Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
File: 1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft (raw, json)
Hash identifier: zSRkJLiBYYVyZoo+Cgizs27D4UNjAhWh70FvJNmTrVc=
Subject key identifier: DB:66:9D:F7:C0:B2:B4:1D:1B:FE:00:BA:F6:FD:4B:1B:14:58:79:9A
Authority key identifier: D6:39:CD:75:53:BD:7E:A3:CD:88:EA:C0:26:05:EA:A4:30:6D:8F:27
Certificate issuer: /CN=d639cd7553bd7ea3cd88eac02605eaa4306d8f27
Certificate serial: 019356F72784520B7B408222C4B6040AA6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jnNdVO9fqPNiOrAJgXqpDBtjyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
Manifest number: 0574
Signing time: Sat 23 Nov 2024 03:00:58 +0000
Manifest this update: Sat 23 Nov 2024 03:00:58 +0000
Manifest next update: Sun 24 Nov 2024 03:00:58 +0000
Files and hashes: 1: 1jnNdVO9fqPNiOrAJgXqpDBtjyc.crl (hash: QFoUCGCSSi/7JKFHTvdzC1DS291Kzo9zETQXDcwxzfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jnNdVO9fqPNiOrAJgXqpDBtjyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f7:27:84:52:0b:7b:40:82:22:c4:b6:04:0a:a6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d639cd7553bd7ea3cd88eac02605eaa4306d8f27
Validity
Not Before: Nov 23 03:00:58 2024 GMT
Not After : Nov 24 03:00:58 2024 GMT
Subject: CN=db669df7c0b2b41d1bfe00baf6fd4b1b1458799a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:b0:99:de:a3:ce:0c:0d:69:41:61:55:16:
d0:a4:c3:65:34:b4:22:5e:6f:bd:f9:c7:62:84:5b:
d6:13:79:f4:07:b2:0b:4f:41:3e:28:53:ba:3b:ae:
11:f0:c8:20:be:11:9c:9c:14:0b:99:28:51:2b:dd:
4e:21:87:e6:18:74:b5:ab:cb:5d:20:0c:be:f4:4e:
34:a3:14:47:4b:58:47:c8:c2:1f:2a:28:21:97:33:
02:3d:2b:64:49:bd:d7:10:d1:18:ce:52:2c:ea:19:
8c:a1:6d:77:e0:af:ba:a5:fd:1d:32:f3:96:59:53:
88:ca:b7:16:0a:d7:0b:02:80:c6:76:f2:66:06:ae:
fe:55:b6:58:e3:f1:47:5d:69:2f:96:25:67:83:02:
b0:56:85:a7:ac:b4:44:ed:6a:c4:22:01:77:c3:95:
b6:d6:e1:c6:21:eb:62:17:3f:8d:f0:7b:b0:c9:a6:
4a:e3:61:25:78:ea:1a:0d:9d:60:58:e1:e7:67:64:
82:bf:8e:17:15:9c:19:1a:bb:3b:0e:9f:80:0e:4c:
2a:2e:71:ba:22:a2:1b:49:92:bc:26:93:59:40:59:
5b:80:f6:dd:11:8e:52:ed:67:7d:c0:11:98:8f:12:
d0:f0:6e:66:95:00:31:90:ee:b9:2e:b3:f0:b3:95:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:66:9D:F7:C0:B2:B4:1D:1B:FE:00:BA:F6:FD:4B:1B:14:58:79:9A
X509v3 Authority Key Identifier:
keyid:D6:39:CD:75:53:BD:7E:A3:CD:88:EA:C0:26:05:EA:A4:30:6D:8F:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jnNdVO9fqPNiOrAJgXqpDBtjyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1063dd-a551-4164-8106-119011f91fec/1/1jnNdVO9fqPNiOrAJgXqpDBtjyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f5:50:a0:f1:11:e1:06:0d:3d:c2:cb:be:39:81:14:99:e2:
1b:6c:05:c1:9f:5e:3b:7d:35:47:a9:66:44:2d:34:6c:4d:f7:
39:43:55:d4:62:60:b7:4c:4f:7b:ad:fe:86:96:68:49:f4:0f:
80:7a:ed:3d:b1:37:1c:74:e1:8c:61:9e:57:3c:62:fd:c6:bf:
de:9e:f4:8d:f7:07:9e:6c:81:37:86:29:cf:e8:bc:6a:84:fa:
42:a9:f0:1a:6e:43:a1:83:5f:43:bd:fc:a7:8f:83:e0:9e:56:
59:73:0c:5c:a1:97:f0:5a:ed:72:a1:e6:13:14:5e:e3:93:b5:
83:d0:67:2f:25:69:84:93:c5:4f:29:e8:e4:6e:8e:0b:10:d9:
5e:7a:d1:39:a9:75:63:99:f2:ba:58:05:49:77:c0:c3:e7:6f:
6d:dc:43:3d:aa:a3:4d:f0:41:20:57:95:4c:ee:71:e5:02:a2:
a8:18:64:bc:41:5b:cd:63:c3:14:1f:69:c4:ef:51:d1:97:e5:
d8:a9:4f:f7:d6:7d:00:fc:62:a3:e1:44:f9:4f:38:cb:09:36:
93:e7:e7:4b:82:40:03:dc:0c:25:df:62:86:b1:e7:bf:85:c1:
89:5c:f9:ed:97:00:09:4a:82:fc:99:6a:fd:00:0b:4d:8a:83:
d1:c7:79:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:56:46 2024 by rpki-client on console-fra.rpki-client.org