Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
File: mK47fDdSIET2g56i65KSvq3Up3M.mft (raw, json)
Hash identifier: p43aKNoYC1i1QJTGOWXVG/wOTUHms/D/LeKHp6/cHOw=
Subject key identifier: 32:F4:3E:11:3E:90:0B:52:EE:27:EF:A6:39:3B:ED:C0:28:51:5C:86
Authority key identifier: 98:AE:3B:7C:37:52:20:44:F6:83:9E:A2:EB:92:92:BE:AD:D4:A7:73
Certificate issuer: /CN=98ae3b7c37522044f6839ea2eb9292beadd4a773
Certificate serial: 018F874AA17A53F524DA1B56789D6ECE45D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK47fDdSIET2g56i65KSvq3Up3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
Manifest number: 1176
Signing time: Fri 17 May 2024 16:02:46 +0000
Manifest this update: Fri 17 May 2024 16:02:46 +0000
Manifest next update: Sat 18 May 2024 16:02:46 +0000
Files and hashes: 1: mK47fDdSIET2g56i65KSvq3Up3M.crl (hash: K/6f3dTjIXTTUC/YadqbxqlTNh8DPc0zlZVPpUwOqD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK47fDdSIET2g56i65KSvq3Up3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:a1:7a:53:f5:24:da:1b:56:78:9d:6e:ce:45:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ae3b7c37522044f6839ea2eb9292beadd4a773
Validity
Not Before: May 17 16:02:46 2024 GMT
Not After : May 18 16:02:46 2024 GMT
Subject: CN=32f43e113e900b52ee27efa6393bedc028515c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:43:fe:af:12:0b:89:3d:12:66:ae:5e:8e:
bd:2a:18:bb:58:ea:a0:13:db:17:c4:8f:de:cd:46:
f2:6b:23:f6:79:77:35:0f:a5:da:0a:47:5e:f6:a8:
ee:b0:c6:74:82:33:1d:57:dd:77:f0:d3:8f:9a:fa:
4f:fe:a1:e9:e7:ca:54:b4:d9:bc:75:3d:7b:5e:b1:
e1:4a:5b:4d:b0:95:c1:41:38:7b:d7:48:99:c7:5a:
8b:2e:25:2b:fd:d9:9a:1b:d9:b5:0a:3b:23:32:c9:
d2:b6:09:e7:52:e9:28:cd:36:b3:fe:23:5d:36:8d:
cc:c0:f1:3e:7b:4c:0a:2a:95:09:5f:8f:2a:4f:b1:
d4:16:78:c2:a2:ba:2e:92:69:65:2c:62:13:7e:1b:
b2:a1:8d:ef:96:1f:25:a3:0e:53:f8:2a:da:02:a1:
8d:f7:7c:2e:88:5b:4e:63:8f:06:60:fc:c4:7e:03:
41:45:e6:b2:19:85:ea:70:46:1a:80:28:d0:32:b5:
7b:17:e2:16:8d:b4:6b:3d:bd:ae:cd:66:20:85:b2:
dc:a5:7f:7f:5d:33:85:d5:1b:b5:c2:7d:26:28:31:
92:62:73:37:43:a0:1a:83:3e:b3:76:2c:fd:05:b2:
17:cf:56:56:bc:23:45:ac:95:8e:98:5b:4c:3c:ad:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F4:3E:11:3E:90:0B:52:EE:27:EF:A6:39:3B:ED:C0:28:51:5C:86
X509v3 Authority Key Identifier:
keyid:98:AE:3B:7C:37:52:20:44:F6:83:9E:A2:EB:92:92:BE:AD:D4:A7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK47fDdSIET2g56i65KSvq3Up3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce6831-7b2c-42bc-934e-7285227c1118/1/mK47fDdSIET2g56i65KSvq3Up3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6c:11:cb:8d:99:3a:3c:d9:c9:aa:44:31:01:b7:a9:25:bd:
00:be:85:d0:ca:00:b3:90:1e:68:81:d4:a9:10:43:de:12:ec:
5b:51:39:78:43:f3:f5:6c:80:c1:71:59:7e:92:88:f0:39:a2:
12:af:11:75:65:a2:38:20:0b:d2:86:64:2b:f5:55:5a:16:66:
42:65:15:97:68:a7:ba:d4:f0:39:dc:dd:49:ea:be:e8:68:0c:
23:3b:59:dc:d0:be:76:73:c6:fc:b8:fa:0d:e3:43:a7:f8:58:
68:1f:0c:1e:4c:8a:9a:3b:cf:b1:b7:8e:f5:6f:7d:4d:1d:fc:
c9:44:bc:ee:36:85:ce:0e:84:ad:81:a1:89:a4:44:79:16:5c:
1e:97:88:0a:83:88:81:1d:d1:62:67:a0:8f:7c:19:ee:94:7f:
40:0b:8f:fc:36:a2:23:8e:59:e7:e5:05:b8:30:a6:06:c6:fc:
ad:e7:28:4e:c8:1a:c4:cc:33:e6:a7:db:03:cf:5d:db:60:3a:
2b:e8:13:e1:1a:f2:67:09:b0:f3:58:6c:47:82:8f:76:1b:41:
be:cc:c8:63:f9:57:9e:3d:55:d9:90:85:56:a3:84:af:0e:bc:
55:de:a4:51:34:53:58:7a:df:1a:d2:45:53:2f:d5:0e:17:a6:
f3:0c:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:24:25 2024 by rpki-client on console-fra.rpki-client.org