Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: rIVfa59moVfQIBP6SFFv204kNDYCBDIObYL0x68IpwQ=
Subject key identifier: 0C:C6:F0:E6:D5:73:55:99:B0:0B:5D:58:2F:E2:DD:A0:80:55:69:FF
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 019369D9A31B29B53C8364488469D5A58C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 0A11
Signing time: Tue 26 Nov 2024 19:01:30 +0000
Manifest this update: Tue 26 Nov 2024 19:01:30 +0000
Manifest next update: Wed 27 Nov 2024 19:01:30 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: iNzfGfj/cVS3SqIdzDyDZaEnvImnLICYZ0pVEr27xAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:a3:1b:29:b5:3c:83:64:48:84:69:d5:a5:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Nov 26 19:01:30 2024 GMT
Not After : Nov 27 19:01:30 2024 GMT
Subject: CN=0cc6f0e6d5735599b00b5d582fe2dda0805569ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:b5:d8:3e:b4:a3:4c:c0:1f:81:49:05:e7:
95:cb:6f:54:c6:72:c9:ef:47:17:ef:1b:80:8f:cf:
d1:11:aa:40:50:2d:eb:01:71:a7:7c:f3:0f:a2:f6:
8a:52:22:86:c3:99:52:3b:08:fe:35:64:9c:65:28:
44:c1:c2:c4:10:be:d9:2b:dc:c3:54:94:c1:cb:3e:
18:2f:9e:e9:b9:69:41:f3:c7:38:59:bb:70:27:c6:
dd:16:b9:30:e1:2b:ef:42:20:37:90:3d:61:f5:a0:
30:04:17:b6:62:d3:cf:a2:c6:eb:dd:b0:65:f1:03:
15:2b:eb:f2:91:f8:32:71:d3:ab:93:d7:f4:c5:45:
86:0e:4f:b4:2e:84:bc:fe:a5:4f:52:de:e1:b5:ed:
1f:2e:02:8c:8b:6e:c5:93:56:dc:d4:0a:cb:ab:d9:
b9:ec:0f:ee:f5:a6:93:94:e2:78:7b:87:e4:b3:a6:
4a:c9:47:5e:40:cc:86:59:16:f2:d5:5c:1d:a9:8f:
ab:4b:99:54:df:ab:ff:45:0f:b6:74:6b:21:3d:cf:
e7:44:f2:20:26:80:b7:36:87:fa:bc:72:af:d0:45:
89:55:c4:c2:d4:c9:2e:61:c6:1d:e6:b0:b4:de:8c:
70:14:ff:52:da:76:34:67:0e:bc:e1:e2:c1:ce:7c:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C6:F0:E6:D5:73:55:99:B0:0B:5D:58:2F:E2:DD:A0:80:55:69:FF
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:62:3b:7c:32:41:cc:bd:fc:56:bf:e2:80:e2:fa:12:51:99:
02:f4:03:1d:34:67:5a:cf:2b:62:df:85:83:9e:78:9b:74:c1:
55:27:ed:77:d4:76:0e:66:14:34:6c:d8:a5:8c:fd:1f:1f:d6:
91:c5:a7:d7:53:7d:b1:cf:65:70:c0:be:d5:01:8a:fa:e1:39:
2a:0d:ac:1c:e7:fb:5c:be:fe:45:d2:cf:25:15:5b:d1:c6:ce:
de:c9:e2:04:71:93:62:4a:a9:c3:6a:e2:dc:e4:9a:dd:70:88:
11:a7:d4:ab:64:7b:a9:6c:67:3a:18:00:f0:77:39:46:6b:03:
80:07:62:f2:2c:e3:31:63:33:00:8c:e4:ea:c3:b2:23:9b:ef:
3b:ff:44:25:76:71:59:b2:49:4d:79:36:95:23:7c:90:c7:54:
c5:17:00:ca:67:c6:60:df:49:38:4f:0b:61:1b:1d:71:03:d8:
3f:a6:e6:bf:b8:7d:e2:02:64:1e:b1:18:e2:0c:15:13:b9:64:
b5:2e:04:cd:7f:88:b1:54:67:a5:ea:1c:d3:bc:19:69:83:c4:
a5:f8:98:73:bf:a4:79:71:39:95:33:16:e5:d1:40:e6:33:6b:
2d:fd:98:4e:b0:1e:68:87:91:6c:f8:8c:8c:8c:29:02:71:7a:
01:7d:c0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:14 2024 by rpki-client on console-fra.rpki-client.org