Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
File: RDNmA3i76zplxtyp7Qp3b70gRhA.mft (raw, json)
Hash identifier: InqTElggxQGajphHX8V4+u7TISgV9RWh2s078NhldDI=
Subject key identifier: 69:75:95:DF:2B:C5:38:AF:BE:EE:99:84:65:14:F2:B4:1E:AA:DA:2A
Authority key identifier: 44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
Certificate issuer: /CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Certificate serial: 01935764B348DF0FED1B34B27779EA98240A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
Manifest number: AE
Signing time: Sat 23 Nov 2024 05:00:37 +0000
Manifest this update: Sat 23 Nov 2024 05:00:37 +0000
Manifest next update: Sun 24 Nov 2024 05:00:37 +0000
Files and hashes: 1: RDNmA3i76zplxtyp7Qp3b70gRhA.crl (hash: rZAfQrtgTShmFuoJJ5W9HIDQyZzZrVYbmtFtiuU1+rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:b3:48:df:0f:ed:1b:34:b2:77:79:ea:98:24:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Validity
Not Before: Nov 23 05:00:37 2024 GMT
Not After : Nov 24 05:00:37 2024 GMT
Subject: CN=697595df2bc538afbeee99846514f2b41eaada2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:10:98:4c:52:90:0f:f8:91:7f:e5:fd:2f:
ae:bc:1e:9e:a1:5b:4d:96:81:2f:ca:33:20:dd:4e:
99:fb:20:1c:b5:41:e3:6d:10:e7:d1:37:29:a3:2c:
58:47:4f:b9:18:5f:9b:11:41:83:af:0f:9a:b9:71:
dc:07:e9:81:0e:01:20:57:a2:29:f3:52:cc:bf:51:
ec:ba:4b:3e:e4:16:fb:1c:22:b6:9a:b1:f0:67:04:
8d:04:3e:99:a4:31:95:b1:26:28:5e:1c:e2:1c:3e:
27:82:f0:ab:8f:d9:e0:19:2f:b7:31:9e:12:83:3f:
fb:21:29:b1:c7:ef:c6:77:ee:c7:f1:68:4a:93:fc:
84:1d:97:30:1d:4b:59:24:db:e3:9e:9e:ba:c9:c3:
4a:81:2c:b6:74:9f:9f:ee:6d:5b:e2:76:35:ca:7d:
81:da:f1:a9:72:b8:db:41:64:9d:52:6f:55:a4:a4:
d2:bc:39:58:f6:53:03:d9:ab:45:c5:10:75:ed:cd:
f3:f2:10:36:9a:19:14:c1:0d:3d:ab:6d:95:63:6e:
9a:a7:a5:4a:f9:5e:56:1d:03:dd:ec:0d:48:5b:19:
a0:67:e7:04:06:e3:24:a0:2f:62:6d:e0:2d:4d:e7:
80:37:f3:f0:45:35:f3:b9:0d:2c:13:65:96:9e:e9:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:75:95:DF:2B:C5:38:AF:BE:EE:99:84:65:14:F2:B4:1E:AA:DA:2A
X509v3 Authority Key Identifier:
keyid:44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:60:f5:dd:3c:ed:83:e5:2e:12:87:40:7f:a0:1a:4f:9c:20:
6d:cb:09:d2:be:05:b2:c8:19:84:c6:a1:09:dd:f7:d6:34:e7:
b6:97:4e:29:2f:70:b1:76:91:90:39:3b:08:9c:ba:88:9a:bb:
35:f7:40:cd:e5:73:63:f6:03:69:24:8a:5c:17:b8:7a:bd:2e:
bf:2a:9d:f2:fc:3b:44:4e:87:eb:99:ca:cb:5f:c4:3d:d2:82:
1f:f3:b6:ce:77:dc:96:6f:5a:62:86:23:8f:e8:07:88:c7:53:
f4:33:71:9f:4e:5c:a3:ce:b2:87:e6:83:93:75:53:c7:bd:bb:
bf:d3:41:5a:3e:78:d4:9f:ef:50:b7:a3:dd:af:51:4e:79:74:
cc:4f:f4:23:8f:2f:71:25:cd:5c:ae:ed:47:76:7d:71:34:f6:
25:1a:3f:8a:e8:09:60:81:58:5c:03:6b:d8:66:bf:f1:53:b6:
6c:db:4a:b1:e0:ae:29:28:a3:b1:65:2c:d2:ce:16:e5:3e:d1:
d2:c7:91:dd:bc:0b:bd:6c:f1:bf:7b:d5:f5:4d:35:0a:97:aa:
53:b5:1e:e5:a4:80:0a:b6:b9:48:29:57:e3:e7:8a:1c:cd:ec:
b4:0e:51:19:19:bc:06:d5:59:c1:24:d3:41:48:87:5c:63:9c:
45:d1:be:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:13 2024 by rpki-client on console-fra.rpki-client.org