Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72780b-c84e-4193-bbe7-6d820ef715d0/1/aDLVIqeOXM3fOPN99r38SAHy1Gs.mft
File: aDLVIqeOXM3fOPN99r38SAHy1Gs.mft (raw, json)
Hash identifier: 5rxtzswYt8Usl8jXyY1axYtTWv62AWd58gMdAL5hM2k=
Subject key identifier: 0A:68:D4:5D:2D:34:9C:66:28:67:89:FA:D8:21:DA:02:5D:3B:05:07
Authority key identifier: 68:32:D5:22:A7:8E:5C:CD:DF:38:F3:7D:F6:BD:FC:48:01:F2:D4:6B
Certificate issuer: /CN=6832d522a78e5ccddf38f37df6bdfc4801f2d46b
Certificate serial: 018F9B3D0BB6AC0932A1C684BF17C7B6D077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLVIqeOXM3fOPN99r38SAHy1Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72780b-c84e-4193-bbe7-6d820ef715d0/1/aDLVIqeOXM3fOPN99r38SAHy1Gs.mft
Manifest number: 0700
Signing time: Tue 21 May 2024 13:00:20 +0000
Manifest this update: Tue 21 May 2024 13:00:20 +0000
Manifest next update: Wed 22 May 2024 13:00:20 +0000
Files and hashes: 1: aDLVIqeOXM3fOPN99r38SAHy1Gs.crl (hash: EvVGe3IiZf6EukwX0YbSvgx3tsU4fBTkXRShuzcs4OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72780b-c84e-4193-bbe7-6d820ef715d0/1/aDLVIqeOXM3fOPN99r38SAHy1Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72780b-c84e-4193-bbe7-6d820ef715d0/1/aDLVIqeOXM3fOPN99r38SAHy1Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDLVIqeOXM3fOPN99r38SAHy1Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9b:3d:0b:b6:ac:09:32:a1:c6:84:bf:17:c7:b6:d0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832d522a78e5ccddf38f37df6bdfc4801f2d46b
Validity
Not Before: May 21 13:00:20 2024 GMT
Not After : May 22 13:00:20 2024 GMT
Subject: CN=0a68d45d2d349c66286789fad821da025d3b0507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:f5:63:d0:bf:59:33:13:c7:68:ce:47:c0:
a8:1e:75:eb:76:f8:54:46:21:7b:a5:5b:82:a1:ff:
dc:9d:cd:37:b6:3f:4e:30:93:c2:7d:0f:94:76:bd:
79:8c:fd:0b:58:05:91:f3:22:ee:c7:91:46:58:f2:
1d:99:0f:20:63:20:4c:a6:bc:d5:5e:a1:da:50:ed:
ca:ee:61:b2:0e:fc:7c:68:2b:31:6a:b9:e9:a1:8d:
1a:3a:0d:83:96:70:e8:82:8d:ff:2b:1a:19:86:0e:
4d:a4:11:11:af:49:1f:f4:0a:41:f3:42:90:0d:7e:
88:11:f8:9d:63:66:a9:85:06:38:09:fe:b5:08:0e:
e5:e1:65:70:b7:0a:ff:6e:70:65:f1:d6:84:99:88:
f3:91:24:99:e5:80:83:4f:f9:28:8b:29:68:2d:1f:
29:75:f1:03:49:c1:97:5b:0f:56:f9:fa:b5:c5:29:
70:19:10:9e:ca:d9:c6:56:33:95:26:8e:00:8c:50:
42:cb:33:cd:ca:41:72:5d:36:fd:64:8d:ca:40:50:
22:4f:4a:ae:1b:07:c0:45:b3:b7:ef:e5:f2:18:43:
9d:fa:6b:64:51:e8:89:a8:8c:dc:9e:a1:81:04:b0:
d8:54:a6:f6:26:bd:57:d8:e3:49:ef:09:d9:90:ee:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:68:D4:5D:2D:34:9C:66:28:67:89:FA:D8:21:DA:02:5D:3B:05:07
X509v3 Authority Key Identifier:
keyid:68:32:D5:22:A7:8E:5C:CD:DF:38:F3:7D:F6:BD:FC:48:01:F2:D4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLVIqeOXM3fOPN99r38SAHy1Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72780b-c84e-4193-bbe7-6d820ef715d0/1/aDLVIqeOXM3fOPN99r38SAHy1Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72780b-c84e-4193-bbe7-6d820ef715d0/1/aDLVIqeOXM3fOPN99r38SAHy1Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7a:b7:e8:c4:39:42:d4:9c:a2:04:f7:64:7b:17:d4:e0:71:
80:51:e0:96:31:72:f8:11:7d:74:8f:08:c9:a2:6a:1c:ea:ab:
4b:d0:8b:a4:d6:6d:f9:cc:b8:b3:77:f9:50:c4:4c:93:ec:b3:
5f:17:3d:cd:69:9a:66:b4:b9:9d:28:43:61:2e:13:35:35:88:
65:02:da:83:41:d4:67:82:e6:c8:e2:d8:50:a3:ed:10:16:c8:
7e:dc:08:69:ad:d6:fa:f4:da:42:c6:64:1d:9f:54:e5:24:a9:
cb:07:a9:17:2b:6b:b1:7c:98:2b:57:17:dc:b9:78:71:0f:9d:
fa:ac:f8:b4:29:23:54:28:3b:dd:69:5b:74:2e:22:0b:33:13:
88:fb:88:b1:c7:c6:89:95:3b:87:f0:ff:e5:28:41:cc:02:4e:
b3:72:51:d3:e6:b4:1f:27:c8:80:f6:12:7d:dd:80:5a:fa:32:
33:8e:ba:61:40:da:4f:9e:72:0b:fe:f1:52:18:38:d0:fe:bb:
3a:e8:a0:76:4e:34:9d:f2:84:01:5f:82:a8:10:40:23:f0:f9:
6b:29:b0:3d:5c:62:01:9e:fa:45:21:06:80:e6:e5:5c:ff:82:
af:ef:13:85:6c:7b:94:08:85:5a:26:0f:1b:4e:ac:57:d0:a5:
f3:57:90:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 18:55:43 2024 by rpki-client on console-fra.rpki-client.org