Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
File: rNbaLhYbceF0IP0x2l9D5VWNxH8.mft (raw, json)
Hash identifier: D7tQIwxepECmyd+q4Dn1c3pKiaruHdTlctxOmbXG5fI=
Subject key identifier: B8:E4:8B:EE:D0:FE:5C:68:A3:4A:CC:28:0C:35:3A:84:0B:3A:87:22
Authority key identifier: AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F
Certificate issuer: /CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
Certificate serial: 0193549C642F929964A90A490D7634D1A8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
Manifest number: 0406
Signing time: Fri 22 Nov 2024 16:02:35 +0000
Manifest this update: Fri 22 Nov 2024 16:02:35 +0000
Manifest next update: Sat 23 Nov 2024 16:02:35 +0000
Files and hashes: 1: rNbaLhYbceF0IP0x2l9D5VWNxH8.crl (hash: gr33lA4eS159r+QzoViTLCxp7LNDwadsMPki2/5vRGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:64:2f:92:99:64:a9:0a:49:0d:76:34:d1:a8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6da2e161b71e17420fd31da5f43e5558dc47f
Validity
Not Before: Nov 22 16:02:35 2024 GMT
Not After : Nov 23 16:02:35 2024 GMT
Subject: CN=b8e48beed0fe5c68a34acc280c353a840b3a8722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:ff:5f:6f:59:f5:db:6d:93:db:5d:4c:32:
b1:f0:9d:89:2d:59:c5:f1:26:ef:5a:28:a4:69:ae:
b6:72:6f:ee:e7:9e:6a:2b:3c:47:bd:5d:cd:29:e9:
cc:21:1a:35:ed:b2:6b:74:2b:98:eb:9b:4b:c6:55:
4f:69:75:06:a1:64:87:3c:42:5a:4a:a0:34:21:85:
02:66:ce:ae:da:26:cf:6d:02:91:28:b5:d3:36:a0:
e0:2e:cd:8e:8f:0d:e2:33:f9:21:aa:03:a8:89:57:
97:37:ba:95:38:5b:d1:a3:48:7a:d2:b2:1a:b4:1e:
8d:f2:15:ae:71:50:57:4d:85:c8:a1:bf:b6:44:28:
c6:ed:77:2c:6e:23:c0:9e:12:18:5d:78:f7:40:91:
69:e1:5c:25:c7:54:82:c3:e0:00:98:3b:41:ed:ae:
78:87:a0:5a:c5:ac:f2:e5:35:ef:63:dd:88:d6:5d:
5d:42:95:e5:6e:28:c6:af:18:dd:06:e9:39:83:bf:
ea:e0:77:19:60:3c:a8:3c:84:fb:82:7b:65:5e:94:
cb:7c:a3:b9:4a:6f:2c:49:dc:dc:db:3f:57:de:83:
6e:c1:ac:82:55:3f:43:93:38:20:7c:9b:2e:e2:b9:
01:b1:82:fb:8e:97:b6:18:a8:c1:c7:64:92:96:bd:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:8B:EE:D0:FE:5C:68:A3:4A:CC:28:0C:35:3A:84:0B:3A:87:22
X509v3 Authority Key Identifier:
keyid:AC:D6:DA:2E:16:1B:71:E1:74:20:FD:31:DA:5F:43:E5:55:8D:C4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbaLhYbceF0IP0x2l9D5VWNxH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/abd9eb-e070-4a61-b403-53eac0b0acb5/1/rNbaLhYbceF0IP0x2l9D5VWNxH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:59:12:8b:84:1c:65:98:b2:a8:f4:e2:f8:f2:e0:23:60:4a:
ff:08:f2:b3:82:0b:ca:15:0e:c9:a0:fb:4d:58:25:a1:a0:62:
e9:49:4f:08:54:06:c2:f7:d5:6b:35:c0:12:c9:d6:45:d2:78:
57:1a:d6:77:aa:81:82:11:71:25:ae:0e:b6:37:ea:6d:cb:20:
25:2b:f5:c0:70:dd:4a:24:02:f5:67:38:96:99:e6:dd:3d:cd:
d1:80:bf:b4:21:d6:9a:7f:01:da:6a:11:1a:7d:48:8a:aa:b3:
0d:77:b9:11:49:3a:5f:1e:e2:ab:62:d6:36:69:9d:91:99:44:
3d:c6:f4:3b:e2:71:7e:6b:62:34:07:70:31:00:ce:86:d2:02:
fd:d6:e7:18:97:23:cd:88:80:8a:1b:05:a8:a4:5e:c4:25:71:
3a:68:ba:a7:50:b2:89:d8:cd:f1:93:7a:06:57:a6:4c:7f:02:
2c:4d:e1:5b:5c:3a:a7:5c:04:63:28:97:1f:a7:24:55:dc:b4:
bc:62:ab:38:49:3c:f1:b2:57:f2:4b:32:cf:b9:f4:bb:42:ea:
2d:3d:5d:eb:bd:75:1a:2f:98:e2:34:56:31:b8:58:77:20:ae:
49:aa:be:fa:da:de:35:29:5a:3d:63:9a:44:48:48:f5:e4:56:
44:81:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:29 2024 by rpki-client on console-fra.rpki-client.org