Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
File: 3JXMdjEwknpvvB6y_XRD-s-hGh8.mft (raw, json)
Hash identifier: X1GxZ5nAkueiYb2Q4blrJ1yN7WMGLFOBcAm3Sf3+Qh4=
Subject key identifier: 5F:47:FC:45:CD:91:3F:17:0F:95:89:95:D8:50:82:37:50:B9:B0:C1
Authority key identifier: DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
Certificate issuer: /CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
Certificate serial: 019368C656F2CCD8FF3BD23F6DCE5CA90835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
Manifest number: 021C
Signing time: Tue 26 Nov 2024 14:00:49 +0000
Manifest this update: Tue 26 Nov 2024 14:00:49 +0000
Manifest next update: Wed 27 Nov 2024 14:00:49 +0000
Files and hashes: 1: 3JXMdjEwknpvvB6y_XRD-s-hGh8.crl (hash: wxApUST6wUSORHHsjhXNgyYXMxzFQvQACZ/XUgcwvbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:c6:56:f2:cc:d8:ff:3b:d2:3f:6d:ce:5c:a9:08:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc95cc763130927a6fbc1eb2fd7443facfa11a1f
Validity
Not Before: Nov 26 14:00:49 2024 GMT
Not After : Nov 27 14:00:49 2024 GMT
Subject: CN=5f47fc45cd913f170f958995d850823750b9b0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:ec:c0:43:8c:92:41:9b:99:0d:45:1d:a1:
e4:2e:81:46:d1:fa:46:59:d4:ca:04:52:e9:e6:2b:
e1:b1:cb:8b:5b:66:71:49:fa:27:3f:ec:b7:40:e7:
a8:dc:9a:8b:64:23:d3:03:e5:28:e8:3e:46:b4:04:
0b:3f:2d:36:70:50:a8:d7:36:f9:d3:e4:f6:5c:30:
a6:e1:46:b5:f2:4a:75:15:a3:0b:4e:26:ed:5f:61:
ec:69:e7:9a:6b:02:c1:bb:50:23:68:c3:29:61:b3:
0c:09:c6:c9:3a:05:0d:f7:61:d4:5d:f9:dd:20:85:
90:7b:25:a1:74:75:09:81:4d:e3:58:48:4d:27:31:
0b:f9:5d:ed:68:ec:5b:3c:5c:24:9b:b6:71:ae:5b:
ca:2b:c3:a0:36:9a:b7:79:65:c1:15:28:a8:24:64:
ed:81:bd:7c:1d:12:9c:f7:1e:8d:62:c5:13:84:93:
7f:e0:b7:6f:2e:ef:2e:95:e3:c7:0d:b0:80:0e:55:
fc:46:5a:de:2c:16:90:73:46:f4:a1:9c:38:e9:7d:
22:6d:7b:0b:70:97:12:40:7d:0e:bb:ab:1b:ad:13:
74:9b:28:57:e5:09:f6:c9:b0:b2:93:b6:27:a7:45:
82:ad:a0:66:ef:d3:f4:7c:2b:dc:90:96:80:a1:9e:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:47:FC:45:CD:91:3F:17:0F:95:89:95:D8:50:82:37:50:B9:B0:C1
X509v3 Authority Key Identifier:
keyid:DC:95:CC:76:31:30:92:7A:6F:BC:1E:B2:FD:74:43:FA:CF:A1:1A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JXMdjEwknpvvB6y_XRD-s-hGh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2f0fc7-1098-4253-a2aa-ceec3360d817/1/3JXMdjEwknpvvB6y_XRD-s-hGh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e4:44:4b:6d:48:fb:f8:fc:76:9c:3e:4c:01:ee:87:53:f1:
4a:31:b8:f5:48:f1:d4:d9:f1:10:1a:9c:bb:0c:a5:c1:30:49:
c3:a9:66:73:8b:4c:a5:44:3e:e0:30:2c:97:40:48:c7:1a:9b:
e6:59:67:00:1d:f6:d3:65:61:c5:9a:0e:26:0c:cb:2e:da:eb:
02:bc:2d:16:89:27:bd:7f:96:c7:7b:40:83:c7:ef:1d:67:27:
f6:be:12:06:11:6d:ea:5d:ab:40:45:b3:f3:8e:a6:47:48:06:
ed:8f:e5:43:27:c8:5d:6b:f7:b9:1c:e0:93:b0:42:f2:63:a9:
85:47:7e:2c:52:79:5c:2f:fb:3c:64:7b:a2:b7:26:42:87:d6:
97:d8:92:89:25:ec:c9:0f:1c:9a:ac:66:47:34:e1:03:d6:43:
31:64:cb:d0:ef:6d:21:e8:71:79:8c:49:73:41:97:5f:bb:c8:
ba:7a:83:28:41:88:8a:4a:39:6f:c3:4a:d0:81:ab:6c:bb:ca:
ed:85:74:b2:8b:f7:3b:6e:d0:b7:88:ee:0a:2d:82:42:78:31:
60:57:fb:d0:95:84:c3:57:6e:3b:56:63:02:0a:c7:fe:df:49:
e7:14:b4:9e:1c:98:38:86:00:3d:00:4d:db:67:27:7c:4f:b2:
86:81:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:53:55 2024 by rpki-client on console-fra.rpki-client.org