Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: C0fK56J63vr++ClpymLhc+3vwRlohIZYIDIylPDiy+o=
Subject key identifier: 2D:04:C2:0F:78:55:38:2E:AE:AC:94:8C:A6:51:D1:2F:64:2A:E6:8F
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 01938C9C503177738A981216C20192918683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 138B
Signing time: Tue 03 Dec 2024 13:01:14 +0000
Manifest this update: Tue 03 Dec 2024 13:01:14 +0000
Manifest next update: Wed 04 Dec 2024 13:01:14 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: RodT1fRiHgPoo9iwu1rO5BELEPtxbCdEFVB+25Xdo9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:9c:50:31:77:73:8a:98:12:16:c2:01:92:91:86:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Dec 3 13:01:14 2024 GMT
Not After : Dec 4 13:01:14 2024 GMT
Subject: CN=2d04c20f7855382eaeac948ca651d12f642ae68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:9e:ea:cb:30:76:d0:08:3e:52:3f:e4:54:
4e:dc:2c:b9:90:8b:3e:5a:d8:58:95:d0:6e:89:cb:
92:41:7a:ff:2a:a8:38:09:86:be:d1:53:73:9a:fb:
43:80:ae:43:2f:2f:cb:95:d5:f9:67:a0:31:f3:16:
89:63:cb:26:88:9a:1d:9f:59:ad:b7:89:74:3d:98:
b1:d5:d1:c3:8e:81:38:ec:aa:72:33:74:06:fb:26:
9b:bb:8c:24:e7:20:16:84:11:05:17:a7:00:a0:46:
32:cf:21:fa:45:31:ab:7b:c6:0d:7d:42:3f:03:b2:
c8:1e:87:24:22:8f:78:dc:24:f0:95:29:0d:52:50:
1f:1e:c5:31:bb:b2:18:39:b5:b0:39:63:9c:b5:58:
5c:60:bc:4d:11:8b:d7:67:3f:29:4d:8f:f0:b5:df:
91:03:7f:e9:20:28:e6:9e:66:04:ef:f3:e3:37:b7:
51:d4:ba:79:89:4c:28:63:37:1b:22:07:e1:66:f3:
26:c0:ce:8d:19:20:0c:72:cb:ed:29:83:a6:eb:d7:
84:de:aa:51:3b:9c:6e:cf:23:cd:c3:2a:71:13:ac:
34:87:b2:6c:4b:ee:f0:0a:0e:25:d8:c9:6c:3f:2f:
fb:af:f9:74:7b:26:ed:9c:76:d7:c5:82:39:e2:79:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:04:C2:0F:78:55:38:2E:AE:AC:94:8C:A6:51:D1:2F:64:2A:E6:8F
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1c:ac:d4:df:75:60:f4:e4:58:4f:c7:35:20:39:9a:4a:78:
f0:32:cd:2f:31:b8:5b:cb:81:b5:48:18:22:1d:5e:f4:9b:3e:
46:a4:fb:0c:1a:00:d4:2a:50:57:e4:0f:1b:8e:ff:6c:a0:31:
0a:73:e9:97:d9:a9:ee:6f:75:7e:bb:f7:57:fa:b7:f3:8d:ed:
dc:ca:f1:c0:4f:ce:04:2f:0a:8d:76:4b:33:8b:d7:61:ba:90:
d6:dc:00:3f:49:cb:dc:78:58:9b:1e:ee:b3:8e:47:1b:20:98:
e8:7b:c4:44:ad:7f:87:b0:c0:7b:c5:0d:74:86:d1:11:1a:b5:
39:49:46:8b:de:97:56:f0:8f:3e:1c:d4:92:68:c4:02:48:b8:
14:f1:b2:46:b5:b1:48:29:08:a9:7c:64:13:ed:a2:ab:8e:7f:
9a:bf:32:be:5e:93:c1:15:df:78:c2:66:f8:8f:8a:d3:54:0b:
5c:06:61:d0:6c:ea:97:98:46:01:d8:ca:97:98:78:72:4b:2b:
a7:db:e4:cc:04:d8:47:1c:21:d0:d3:af:c8:ca:25:00:e0:be:
12:dd:98:58:95:71:f0:63:28:0d:61:5c:b5:12:21:46:14:08:
07:b3:33:a0:6a:93:08:36:98:c7:a5:21:ee:9a:98:8f:05:10:
a9:14:4d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:38:59 2024 by rpki-client on console-fra.rpki-client.org