Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
File: DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json)
Hash identifier: PlccCkZcVhgGIbY0Wc3khPwxWlympsnod+4iSp/Pk2E=
Subject key identifier: C2:61:AE:2E:D6:51:7F:E0:4D:DE:CD:F4:C9:09:3A:E0:92:F4:E4:62
Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
Certificate issuer: /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Certificate serial: 018F22381BFEBB39E43D240DB0E346B92B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
Manifest number: 0B09
Signing time: Sun 28 Apr 2024 01:00:53 +0000
Manifest this update: Sun 28 Apr 2024 01:00:53 +0000
Manifest next update: Mon 29 Apr 2024 01:00:53 +0000
Files and hashes: 1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: MHryl36Mpecu7CHE50v29Ve02YMCGrOVu9imrq9JWKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:22:38:1b:fe:bb:39:e4:3d:24:0d:b0:e3:46:b9:2b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c
Validity
Not Before: Apr 28 01:00:53 2024 GMT
Not After : Apr 29 01:00:53 2024 GMT
Subject: CN=c261ae2ed6517fe04ddecdf4c9093ae092f4e462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:c3:a3:a5:41:e2:2f:bf:f9:f4:c1:51:9b:
f1:6d:37:d0:c4:06:ea:d4:d4:86:1a:f3:8a:17:f1:
d4:47:07:bb:80:0e:4d:ee:8a:1f:30:e1:95:9c:a9:
f3:16:8b:47:87:54:4c:98:3b:b7:c6:d7:11:43:c0:
56:fc:4c:98:24:c6:58:21:16:fb:31:97:ca:87:35:
a9:0c:80:fe:2e:ba:52:a5:b1:56:28:00:a4:89:dd:
7b:b5:1e:df:91:1d:98:51:a0:41:e5:6b:c9:8f:98:
6e:4e:b8:41:e6:17:a9:65:01:3a:96:b4:a2:0e:3f:
de:96:0c:76:ab:a5:08:a6:3a:6b:4b:2d:89:d1:37:
11:df:73:91:b6:c8:56:48:5b:9b:1c:31:a3:e0:08:
1d:ec:17:54:2b:cb:b8:f0:fe:84:19:e6:94:a2:2e:
8c:7e:2e:e7:14:70:0c:f2:4e:3f:a7:bb:ea:9d:1d:
48:f1:38:ae:fa:9f:08:ae:62:23:e6:87:8e:e1:af:
fd:61:d9:87:20:01:62:a7:8a:6c:85:ad:6f:ae:aa:
61:c1:80:d1:bc:b5:59:05:01:b5:b4:ed:e0:88:52:
58:3d:f2:4f:ec:c6:d3:d7:16:b8:e9:29:e9:c7:8b:
f7:2d:d3:57:c0:c0:2d:ad:99:f9:35:56:89:fd:31:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:AE:2E:D6:51:7F:E0:4D:DE:CD:F4:C9:09:3A:E0:92:F4:E4:62
X509v3 Authority Key Identifier:
keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f0:56:1d:0d:4f:46:df:0a:2e:4f:37:75:7c:ca:d7:49:b1:
ca:fc:9c:c5:ce:1f:3a:4b:7b:d5:4c:68:d3:8b:5d:58:8a:a4:
58:a1:1a:d6:ba:df:65:a2:3b:cf:05:a9:97:75:ed:b7:22:52:
67:d4:c8:9f:ec:a1:ee:57:89:69:28:a9:86:ab:13:20:dc:c1:
c3:4e:1d:e3:dd:5b:e1:ff:ff:e8:93:e2:02:49:77:4a:84:c2:
ef:7b:0f:39:14:2f:c3:b4:2f:f7:69:55:7c:47:0e:c1:e3:6a:
4f:e0:98:56:4b:ba:a8:34:02:2d:c9:b7:f8:f8:8b:b9:b1:68:
f6:16:2d:80:41:f1:01:e3:32:7a:1f:a0:2b:45:4b:a6:51:8b:
8b:da:99:73:86:58:94:72:12:73:53:25:f0:ff:b9:84:4a:b6:
7a:eb:a6:4b:09:b6:86:2e:6d:bc:dc:46:e9:68:05:42:b3:a7:
67:99:24:68:51:6f:dd:d5:83:ef:d2:c2:c8:93:ac:60:66:e9:
3b:82:29:51:a7:f2:fa:bf:b4:3f:2c:e0:6a:72:e4:69:4e:9e:
ad:1a:ea:4b:bc:ff:3e:10:e2:a1:a3:80:79:7b:ef:d9:7a:c6:
aa:e0:f0:86:98:38:5d:35:28:e1:1f:f3:ed:b5:ac:fd:fe:f6:
36:56:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:35:58 2024 by rpki-client on console-ams.rpki-client.org