Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier: laXSGxvf6SZ47UEK3Ijo0K7Z2blJ7+mPiEEg176KgFU=
Subject key identifier: 32:F8:FA:BB:C8:72:A5:00:02:A8:44:6B:C3:EF:45:78:10:E7:E8:1A
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial: 018F87B687F8C03AEF40051B8A54B0BDE2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number: 09A2
Signing time: Fri 17 May 2024 18:00:37 +0000
Manifest this update: Fri 17 May 2024 18:00:37 +0000
Manifest next update: Sat 18 May 2024 18:00:37 +0000
Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: tACWs1Wql4NAw70Dl3+2giOnI/Cpu0tWZ6WTCxt5vVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:87:f8:c0:3a:ef:40:05:1b:8a:54:b0:bd:e2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
Validity
Not Before: May 17 18:00:37 2024 GMT
Not After : May 18 18:00:37 2024 GMT
Subject: CN=32f8fabbc872a50002a8446bc3ef457810e7e81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:c9:a8:9c:f8:13:2b:76:a0:76:f4:b3:ca:
8e:4a:8e:43:7f:8b:3d:35:2a:8a:ea:a4:74:a8:e8:
f7:39:e4:f0:07:c0:4a:21:4c:01:c7:38:1e:d6:04:
2d:d2:a8:12:d3:be:8e:11:c8:c1:83:4d:32:bb:73:
d7:61:03:4f:67:e7:cc:62:b1:8f:1f:84:94:9d:c6:
c1:6e:4b:1e:ea:95:0e:cf:da:bf:5e:3e:7a:b2:6c:
4e:8a:07:4a:9c:92:4e:7d:67:d2:45:63:8d:48:3f:
e2:e5:d1:a3:59:c5:19:d2:fc:7d:f0:06:e0:ce:95:
c7:18:30:cf:03:04:2f:fd:59:57:75:e6:3f:b2:ce:
dc:d4:68:22:f8:77:e7:ed:eb:86:d1:a7:7d:2d:83:
d0:06:5f:b4:e4:79:5a:e4:31:86:b6:35:06:3c:25:
70:8f:87:29:49:93:25:bb:f5:de:d9:a7:2e:6a:db:
60:08:64:43:af:76:8f:ab:25:f6:58:32:f3:6b:2b:
a0:ea:78:c1:41:fd:87:49:35:a6:19:be:3f:82:47:
8e:ef:25:ea:65:5c:aa:97:e9:77:35:54:26:50:5b:
88:e5:2f:b0:01:57:8b:07:60:bb:c3:26:f9:27:27:
31:c7:61:39:b0:55:d9:4c:ea:a8:93:64:a2:1c:24:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:FA:BB:C8:72:A5:00:02:A8:44:6B:C3:EF:45:78:10:E7:E8:1A
X509v3 Authority Key Identifier:
keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:76:ae:b6:05:68:68:00:00:65:7d:05:8d:82:23:80:f9:fa:
0a:58:97:68:fa:e7:6a:01:a1:ac:e6:cc:c6:00:f0:16:a7:50:
6c:e8:39:40:34:05:84:4f:9f:2c:ee:fa:87:25:57:70:d9:62:
b2:43:ad:bd:39:9c:b2:28:23:e5:d3:9a:f0:0f:51:8b:b9:6c:
96:36:f5:cb:74:a6:6c:a2:20:ee:a1:10:72:93:c2:97:cd:55:
80:76:aa:f3:69:5f:8d:8b:77:d3:54:24:f0:35:e6:e4:03:d8:
87:ef:e2:73:fe:46:68:1d:37:a9:12:98:b2:78:33:50:b7:83:
64:53:88:88:4f:6b:9b:8d:f4:65:5a:e8:0f:5e:8b:be:e2:9e:
fb:0d:9d:8b:f2:08:04:1b:de:b9:56:a9:2c:6a:cf:39:2d:a0:
2b:d0:43:03:cf:3b:26:b4:bf:ec:78:19:14:9e:44:51:3d:c0:
0c:c7:e4:6b:ae:a2:ef:84:26:26:64:d3:2b:f9:30:01:53:46:
c2:eb:db:90:e1:ff:67:7e:fb:83:6a:3a:c6:c8:b8:dd:21:9b:
43:c7:f8:35:57:5b:e2:f4:13:fc:b6:e3:01:f0:50:0f:be:d8:
3e:51:62:dd:1e:85:ec:c2:89:1a:54:7d:a5:ef:bb:d1:c9:5f:
9c:9c:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:58:33 2024 by rpki-client on console-fra.rpki-client.org