Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
File: 9xPX34BXC8z7JzeT8ApdRshT5Jo.mft (raw, json)
Hash identifier: KUNlh0lmQK9aLqfyoIOLHO+rpRw2paH2pJSg+N4G4Og=
Subject key identifier: 6E:E9:D8:74:EA:6E:C3:14:CE:31:B2:09:CD:67:54:0C:E8:2B:D2:5B
Authority key identifier: F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
Certificate issuer: /CN=f713d7df80570bccfb273793f00a5d46c853e49a
Certificate serial: 01936AB4683D5AB37A851DA4C148955E8F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
Manifest number: 029E
Signing time: Tue 26 Nov 2024 23:00:28 +0000
Manifest this update: Tue 26 Nov 2024 23:00:28 +0000
Manifest next update: Wed 27 Nov 2024 23:00:28 +0000
Files and hashes: 1: 9xPX34BXC8z7JzeT8ApdRshT5Jo.crl (hash: 00dMN69BWB79gDKMQmwDxj6kgJDpN4jonqqlvfAk/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:68:3d:5a:b3:7a:85:1d:a4:c1:48:95:5e:8f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f713d7df80570bccfb273793f00a5d46c853e49a
Validity
Not Before: Nov 26 23:00:28 2024 GMT
Not After : Nov 27 23:00:28 2024 GMT
Subject: CN=6ee9d874ea6ec314ce31b209cd67540ce82bd25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:0c:4e:fd:ba:76:42:a2:ec:c2:fc:4d:c6:
27:84:72:ec:4a:8c:30:35:dd:67:5e:89:37:fc:9c:
47:86:c6:38:79:32:af:a1:c3:ae:ef:43:09:d4:1d:
b9:97:f9:c9:c1:1f:51:f6:9b:55:50:d7:64:c7:20:
fc:1a:03:6f:80:00:f8:47:40:73:52:13:d8:62:7d:
5e:2b:9e:59:52:65:98:7f:09:38:72:2f:ca:86:30:
37:41:3e:66:92:96:24:c2:d4:dc:0d:34:06:e3:ee:
56:c8:86:77:3c:86:66:eb:ee:f0:f3:1d:22:37:75:
82:f2:7e:8f:b7:84:69:47:9f:1b:cd:e6:ca:b7:a4:
55:6d:71:ca:a7:c6:25:0c:45:8f:0a:d1:fe:1c:19:
20:eb:10:88:5f:a8:5e:fb:3c:8e:e8:fb:65:3c:9d:
c5:dc:02:62:ba:c7:3a:3b:3f:36:3e:d8:d3:73:93:
90:86:f8:3f:9d:13:7f:54:53:d1:be:55:6c:e5:00:
43:2c:e9:19:f9:8e:31:eb:f1:d9:1f:c7:fc:34:26:
c8:f5:66:9b:50:7f:58:23:da:1f:ca:9e:3c:55:9d:
b6:a7:28:1e:bc:3d:45:63:23:d2:b4:f7:68:23:bd:
14:2d:de:ef:72:23:36:2c:5e:d3:b1:6f:de:0e:69:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:D8:74:EA:6E:C3:14:CE:31:B2:09:CD:67:54:0C:E8:2B:D2:5B
X509v3 Authority Key Identifier:
keyid:F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:db:17:fd:a4:52:17:49:cf:83:06:42:f3:6e:0c:f7:5a:d2:
d1:fa:61:f9:39:e9:52:8e:8e:fc:ea:e1:82:d0:ce:6c:9a:c2:
b8:47:40:7b:0b:ee:0a:a5:38:06:42:5d:91:30:cb:9d:b8:33:
3d:5e:88:8a:6e:21:6d:6d:86:0c:3d:6d:52:60:da:0d:c3:33:
fa:c4:71:68:bd:c6:68:bd:29:95:44:c7:17:92:02:eb:40:24:
11:fc:23:e9:48:d7:18:7c:b3:54:ea:92:38:2d:e8:62:c4:4e:
31:d9:ff:31:6c:74:34:82:a9:d0:a8:9b:61:93:bf:c1:ed:b6:
9a:b0:2c:71:6c:c6:46:5f:dc:a8:92:aa:23:d8:62:0d:26:89:
70:94:ef:c7:1f:9e:a9:2e:20:96:18:cd:87:fd:e7:fe:e3:97:
e2:80:03:7b:dc:57:3c:d3:63:34:31:ac:42:67:c8:b2:61:11:
5e:a9:03:28:8b:c6:67:d3:40:5b:db:37:8f:ff:f2:4e:9d:e8:
d9:84:4c:c7:ee:e9:ce:ee:d8:92:e3:71:7f:0e:d4:5c:8f:70:
28:26:19:f1:74:ef:93:5e:6b:a7:37:41:fa:61:42:a4:1c:f0:
9b:9e:00:78:c4:4a:60:95:d9:0d:53:94:3c:47:73:52:62:85:
60:01:a3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:20 2024 by rpki-client on console-fra.rpki-client.org