Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: YAKSn48T2/E/059kP3Y8A/1lkLuB7BHX3QjwPZPw7fg=
Subject key identifier: 5A:99:B5:73:31:02:1D:ED:2A:62:43:04:BD:2C:D6:2E:7C:4D:15:9A
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 01923994A9B1A6B05402074E624A2FA31AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 05EF
Signing time: Sat 28 Sep 2024 17:01:36 +0000
Manifest this update: Sat 28 Sep 2024 17:01:36 +0000
Manifest next update: Sun 29 Sep 2024 17:01:36 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: VUFflxT+xFuGK499lHDqFGF7rIcMpKrxk7NvS+c/k40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:94:a9:b1:a6:b0:54:02:07:4e:62:4a:2f:a3:1a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Sep 28 17:01:36 2024 GMT
Not After : Sep 29 17:01:36 2024 GMT
Subject: CN=5a99b57331021ded2a624304bd2cd62e7c4d159a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:5d:ae:5b:dc:f7:66:d2:50:a7:b6:87:34:
18:f0:66:f8:35:cb:ed:e5:44:79:36:ad:72:7f:af:
dc:05:30:93:2c:6c:c8:96:48:ba:f5:2d:49:65:63:
8a:cc:d2:e5:07:98:26:fa:56:1c:81:11:57:af:e6:
50:6c:d0:22:2d:a9:47:34:45:34:6c:69:83:b6:b0:
d2:36:1d:71:37:08:b8:3c:69:f3:3a:8a:dc:b0:12:
34:38:36:c3:2c:b3:cc:ce:a6:20:66:5d:34:55:89:
33:4d:89:34:04:29:11:c1:ff:28:6e:ed:e0:5e:e7:
e3:94:20:47:b3:92:80:3a:bd:72:16:12:ae:89:1a:
8a:e9:a0:be:a6:28:92:91:33:bb:03:e2:eb:99:3d:
9a:fa:a4:a2:8c:0e:cf:d1:0c:45:86:57:1e:a0:2d:
23:54:9c:2f:7c:c3:58:9c:62:7d:ab:3c:8a:83:99:
42:81:e1:c8:86:92:03:10:ad:73:72:71:7b:18:0f:
28:e9:83:cf:34:25:52:c4:ed:06:9f:05:75:3e:49:
a9:c5:3c:e1:05:d2:6f:25:ef:ad:6d:a8:ba:51:18:
70:7a:48:b2:8e:fc:50:ae:bc:d0:f8:e9:8a:71:fa:
ea:73:c8:2d:b3:b9:49:f8:16:64:f5:d1:07:e1:07:
36:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:99:B5:73:31:02:1D:ED:2A:62:43:04:BD:2C:D6:2E:7C:4D:15:9A
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6c:2d:4c:47:f7:7a:21:1e:1d:33:ff:51:85:29:8f:88:ec:
0c:44:96:cb:09:51:1d:ee:55:53:66:99:b7:09:58:69:a0:bb:
ea:a2:d1:1f:a8:d0:04:c1:51:a4:93:1f:a4:d0:5f:04:5e:28:
a8:4d:c6:8c:56:e3:93:f5:9d:56:6f:75:bb:0d:b2:56:29:1c:
ba:30:17:e2:7a:e1:7d:f0:2a:ac:36:2f:60:19:7b:78:02:a4:
62:c1:7e:58:04:4c:6d:fe:5d:73:28:f2:a5:55:21:e1:9d:ce:
b6:c1:5b:87:43:88:29:5d:4d:db:5a:a5:8e:95:6b:cb:b0:40:
fd:16:95:e6:6a:39:2b:77:cf:77:75:0c:dc:78:08:37:c5:d9:
b7:47:bd:e3:c4:e6:6e:a0:72:56:3c:89:db:a6:45:86:cc:bb:
3e:e6:de:74:c2:37:51:a4:cd:18:09:0d:bc:b5:d5:4e:e0:43:
10:a5:28:2e:49:b4:94:f1:26:3a:80:f7:6c:d5:df:28:dc:14:
3f:45:5f:32:2e:44:20:5e:4a:36:1a:49:3d:0d:81:1c:31:12:
a7:35:87:5b:ec:67:f8:e4:7c:83:b2:34:46:f1:04:97:c6:bd:
5c:c5:df:cb:5b:f3:e8:e2:96:de:c3:02:f6:1a:57:5d:ec:ce:
6a:1c:71:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 01:41:11 2024 by rpki-client on console-ams.rpki-client.org