd:dd:d0:1d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e93e8031cfdd757908cdc9ff9924b7c4ba4478f
Validity
Not Before: Nov 23 06:00:29 2024 GMT
Not After : Nov 24 06:00:29 2024 GMT
Subject: CN=7db4e57bf346fc0dfe508fda9468e85dcd10bf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fa:b9:65:33:1b:23:59:89:e5:84:a8:51:39:
d6:9e:bf:11:53:d1:35:07:57:e3:da:80:b4:f2:bc:
52:28:fc:6e:cc:8f:37:b6:fb:88:03:99:8a:fd:2d:
85:8b:9a:55:ed:cb:87:f4:41:95:1e:75:b6:e8:ae:
b2:8e:66:b1:5e:91:1e:ff:13:ee:51:6a:1f:41:5d:
a7:2a:2d:56:79:cf:e5:9e:ec:77:a6:48:cb:1b:79:
01:94:b8:d8:54:5b:9c:dd:cb:27:37:64:b8:14:79:
41:08:dc:00:a1:cc:24:00:de:5f:a6:31:0f:e9:07:
40:12:9d:1f:45:f4:d1:01:47:73:ab:4c:28:18:5c:
ce:a2:35:5e:4d:c5:63:f2:99:3e:60:0f:6f:a4:b3:
f4:13:95:de:54:b8:1a:82:da:23:ee:28:99:42:a2:
84:e8:c5:3a:38:64:5a:53:fb:e8:49:1a:95:a5:91:
13:35:ed:5a:fd:55:e7:93:0e:01:84:f1:65:f0:4d:
8f:4a:54:4e:08:b6:ac:bf:4f:f8:c7:8e:a6:6a:66:
d0:cb:83:e6:24:2e:7d:9d:ab:98:99:9a:25:1b:5d:
da:a3:59:f1:24:7d:03:2d:03:ec:b1:98:a0:65:a9:
5b:a3:77:6e:2d:cc:01:39:7c:fc:03:86:68:66:c8:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B4:E5:7B:F3:46:FC:0D:FE:50:8F:DA:94:68:E8:5D:CD:10:BF:76
X509v3 Authority Key Identifier:
keyid:3E:93:E8:03:1C:FD:D7:57:90:8C:DC:9F:F9:92:4B:7C:4B:A4:47:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpPoAxz911eQjNyf-ZJLfEukR48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7504f0-8b64-47c1-ae22-3fb2238848d8/1/PpPoAxz911eQjNyf-ZJLfEukR48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:81:80:0c:9d:73:13:bc:45:1a:34:59:ad:3a:1e:b6:43:de:
3d:ad:86:c4:41:fd:45:25:2a:19:a6:6a:bd:4c:36:3c:0b:83:
62:c0:0e:b9:64:b5:57:a7:ad:35:f0:69:1b:11:4b:6a:56:83:
e1:0b:b4:b7:38:56:e7:ef:36:f4:6e:ac:67:50:a3:a4:87:03:
33:10:c7:ce:1b:0f:5d:75:43:7c:08:de:4b:50:29:81:72:7e:
6f:26:44:c9:71:a7:85:0b:cd:ce:ed:8d:e8:d3:1b:b7:8b:58:
46:2f:52:a1:84:82:7b:06:5d:61:1e:7f:33:05:ac:51:df:b8:
06:8d:44:e7:a0:2b:d1:de:d1:85:b1:6b:a0:a4:23:28:d5:68:
a3:9c:81:51:bb:4c:9d:c0:6f:ff:d6:7c:3f:1b:d5:12:eb:3f:
88:0f:38:89:bc:72:df:2b:ac:b5:c4:61:bc:a6:f0:e0:a4:75:
2b:b0:21:3c:63:26:3e:d2:bc:ee:d8:24:e9:57:41:0e:8c:77:
8d:ec:bf:51:a7:90:c8:91:81:a6:b8:02:da:98:c2:31:04:10:
ed:2d:95:22:0e:cb:d7:23:1d:fc:24:10:14:54:bb:42:4a:bb:
47:ed:99:be:20:05:7e:1c:3e:f7:a9:75:7a:7a:ee:a4:7a:84:
0d:e1:96:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:29 2024 by rpki-client on console-ams.rpki-client.org