Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
File: cMySQTZlvWsN3lGpprVl5ywyHlI.mft (raw, json)
Hash identifier: GXVyFIZKao4CRJiQagZ/AmCQsWGsqywVnzCQXEbb4go=
Subject key identifier: 6D:32:26:1C:3E:64:9C:77:F3:E0:12:1E:6E:8C:5A:85:52:CC:BF:13
Authority key identifier: 70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
Certificate issuer: /CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Certificate serial: 018F8748B1F786A285C5E5A9D7997E522B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
Manifest number: 0254
Signing time: Fri 17 May 2024 16:00:39 +0000
Manifest this update: Fri 17 May 2024 16:00:39 +0000
Manifest next update: Sat 18 May 2024 16:00:39 +0000
Files and hashes: 1: cMySQTZlvWsN3lGpprVl5ywyHlI.crl (hash: 1Dosn1G6JBWh1GBgm7Ndaf4AyVS34cnq8xae2D5riAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:48:b1:f7:86:a2:85:c5:e5:a9:d7:99:7e:52:2b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cc92413665bd6b0dde51a9a6b565e72c321e52
Validity
Not Before: May 17 16:00:39 2024 GMT
Not After : May 18 16:00:39 2024 GMT
Subject: CN=6d32261c3e649c77f3e0121e6e8c5a8552ccbf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b0:73:48:05:23:f7:18:6a:20:71:b9:87:86:
f7:c1:ef:1a:bb:25:58:cd:9d:4c:5a:e8:23:b6:78:
68:0d:f0:84:9e:f3:d6:58:fe:7a:eb:72:46:2f:9c:
e2:9a:6b:a1:83:c5:52:9e:86:35:0f:ca:fc:77:38:
8a:55:96:e9:7a:69:b1:35:d1:df:9d:5e:bc:80:e0:
97:3c:81:7e:5c:5b:06:f1:1d:8f:da:92:47:6e:69:
59:4b:d5:86:4e:e5:d7:46:92:c6:4a:1b:33:c3:c3:
b3:1b:b8:aa:0c:ad:52:70:be:58:84:34:51:06:e0:
d6:73:f7:38:31:ad:ff:a1:5b:fd:fd:e7:1f:9c:0b:
0c:48:7e:d3:23:6c:75:b3:1f:67:60:8f:11:6b:27:
1e:89:19:c6:b5:3b:f8:fc:77:2c:0a:73:d2:d2:e2:
10:4b:af:06:ba:bc:92:38:2e:11:b6:7a:98:19:57:
4d:9f:07:6f:f7:22:cb:22:9b:1a:2f:8b:69:27:64:
2b:e8:77:c4:fa:ae:02:0a:ac:2d:49:80:66:01:9f:
5d:a3:f9:81:25:79:3f:79:51:ef:34:17:4d:b5:7e:
39:2e:99:88:11:32:e8:52:96:ce:53:9f:f7:0a:6d:
8e:e6:0d:9b:72:3c:6d:f6:45:e6:33:53:e2:ca:e0:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:26:1C:3E:64:9C:77:F3:E0:12:1E:6E:8C:5A:85:52:CC:BF:13
X509v3 Authority Key Identifier:
keyid:70:CC:92:41:36:65:BD:6B:0D:DE:51:A9:A6:B5:65:E7:2C:32:1E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMySQTZlvWsN3lGpprVl5ywyHlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6ef832-d4a3-4614-83eb-ba177c197965/1/cMySQTZlvWsN3lGpprVl5ywyHlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:72:f1:3c:88:12:e1:aa:52:24:0f:81:8c:df:8b:45:a4:a0:
b7:db:29:ce:85:0d:2e:c4:0c:b9:c6:c4:9a:3d:26:8c:dd:39:
df:cc:5d:c0:20:8e:f6:82:69:df:bb:e4:fc:13:68:4b:ad:b1:
3c:32:7a:4c:a4:15:c0:92:26:7a:5a:23:31:66:3d:7f:7e:e9:
1e:a5:05:1c:9d:e3:b4:d2:c7:01:3e:11:eb:d8:2a:71:43:99:
71:a3:94:77:1f:ef:7a:35:4b:e3:f7:cf:75:66:eb:2f:f7:58:
b1:fd:41:42:92:e2:98:c3:ce:30:38:c0:f2:e2:8e:30:d1:99:
d7:17:4d:26:26:3e:86:49:d0:cd:3d:c0:65:d3:35:a9:11:0e:
c3:3f:b9:b3:50:f2:2c:8e:66:eb:37:b7:0b:8d:75:52:10:ca:
38:e3:94:60:93:68:f3:34:26:f3:74:28:4e:ed:7b:43:6d:07:
4d:07:c7:b5:ed:ee:44:cb:07:6c:c4:d4:bc:fd:d6:e9:c2:46:
a9:0e:4c:90:79:d5:62:1f:a7:22:d9:38:9a:95:87:b6:6e:44:
94:d1:81:f6:62:25:1b:17:b6:59:71:e6:d4:c8:2e:5c:8e:f6:
64:db:f0:7f:9a:07:7e:88:09:65:7e:2c:4c:9a:48:0e:29:35:
32:72:1e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:04:50 2024 by rpki-client on console-ams.rpki-client.org