Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
File: u0WFtGeSNzbELHly4QQvGy4w3GY.mft (raw, json)
Hash identifier: LdsOOM4aSfAJGO6suS10NO3ir1u6mdJf3wJW4SGfj14=
Subject key identifier: B5:41:7F:09:C0:B3:A4:6E:D4:56:07:C3:13:5E:DD:9B:30:4E:5D:7E
Authority key identifier: BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
Certificate issuer: /CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Certificate serial: 0193549A2C1BE4115D2FB4AEE543CEF4317D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
Manifest number: 136E
Signing time: Fri 22 Nov 2024 16:00:10 +0000
Manifest this update: Fri 22 Nov 2024 16:00:10 +0000
Manifest next update: Sat 23 Nov 2024 16:00:10 +0000
Files and hashes: 1: u0WFtGeSNzbELHly4QQvGy4w3GY.crl (hash: pzKiUcdpZcn5SMsDfp6uXSa3PLlL4T/XJLghp5pAeV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9a:2c:1b:e4:11:5d:2f:b4:ae:e5:43:ce:f4:31:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4585b467923736c42c7972e1042f1b2e30dc66
Validity
Not Before: Nov 22 16:00:10 2024 GMT
Not After : Nov 23 16:00:10 2024 GMT
Subject: CN=b5417f09c0b3a46ed45607c3135edd9b304e5d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:f9:cd:7d:9b:c1:6b:18:5f:08:58:d9:46:
5c:66:3d:24:1d:ef:07:77:65:85:53:5d:28:cb:33:
0e:8a:8d:0d:99:5f:4f:92:b8:84:63:a7:80:75:2f:
3f:72:4b:95:2f:06:f6:d6:20:74:3c:94:94:26:df:
c7:1a:b1:9d:9c:ef:92:21:f4:01:b8:2a:48:32:3a:
ca:7b:8c:9f:46:76:ef:f4:d2:a8:d5:7d:f9:40:f7:
c8:db:2c:10:b9:40:15:c5:3e:d6:65:d8:9b:b2:be:
fa:a5:83:b4:13:9e:82:ae:1a:d5:23:d7:76:07:36:
1f:62:7c:67:c2:08:6e:8b:dd:98:0a:71:8a:89:9d:
58:7b:f0:7f:99:a7:a8:b3:52:8c:b5:07:fa:1e:26:
e5:0f:5a:aa:66:90:a1:32:68:d6:fc:dc:6d:76:62:
74:1a:f7:8b:61:04:cb:64:b0:aa:27:c8:55:42:08:
80:1d:7c:00:ac:1a:dd:c7:3f:19:8a:96:c0:9c:2f:
f2:a3:5e:04:ed:cb:7d:13:f5:cf:4c:a9:5a:1a:9d:
24:e3:3c:26:cb:67:d7:de:18:ad:fc:2a:94:ee:0b:
3c:e2:23:ef:b1:38:53:92:49:6c:b0:1a:7f:86:ab:
62:d1:db:96:fd:ce:95:ad:47:4b:e6:5d:f8:7c:e0:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:41:7F:09:C0:B3:A4:6E:D4:56:07:C3:13:5E:DD:9B:30:4E:5D:7E
X509v3 Authority Key Identifier:
keyid:BB:45:85:B4:67:92:37:36:C4:2C:79:72:E1:04:2F:1B:2E:30:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0WFtGeSNzbELHly4QQvGy4w3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcb846-3fa2-457f-8985-6638101e319b/1/u0WFtGeSNzbELHly4QQvGy4w3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2f:4a:2c:7d:44:c3:e0:4b:9b:7d:ed:58:64:1c:a8:82:81:
f4:e8:0d:52:b4:c2:4d:a3:13:ea:48:85:fa:90:00:47:b0:ca:
96:6f:16:ee:b1:fa:28:2a:94:1f:32:ec:ff:cc:d0:96:fb:81:
d2:85:ef:32:f9:8e:4b:da:15:c5:9a:c8:17:28:93:d6:c7:cd:
a6:1a:c7:4a:77:4d:80:d2:89:0f:05:76:96:96:d6:d2:93:25:
84:8a:b7:5b:aa:12:38:31:91:25:98:0d:e0:e3:bc:06:91:c1:
66:f4:09:d2:e4:c8:d6:8b:a6:9d:30:1b:1e:73:54:77:aa:f8:
10:bf:ae:be:ec:1b:5e:84:f8:2e:e5:6a:e1:3f:40:7e:4a:e0:
22:d0:98:a0:d5:f0:81:b8:6b:e9:c4:7a:a2:ff:a3:04:bb:2a:
65:77:a6:f5:20:74:3d:fb:17:ec:18:a0:87:03:48:48:60:45:
c3:84:be:38:1b:73:38:bb:ca:c4:a5:b8:15:df:a7:5c:82:a3:
e9:b7:5a:cb:9b:30:c7:74:86:b2:44:55:58:a5:c6:63:c1:4a:
8c:e3:50:61:af:1a:d0:b3:32:96:a3:0d:79:dc:e6:62:95:8e:
32:b3:27:a9:07:ce:31:86:24:47:70:0e:c1:bb:85:3e:02:f7:
40:96:50:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:46 2024 by rpki-client on console-ams.rpki-client.org