Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.mft
File: xDI1a8oY70s4h9aarCd5fQvDy9Q.mft (raw, json)
Hash identifier: P0Ub/rFH/hT4wT3j2Wyx995sAU+5kUmeL6h+Qqsz4us=
Subject key identifier: 75:35:F7:9E:D3:71:C0:F1:53:2B:25:AF:D2:54:94:2F:42:02:E3:63
Authority key identifier: C4:32:35:6B:CA:18:EF:4B:38:87:D6:9A:AC:27:79:7D:0B:C3:CB:D4
Certificate issuer: /CN=c432356bca18ef4b3887d69aac27797d0bc3cbd4
Certificate serial: 018F88922039FE4E418C7540769AE0009909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDI1a8oY70s4h9aarCd5fQvDy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.mft
Manifest number: 0C11
Signing time: Fri 17 May 2024 22:00:28 +0000
Manifest this update: Fri 17 May 2024 22:00:28 +0000
Manifest next update: Sat 18 May 2024 22:00:28 +0000
Files and hashes: 1: xDI1a8oY70s4h9aarCd5fQvDy9Q.crl (hash: vMToCGVIUqxtJJ1yktHnegB2aHGLHrEfJoESrlckmIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDI1a8oY70s4h9aarCd5fQvDy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:92:20:39:fe:4e:41:8c:75:40:76:9a:e0:00:99:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c432356bca18ef4b3887d69aac27797d0bc3cbd4
Validity
Not Before: May 17 22:00:28 2024 GMT
Not After : May 18 22:00:28 2024 GMT
Subject: CN=7535f79ed371c0f1532b25afd254942f4202e363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:7d:dd:4c:e6:a5:28:26:67:25:69:64:61:
36:60:c6:72:48:8b:92:8b:f3:46:56:c8:77:46:c6:
e1:07:7b:62:31:7a:78:81:9e:b4:61:89:cf:ae:0c:
38:e0:e5:f9:d7:94:97:ae:f9:1e:f0:2d:54:74:5f:
e4:fa:e0:ae:ea:1b:4b:9b:c7:54:e6:52:e9:a8:c0:
c5:75:d1:70:59:9f:c4:33:89:45:e0:57:1a:db:dd:
f0:91:b5:f9:ee:e2:23:c5:79:41:f7:02:3d:ff:fa:
3e:f5:cf:f9:c1:2b:e8:5c:04:db:12:f0:2f:68:b7:
ed:e9:c9:d6:62:72:59:8f:b4:e5:e9:7d:ac:d7:26:
ab:82:71:d7:66:34:e5:b1:12:0e:3e:1d:10:b3:5a:
93:78:1e:5e:16:09:83:b0:d3:c2:42:1c:6d:8c:ee:
63:57:ad:8c:eb:41:56:07:89:d3:91:40:da:2c:0b:
21:1d:12:f7:b9:e7:72:79:df:78:0c:e2:20:2b:87:
28:81:2e:01:24:91:2a:d1:8a:4e:9d:53:e6:e3:77:
34:b3:06:64:de:0f:96:87:88:2d:2a:3c:c6:d2:0d:
ac:e0:cc:d7:66:ac:e1:74:f0:5c:80:be:0d:b4:2f:
b5:e9:82:44:4b:ee:01:41:a5:63:9a:2c:73:df:e9:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:35:F7:9E:D3:71:C0:F1:53:2B:25:AF:D2:54:94:2F:42:02:E3:63
X509v3 Authority Key Identifier:
keyid:C4:32:35:6B:CA:18:EF:4B:38:87:D6:9A:AC:27:79:7D:0B:C3:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDI1a8oY70s4h9aarCd5fQvDy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c204b2-4f92-46eb-924e-b0814f279430/1/xDI1a8oY70s4h9aarCd5fQvDy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e0:82:57:c1:c5:6e:2d:fc:96:25:30:9a:ff:54:a0:57:4b:
d3:b8:c0:bd:0a:b2:43:e1:5f:f4:fa:26:37:95:c6:ac:7a:16:
d3:40:7c:46:56:bb:68:03:df:c3:e4:52:7e:cf:74:cd:c3:ac:
08:ae:cc:a5:b4:c0:28:b1:ad:0a:26:de:8a:50:b4:d6:25:ea:
b7:61:ea:9e:7b:26:0c:58:f8:f0:75:fd:67:44:05:9d:2a:53:
67:3a:ca:c1:5e:c7:f7:24:cd:78:3c:8b:51:92:8e:84:68:90:
81:20:69:99:7e:54:f8:89:b9:19:76:1d:f8:b3:25:54:d2:b5:
55:01:65:fa:bb:f9:7f:1b:33:9b:9d:f2:c9:5f:06:d7:48:a0:
ba:11:f3:74:c7:a8:61:e3:4f:66:d7:0a:47:9c:7b:ac:23:e7:
ee:54:30:ce:ad:a9:e6:aa:bc:37:ad:dd:d0:6b:90:86:1f:b0:
cd:6b:6e:25:d6:1f:96:10:34:12:9b:dc:d4:df:c0:ec:e6:e7:
c9:b1:9e:93:97:70:ea:45:68:29:cb:dd:0a:7a:6f:49:5d:53:
87:ce:2c:9c:64:f5:7a:a5:9a:79:2c:60:1d:47:d7:5a:8e:7c:
8a:99:4a:19:c2:49:20:c6:e4:6b:46:f0:9d:15:de:46:6b:ed:
0f:58:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:39:26 2024 by rpki-client on console-ams.rpki-client.org