Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: DfO8EB8Q/HQYelPY4LY/pOqLHSeiCICwgTix3PmEvOs=
Subject key identifier: 79:33:CA:14:16:F1:9A:60:41:B2:79:FA:8D:A1:2A:A0:4D:D0:65:EB
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 019356F68D3A0923D11B870F98D6055F686D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 094B
Signing time: Sat 23 Nov 2024 03:00:18 +0000
Manifest this update: Sat 23 Nov 2024 03:00:18 +0000
Manifest next update: Sun 24 Nov 2024 03:00:18 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: MUhS/vt64UzViULwbOkoY9Y6NFNGAk/L+VvN3ZbJQm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:8d:3a:09:23:d1:1b:87:0f:98:d6:05:5f:68:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Nov 23 03:00:18 2024 GMT
Not After : Nov 24 03:00:18 2024 GMT
Subject: CN=7933ca1416f19a6041b279fa8da12aa04dd065eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:61:b2:d1:be:9f:13:eb:13:d9:38:9f:f7:
52:ea:0a:43:8a:b5:1b:14:b3:99:d2:a7:35:79:41:
82:15:47:fd:4c:ea:f3:16:af:13:fd:f9:2e:38:f1:
ae:bb:06:2c:3a:e6:00:7e:32:10:41:5e:5f:ed:3f:
46:8f:bb:af:b7:49:21:6f:5d:ee:11:15:fa:25:d5:
21:83:0f:65:5e:bf:ec:5b:71:c9:9d:53:61:07:c2:
74:79:00:0f:81:e1:55:5a:66:8c:5b:8a:4b:14:d8:
bc:7a:2b:6e:81:c0:32:13:a6:23:5c:c6:ed:26:4d:
ae:83:fb:f8:68:fb:b8:0a:f6:b9:93:98:62:03:ec:
02:c3:19:e7:7d:5e:83:b8:65:b6:cf:45:03:fd:d1:
94:98:ab:7d:81:ba:fd:56:ad:57:2e:06:3f:65:7f:
34:d2:f9:c1:13:f1:b5:4d:bf:be:46:e1:ac:e9:3f:
91:67:f2:f0:e0:40:ec:f2:cc:2b:9a:e2:aa:74:3e:
17:a3:9b:a3:5c:ff:8a:c1:34:c3:1b:ec:96:a1:f7:
6f:27:6c:cd:16:19:5d:59:2b:c8:78:20:a2:9a:8c:
42:e8:74:92:a1:25:35:86:7f:21:56:9b:55:da:e4:
c5:ce:a8:96:f3:c7:86:71:ff:0c:99:b8:94:3e:fb:
1a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:33:CA:14:16:F1:9A:60:41:B2:79:FA:8D:A1:2A:A0:4D:D0:65:EB
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:66:ee:27:e7:40:c3:ab:85:7a:5f:42:81:03:1a:16:95:c2:
9d:98:93:0d:a1:fb:b4:ee:f0:94:8e:58:7d:d7:e9:d0:df:7c:
4a:60:3e:8a:85:12:02:fa:6c:97:b7:71:2e:87:c7:da:76:73:
9c:f6:1a:91:b9:d7:a9:24:e8:4e:05:4c:c0:b9:e2:4c:6d:18:
ed:61:fa:02:9a:7e:18:3b:0f:9a:46:1a:28:f1:25:3b:5b:fd:
a2:4e:39:18:f7:c1:4f:bf:6b:da:5b:0c:bd:7f:58:e2:6a:ea:
41:7d:b9:dc:10:23:e5:99:f3:d9:51:14:50:8b:52:f9:79:5c:
0e:94:d3:e3:2c:7c:83:a3:96:53:95:42:ac:ab:8e:af:5c:eb:
df:de:20:77:45:cb:e6:a1:bf:88:e1:56:8f:3a:a3:99:e8:24:
13:e6:5e:4b:7f:92:8b:96:2a:b2:6b:02:cc:36:d9:23:f6:9d:
cb:a1:9e:dd:0a:a1:57:fa:cd:60:6f:de:3a:dc:60:c3:df:65:
f7:0f:19:41:e2:d4:18:03:f3:ae:d3:80:63:02:dc:26:f9:82:
52:54:77:2c:ea:86:45:e8:d9:b0:25:de:88:af:fc:eb:c0:ce:
ef:66:35:02:58:77:ea:e2:96:60:f3:bf:dc:7d:cc:5b:c1:a2:
50:86:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:40 2024 by rpki-client on console-fra.rpki-client.org