Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
File: d7tRRrULW8gaNXR6K75lKqC3Fnw.mft (raw, json)
Hash identifier: LTificxyzaPJkBGipuBO3f4DR61C7RqHyQNWznmsKfU=
Subject key identifier: 1F:2D:37:DF:D2:48:78:77:A9:68:C5:E8:97:C5:2B:61:62:01:EC:6D
Authority key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
Certificate issuer: /CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Certificate serial: 01935764807D98730C6B51BE1511361CB205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
Manifest number: 1016
Signing time: Sat 23 Nov 2024 05:00:24 +0000
Manifest this update: Sat 23 Nov 2024 05:00:24 +0000
Manifest next update: Sun 24 Nov 2024 05:00:24 +0000
Files and hashes: 1: d7tRRrULW8gaNXR6K75lKqC3Fnw.crl (hash: l9WeFO2IzgeyzoHdIt9cXYRUA8bhmklNU95LWDlk5Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:64:80:7d:98:73:0c:6b:51:be:15:11:36:1c:b2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c
Validity
Not Before: Nov 23 05:00:24 2024 GMT
Not After : Nov 24 05:00:24 2024 GMT
Subject: CN=1f2d37dfd2487877a968c5e897c52b616201ec6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:94:20:12:4d:09:c0:ce:79:c4:b2:9a:eb:
c5:f6:fd:2c:f8:cd:93:d0:a6:f6:a8:86:ff:a1:40:
2b:1e:67:f4:95:fd:95:67:a0:95:f7:b0:f5:68:74:
fe:25:f5:ba:c6:53:e3:fc:a4:bd:a6:eb:c7:46:0c:
3a:7c:ce:e9:c3:95:8e:a4:ba:97:bb:02:cd:92:6d:
56:fe:df:93:f5:9d:b4:bb:a1:33:a7:5f:ab:c2:5c:
49:d0:37:30:68:e0:1c:4d:9e:eb:dd:c5:dd:44:4e:
fb:e1:33:69:57:fa:a2:2f:f5:de:10:60:0a:be:12:
e7:bc:a3:16:c6:f4:fa:6d:b6:d5:c4:65:46:96:4a:
88:e1:ee:25:dd:72:3e:ae:53:04:ba:d2:7b:2c:08:
2c:09:0d:82:31:80:fa:34:79:41:c1:59:c9:05:0e:
92:70:e1:ad:e4:b9:35:f9:54:e3:e7:3e:ca:17:f5:
7a:82:ac:c5:c1:7a:ca:ee:b0:27:32:40:60:b3:b0:
86:ae:ec:fd:73:7f:48:cd:56:9a:6f:1e:3b:a6:62:
6b:d9:50:d0:1b:9a:11:a0:98:27:cb:b6:f8:49:43:
b0:da:db:ab:a8:98:47:3d:48:20:7c:d3:3d:db:84:
d1:a4:ea:de:f0:45:45:6b:c7:81:56:d9:cc:c7:84:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2D:37:DF:D2:48:78:77:A9:68:C5:E8:97:C5:2B:61:62:01:EC:6D
X509v3 Authority Key Identifier:
keyid:77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2f:04:02:f0:8b:8b:44:47:eb:ef:9c:9e:dd:9f:4a:c8:94:
4d:b9:2f:c6:bc:b7:15:5a:8e:2f:f0:9b:26:b3:07:6f:50:96:
1e:b5:88:84:a2:11:50:7f:5c:d9:8d:24:c1:2d:a8:5d:1d:0b:
07:4b:0d:d3:f7:36:0b:27:f0:ee:91:b8:25:7c:11:40:20:b2:
ab:6f:0a:b9:0a:e2:56:f5:b6:9d:25:26:b4:5e:80:52:d2:ca:
69:95:2e:68:67:92:b2:91:d3:e5:6e:de:4d:67:3d:f2:e4:be:
ef:ab:74:64:bd:51:4e:2e:33:93:d1:72:6b:09:67:40:fd:31:
ed:a9:36:3d:76:e8:fc:5b:73:35:42:04:5a:1c:d0:62:d4:6b:
98:d4:35:45:f7:43:56:53:d7:fa:61:8d:58:8e:87:6e:29:11:
bd:f1:28:b5:bd:f5:81:ee:73:6e:5b:f7:eb:7e:4f:21:8e:6c:
4c:b8:f9:7d:93:7d:87:8a:7f:82:0e:a6:b8:01:6e:db:10:cf:
bc:8e:97:49:41:fd:73:d4:5f:57:be:9a:6f:67:29:f4:00:ce:
c4:c7:1b:55:62:e3:c6:1f:49:44:a7:ee:b6:26:12:a4:d0:3b:
43:b5:5d:6c:e0:e2:6a:3e:ba:7e:4a:17:e2:8e:6c:40:e4:cd:
ea:e2:a9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:39 2024 by rpki-client on console-fra.rpki-client.org