Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
File: O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft (raw, json)
Hash identifier: AAm7XD9/G5i6BCY+qNAZU8VMcm/aQYf8NIKfdEhssh8=
Subject key identifier: B3:6A:23:36:5B:CE:64:9E:EC:32:CF:93:66:B0:31:FB:1C:10:47:5E
Authority key identifier: 3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
Certificate issuer: /CN=3b55e7feb907137299f5792c36395efba9b34b62
Certificate serial: 0193553F3BBFFE6A77A9746824563A35CCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
Manifest number: 0C17
Signing time: Fri 22 Nov 2024 19:00:27 +0000
Manifest this update: Fri 22 Nov 2024 19:00:27 +0000
Manifest next update: Sat 23 Nov 2024 19:00:27 +0000
Files and hashes: 1: O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl (hash: kaFNA26CRTyoL6LiP0EaSLWgmZi2gOJDqBn5Cnc4MKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:3b:bf:fe:6a:77:a9:74:68:24:56:3a:35:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b55e7feb907137299f5792c36395efba9b34b62
Validity
Not Before: Nov 22 19:00:27 2024 GMT
Not After : Nov 23 19:00:27 2024 GMT
Subject: CN=b36a23365bce649eec32cf9366b031fb1c10475e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:59:15:0b:a9:65:2b:bd:19:4e:60:1f:11:
87:a9:4d:0d:b8:8c:f8:c1:71:c9:cf:1b:34:0e:4f:
91:4b:63:71:a3:d7:ac:d1:17:95:e9:55:d3:24:79:
bc:43:0d:42:ff:0e:67:3b:96:9c:b9:2f:c3:e8:a2:
b3:f4:ea:60:2d:31:ec:38:a5:4d:7f:ad:d2:9b:1a:
96:58:03:ba:d6:54:61:f9:b2:25:2c:4a:30:41:74:
5c:c1:88:b9:b3:f0:b4:ad:24:ff:46:af:82:b2:1e:
98:7d:e7:65:44:bb:10:f0:d3:c7:29:54:ff:76:84:
41:65:1e:38:a7:bd:e6:70:07:1c:cf:7e:e8:98:1f:
4a:dc:09:41:67:a8:c9:b3:f9:cd:d6:cf:b0:46:2e:
58:65:77:28:af:ee:f4:e6:86:15:22:5d:1c:ac:67:
5f:5d:3d:8a:23:15:86:a4:ef:f2:71:4c:91:aa:7a:
34:fe:d0:53:f5:9a:78:95:b2:54:ef:ea:36:11:f7:
da:e9:b3:4d:c2:3d:04:4f:fb:9a:d8:2f:d6:77:3a:
7f:b9:ad:40:e4:0a:af:3a:f1:f6:98:ec:e8:28:ea:
63:49:bd:f3:fd:c7:d5:39:44:44:7c:46:aa:30:e4:
e2:fc:68:87:64:81:96:38:23:9a:8c:23:13:b4:46:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6A:23:36:5B:CE:64:9E:EC:32:CF:93:66:B0:31:FB:1C:10:47:5E
X509v3 Authority Key Identifier:
keyid:3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:36:0a:40:4d:d4:69:50:07:f6:e7:77:ae:00:3b:e8:94:0f:
0b:54:cb:1c:aa:ec:40:40:55:5b:46:f1:ce:a2:d7:b5:8f:d9:
ed:bb:04:a3:19:37:0c:40:68:ee:64:c8:49:74:8b:52:ba:d6:
43:49:78:fd:a9:95:e2:39:96:48:cf:15:db:75:f7:d1:6b:58:
6f:fe:2d:d6:fb:71:e3:db:dc:c1:65:13:ae:1a:03:55:e2:25:
76:24:4c:69:10:26:59:f9:50:88:8c:42:d5:28:a1:5b:7e:82:
12:66:96:b0:32:aa:1d:cf:af:70:f2:d9:23:ad:4c:cc:db:13:
e8:b2:51:75:7a:5b:e6:4e:24:9f:7c:dd:2c:7e:8b:34:aa:6d:
de:e2:e9:64:6b:a9:91:01:cd:44:28:38:af:44:ad:bc:75:17:
41:fc:63:10:fa:96:79:bf:46:f1:b2:94:6c:df:33:02:3f:72:
61:6a:38:69:31:fd:4a:e3:38:0c:8d:f8:e4:2c:d4:b9:f4:21:
82:f5:ce:d4:f8:d6:42:b5:c1:1b:a5:f8:4a:12:64:98:4e:36:
92:8b:12:05:b6:ca:55:cd:7d:9f:5f:40:0b:c9:d6:d8:9e:08:
e1:46:a9:83:66:5d:f3:04:a0:58:3f:82:41:a1:44:8e:40:24:
70:6a:14:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:50 2024 by rpki-client on console-fra.rpki-client.org