Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
File: JCsEwxmbHrlpPUMg9702HtYXBTA.mft (raw, json)
Hash identifier: 8tmYIGntj4cMuoEWNRB9LRRwmbBhoEeP8z+LeCxehtY=
Subject key identifier: F7:CC:0D:E3:5D:54:08:97:73:51:73:77:42:CE:C2:6A:15:92:66:09
Authority key identifier: 24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
Certificate issuer: /CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Certificate serial: 01935877AD00F21BCD7D9A46E433579715C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
Manifest number: 136F
Signing time: Sat 23 Nov 2024 10:00:58 +0000
Manifest this update: Sat 23 Nov 2024 10:00:58 +0000
Manifest next update: Sun 24 Nov 2024 10:00:58 +0000
Files and hashes: 1: JCsEwxmbHrlpPUMg9702HtYXBTA.crl (hash: ZKU/UsFsLU1b06VAh2reHf477UgliSzBsWVj5RGs8Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:ad:00:f2:1b:cd:7d:9a:46:e4:33:57:97:15:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=242b04c3199b1eb9693d4320f7bd361ed6170530
Validity
Not Before: Nov 23 10:00:58 2024 GMT
Not After : Nov 24 10:00:58 2024 GMT
Subject: CN=f7cc0de35d5408977351737742cec26a15926609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:f5:ae:d5:16:66:6d:53:f7:64:e2:d7:4f:
eb:36:0b:85:7d:34:bf:17:5e:8a:5c:df:78:fa:a1:
9c:ee:c7:4c:b4:4f:dd:9b:99:c0:4d:ca:02:0d:71:
7b:dd:a5:9a:81:0e:a3:c1:4f:23:69:b9:8b:b1:8f:
9e:a5:32:87:4e:db:94:63:2c:b4:db:d7:f5:7b:aa:
14:0b:9b:ee:10:43:42:ac:dd:a1:4d:88:fa:85:3c:
1c:11:63:31:74:05:48:07:64:92:d0:35:85:f7:f3:
48:6c:ec:4e:95:f5:23:b4:79:64:86:da:7f:09:d3:
c5:31:01:87:a0:87:a5:6f:ad:15:6f:f1:67:10:fe:
69:25:12:e0:22:da:2d:ad:75:d0:98:ff:c5:5a:ed:
b3:77:88:0b:29:52:5c:f0:cc:43:60:62:86:9c:eb:
b6:6a:9a:af:23:32:2e:44:fd:6d:f1:99:4f:8e:ae:
19:9f:8f:d6:93:a3:86:48:df:d4:ee:9f:63:82:43:
3a:ae:b3:5d:a3:e9:49:c7:43:f2:f5:f4:49:6d:1f:
76:67:01:14:05:03:fc:53:94:85:a8:ca:ec:87:6d:
cc:fa:ad:d2:21:01:32:ad:c6:a9:98:13:2e:7c:6b:
c6:7d:69:35:92:79:72:ba:69:55:65:c6:f8:a2:e6:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CC:0D:E3:5D:54:08:97:73:51:73:77:42:CE:C2:6A:15:92:66:09
X509v3 Authority Key Identifier:
keyid:24:2B:04:C3:19:9B:1E:B9:69:3D:43:20:F7:BD:36:1E:D6:17:05:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCsEwxmbHrlpPUMg9702HtYXBTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0c02c0-569c-45ea-b05b-66b67e21a82b/1/JCsEwxmbHrlpPUMg9702HtYXBTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a1:85:72:f3:da:e9:9a:51:1e:b7:ad:0b:a4:74:fc:9b:65:
7f:fe:81:52:91:11:18:f4:92:46:7e:dc:5a:6e:15:c8:b8:be:
e0:b8:bd:1f:98:c5:7c:13:3e:d0:61:62:99:2a:da:5c:7e:81:
aa:06:0a:00:bc:9f:9d:9b:77:56:be:7d:3a:e0:61:06:f3:51:
d8:93:46:b5:b5:06:7c:8a:dc:ea:8e:fc:b2:ac:dd:83:ba:15:
8d:b1:47:44:b5:13:0c:8a:8e:78:36:23:f9:ca:1f:41:02:18:
79:4c:02:ef:49:89:67:66:c6:58:32:21:14:c2:41:d1:a9:cc:
2a:72:2f:0d:72:02:fa:5a:3d:a5:92:a5:03:0a:99:e7:3b:1c:
73:79:8d:11:6f:d5:4a:7f:d7:95:f5:bd:d5:1f:c6:13:7e:80:
04:a2:0b:b6:2c:f5:8f:31:30:33:da:8f:d7:2b:c5:50:3f:3c:
76:5a:34:7a:2a:ca:bb:aa:53:ec:1a:25:c8:24:1a:ea:da:98:
25:2b:a9:14:62:1b:45:e6:6a:5f:4b:d5:3e:60:e7:13:15:5d:
97:df:8e:c5:d1:d2:91:3f:92:bf:2a:df:27:8e:c0:ae:bf:55:
71:2a:8b:c5:b8:5f:07:e7:84:72:37:9b:f7:85:f2:cb:e7:58:
32:4a:14:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:59:54 2024 by rpki-client on console-fra.rpki-client.org