Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
File: ARcQ2VyDvj54YLl7HXs25GBxc6I.mft (raw, json)
Hash identifier: Mxxw8RuoUHJNMsCYLLOhaEUrxeItXTCIEQMtTnQd+JM=
Subject key identifier: D9:95:5B:E5:5F:B1:C5:A2:94:1D:0B:2E:F8:54:81:B8:4C:E3:27:D2
Authority key identifier: 01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
Certificate issuer: /CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Certificate serial: 019369D8A35988C389CAC4E0CC5DB675E8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
Manifest number: 1376
Signing time: Tue 26 Nov 2024 19:00:25 +0000
Manifest this update: Tue 26 Nov 2024 19:00:25 +0000
Manifest next update: Wed 27 Nov 2024 19:00:25 +0000
Files and hashes: 1: ARcQ2VyDvj54YLl7HXs25GBxc6I.crl (hash: LQ/XCjDVFFx8NE6+s8YRO0BBEaF1Gor7gjpzv/JZPjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d8:a3:59:88:c3:89:ca:c4:e0:cc:5d:b6:75:e8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011710d95c83be3e7860b97b1d7b36e4607173a2
Validity
Not Before: Nov 26 19:00:25 2024 GMT
Not After : Nov 27 19:00:25 2024 GMT
Subject: CN=d9955be55fb1c5a2941d0b2ef85481b84ce327d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bf:96:98:18:6c:39:3f:98:a0:f1:6b:21:82:
10:49:ba:f0:13:21:5a:d8:d2:06:70:fa:e3:c9:91:
b1:53:c8:7d:d4:51:fb:37:9f:1e:4c:8f:ab:ab:75:
4b:c4:63:19:39:94:58:90:86:cf:f7:ac:ce:16:4a:
03:f8:e4:01:7c:dc:94:f5:73:d4:ac:34:20:6e:48:
89:38:f7:43:9a:16:97:c0:35:75:f0:98:71:6f:5e:
61:25:d8:c5:ec:ce:68:9c:85:c3:79:35:1d:df:21:
cf:bd:df:65:9d:b9:7d:14:44:59:bc:48:29:ac:99:
8a:a1:11:99:6f:cb:8c:ca:fd:50:e8:4a:72:98:03:
cb:58:e8:db:7f:27:45:eb:ba:54:69:38:c5:e9:65:
94:f1:27:94:7e:c3:e8:0c:8f:56:53:1b:35:4f:07:
2f:c9:69:3d:36:21:72:6a:8e:e2:be:d5:f7:11:a8:
4e:0b:28:ff:65:4a:37:91:b4:77:c8:63:06:29:1d:
a1:49:4a:33:6a:fb:58:8f:a3:24:15:3a:a9:ee:d6:
7c:6b:8e:35:b1:b3:2c:63:1e:9b:7d:99:61:ac:80:
e2:b8:f1:21:f9:09:5e:98:ce:df:71:c6:f0:1d:6c:
3d:f7:a3:e2:4f:d2:08:62:b7:b6:e4:18:69:4d:62:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:95:5B:E5:5F:B1:C5:A2:94:1D:0B:2E:F8:54:81:B8:4C:E3:27:D2
X509v3 Authority Key Identifier:
keyid:01:17:10:D9:5C:83:BE:3E:78:60:B9:7B:1D:7B:36:E4:60:71:73:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARcQ2VyDvj54YLl7HXs25GBxc6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d04de-447d-4e2b-997d-3ad4032503c0/1/ARcQ2VyDvj54YLl7HXs25GBxc6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:32:fe:01:b8:6d:3b:db:d8:55:94:1e:e4:f0:6b:8f:47:20:
5e:a6:db:de:1f:dd:e3:46:11:1c:07:b7:a3:9c:a7:76:6a:d4:
0e:31:78:90:f2:6b:5e:7c:54:8c:14:35:1d:02:c9:a1:58:3c:
49:3a:c2:9f:a2:04:a4:80:24:ec:57:2e:44:c1:15:e9:dd:0d:
d7:ae:22:74:53:3e:0e:87:68:94:53:f6:18:73:2d:93:76:19:
3b:a0:10:6c:c9:dc:92:3f:5a:75:65:e0:42:29:de:fd:a0:38:
c4:52:ef:66:45:c2:89:cd:af:79:0b:2a:db:75:09:9a:da:3e:
d2:f6:37:04:d0:55:8b:49:1b:0c:b0:45:7c:6c:1d:1a:18:78:
39:d3:03:0b:fd:26:fc:ce:77:27:e0:73:f6:7d:c1:8a:09:e8:
c7:fa:23:fe:d4:84:3b:d3:43:ea:f1:f3:33:6a:30:23:80:06:
2e:da:4f:63:1f:fb:19:17:60:f3:a6:73:a3:3f:46:e0:4b:6d:
27:63:68:a5:b9:4a:45:e9:35:56:bf:60:52:cd:64:4a:3f:3e:
4f:05:c9:5b:70:e0:57:24:27:36:28:fb:79:17:2c:51:3f:ba:
e3:84:47:d9:3d:40:a9:33:88:8b:70:ba:d4:36:5e:99:ab:f8:
0f:e1:65:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:04 2024 by rpki-client on console-fra.rpki-client.org