Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier: s7lBsctaoSSKvOdXH2vRByoeTM7TvloStU2oYSs6Udc=
Subject key identifier: 79:44:71:9A:63:64:E5:CE:C4:67:A4:FA:9F:33:A6:70:C9:15:FA:02
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial: 0193579B81ABFDAEB7BA43405E56C03B7A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number: 04A3
Signing time: Sat 23 Nov 2024 06:00:29 +0000
Manifest this update: Sat 23 Nov 2024 06:00:29 +0000
Manifest next update: Sun 24 Nov 2024 06:00:29 +0000
Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: nma1AV3eF/AHYXjrbaiPeyEGe3wiwMWtLr27+8bs1wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:9b:81:ab:fd:ae:b7:ba:43:40:5e:56:c0:3b:7a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Validity
Not Before: Nov 23 06:00:29 2024 GMT
Not After : Nov 24 06:00:29 2024 GMT
Subject: CN=7944719a6364e5cec467a4fa9f33a670c915fa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:03:c1:29:93:0e:0f:05:aa:53:33:7e:e4:
98:3f:10:b1:99:38:c3:99:98:2f:ce:b5:b5:4c:c3:
22:9d:6e:76:6f:d1:6e:6c:f2:2a:b9:56:02:60:ef:
3a:f7:1c:ed:d2:41:b1:dd:4a:24:37:68:49:66:9d:
f0:3e:ee:b1:46:f4:2d:68:7b:90:8c:60:4a:14:1a:
05:7b:8d:ed:2c:cf:34:71:f0:fc:b6:60:ea:db:0f:
2f:23:ce:58:2c:bb:5e:b0:6f:d8:11:3f:bb:6b:6b:
08:e6:e1:6a:cd:9d:32:95:41:ec:f7:fb:6c:88:5b:
17:5b:fc:52:d6:d8:a5:e1:d5:e9:3d:a7:18:70:eb:
b9:d7:fb:27:6d:77:fa:2e:3f:0d:6e:f4:04:6d:58:
21:ae:9a:df:ec:af:93:2a:79:54:88:63:96:8f:a9:
7c:37:ff:72:4f:7d:6b:f1:72:93:42:f4:d2:2c:a0:
6a:70:61:f0:81:11:69:82:1f:2b:00:f6:23:b5:32:
7a:12:9c:40:cf:18:b4:3d:df:a0:a4:2e:d6:44:47:
9b:f3:7f:86:31:61:de:7c:6b:3e:72:5d:0c:c3:c0:
24:ef:15:f0:1b:02:9a:6d:fa:3f:df:9a:10:1a:13:
c4:47:98:15:6c:75:7a:6e:29:f5:d8:3c:7e:d8:6b:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:71:9A:63:64:E5:CE:C4:67:A4:FA:9F:33:A6:70:C9:15:FA:02
X509v3 Authority Key Identifier:
keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ef:77:98:ab:6d:da:04:4d:c2:47:0c:32:37:0f:84:59:58:
0a:b5:95:7f:04:2c:28:45:43:87:b2:27:47:09:b7:7d:97:92:
05:33:6f:5b:df:7b:32:96:af:29:f6:2f:4c:c7:3f:4e:09:ba:
44:f3:d4:9c:83:96:a3:50:92:7e:a7:9c:b8:8e:30:bd:36:c5:
52:9f:e0:f9:9c:1d:7f:36:35:95:81:46:b0:e9:4b:fb:1b:9c:
f0:69:bc:31:39:57:90:fe:bf:24:9b:65:b2:50:59:c4:59:ef:
74:6a:03:78:d9:78:5a:63:d2:da:29:c3:03:4e:a4:90:9a:db:
39:da:f6:2b:c3:9a:fe:a4:77:57:37:b2:0c:93:42:d1:e2:7e:
1c:4f:e5:9b:0d:91:7c:9d:75:b8:c7:19:17:04:c0:fa:72:4f:
7d:2e:a6:09:cf:e0:ed:b9:81:8f:9f:3b:fc:c0:c4:4e:a0:4e:
a2:b0:87:e2:a5:7e:89:f3:86:1f:aa:db:3f:f0:b5:61:41:cc:
9d:b9:c5:d2:06:a2:67:d3:d5:96:6c:38:33:99:a7:3c:23:bc:
91:3d:16:b9:34:5a:3f:31:06:3d:28:0d:34:e9:db:ac:8f:e1:
77:bb:59:46:ca:0c:51:d6:b1:9b:c1:7d:aa:25:92:88:65:f6:
85:67:89:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:42 2024 by rpki-client on console-fra.rpki-client.org