Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: TrNmY6XmmhkIS7vn2gx3ZBF0Gg79I552DVLK2VFQbS8=
Subject key identifier: 53:AE:BC:86:36:6F:6D:86:8F:CC:37:E2:C0:AD:7F:76:22:FF:2B:1F
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 01936B2210411E4EBBC96586C5B7670501BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 12CB
Signing time: Wed 27 Nov 2024 01:00:14 +0000
Manifest this update: Wed 27 Nov 2024 01:00:14 +0000
Manifest next update: Thu 28 Nov 2024 01:00:14 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: vjYzma4pphNoMeg3WJNr2zJKLBRsYGsOtRuezBeyKcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:22:10:41:1e:4e:bb:c9:65:86:c5:b7:67:05:01:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Nov 27 01:00:14 2024 GMT
Not After : Nov 28 01:00:14 2024 GMT
Subject: CN=53aebc86366f6d868fcc37e2c0ad7f7622ff2b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:34:13:9b:a7:43:af:3f:38:6b:17:9b:f2:6b:
c5:c3:aa:f1:30:c9:4e:97:9f:84:55:2e:61:9f:75:
b5:00:13:fd:19:32:43:ac:81:54:79:e7:85:09:37:
a0:6a:69:af:2c:91:eb:83:ef:29:99:07:05:08:b3:
22:02:8e:8e:ef:4c:40:52:af:36:2a:ac:af:96:84:
00:62:e9:06:f1:75:cd:64:b5:b4:da:d8:65:2a:fd:
d8:12:cc:66:ea:1b:55:f6:d0:db:f0:91:d0:02:0d:
d1:1e:64:92:59:2b:4b:b9:2a:cd:3f:e6:f5:c1:e7:
0b:05:02:9d:69:7a:c3:3b:47:f0:02:f9:24:d7:71:
44:23:d0:a4:2a:6e:e7:9a:4a:eb:e1:37:16:98:8d:
a4:d9:4e:c4:bf:35:f1:1d:37:62:5b:e0:ec:8c:45:
61:c8:8e:44:10:04:99:20:4f:e2:fe:62:d3:af:00:
fd:5c:2d:68:43:5b:54:1a:91:80:9b:0b:5e:ec:c2:
18:26:09:76:3f:6b:2c:0f:66:e3:8d:f7:3a:a3:f7:
06:98:ac:b0:28:9a:5e:84:ec:b8:97:1c:ba:b2:d5:
ec:e2:e3:ef:2c:96:57:4c:5d:c6:3c:de:77:db:31:
47:9d:57:b9:bb:cc:1c:5b:c2:d0:6e:ae:f5:08:f8:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AE:BC:86:36:6F:6D:86:8F:CC:37:E2:C0:AD:7F:76:22:FF:2B:1F
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e6:3d:80:df:d1:1e:5f:40:6a:ae:79:34:48:14:c4:ef:0b:
64:b3:6c:40:fc:0b:90:f6:2d:71:4a:df:36:3a:20:78:e3:a1:
81:d8:63:a9:19:4d:7f:10:0e:57:07:64:f5:9c:11:85:5f:02:
eb:f4:5b:6e:35:75:37:54:d9:ea:b1:ac:1e:05:c1:6e:85:35:
76:7a:0a:75:80:50:05:82:ed:d2:25:f4:05:91:2b:63:dc:f1:
75:1b:d7:ef:d3:74:ce:b5:01:1a:4f:13:df:0d:28:59:6a:a1:
ac:67:6f:4a:3e:73:1a:1e:60:0d:52:f9:85:46:28:a3:07:10:
85:2e:d4:95:da:b7:fe:00:56:63:eb:8e:cc:09:08:70:cd:56:
e1:dc:c6:d6:c0:a0:b7:5e:f7:58:6a:ee:d5:36:8e:c2:e7:fe:
3f:ee:85:7c:57:e8:de:2f:20:4e:2a:77:a2:b1:fd:ae:12:ac:
e5:7e:c5:67:31:05:47:7a:3c:32:b8:64:2a:29:ca:e9:0d:66:
5f:12:7c:a3:7e:68:82:68:a3:04:95:ea:11:5e:3b:1f:73:a2:
9b:36:91:bf:8f:4d:c9:8e:22:6e:bf:88:d9:72:85:7f:01:41:
85:ce:77:af:ad:0a:b1:da:83:8f:20:db:4b:47:e8:b3:0b:d9:
e5:df:d2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:47:53 2024 by rpki-client on console-fra.rpki-client.org