Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File: G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier: kmPgy6sT1sgL8MJWe9GUpc1aDSlBOqi0IL3weRifsto=
Subject key identifier: 48:44:30:94:FA:39:C9:12:70:D9:CA:79:EB:08:C5:4A:28:F4:76:04
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer: /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial: 01906E61EAD907B8387D7A315EEB1FFAC98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number: 0137
Signing time: Mon 01 Jul 2024 13:00:28 +0000
Manifest this update: Mon 01 Jul 2024 13:00:28 +0000
Manifest next update: Tue 02 Jul 2024 13:00:28 +0000
Files and hashes: 1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: NQF9lix9ev4F6P2RVPcXc1v/GyLMK2DpFiMEm2T+7Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:61:ea:d9:07:b8:38:7d:7a:31:5e:eb:1f:fa:c9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Validity
Not Before: Jul 1 13:00:28 2024 GMT
Not After : Jul 2 13:00:28 2024 GMT
Subject: CN=48443094fa39c91270d9ca79eb08c54a28f47604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:ce:e3:e5:ef:08:15:a1:7f:9b:84:92:12:
fa:bc:f8:29:76:cd:62:f9:4f:f5:24:ea:c9:f6:37:
67:db:12:f8:3b:59:4d:1f:9a:1a:f3:8c:85:7a:b3:
00:f4:2d:ee:7b:46:af:d5:79:0d:63:d3:4e:7d:46:
4e:c2:f5:e6:37:18:43:a8:2b:3a:dc:73:94:e1:9c:
0d:ad:c3:00:84:e5:6a:84:4a:c5:13:02:26:df:0e:
5f:4d:8a:c5:36:69:7c:6e:51:a1:75:4b:da:30:b1:
27:fc:b4:e5:e0:30:ce:5d:8f:d8:9f:70:92:11:ce:
89:da:c4:9a:b3:6a:0f:01:94:b6:40:8a:c6:c2:1f:
47:bc:c3:64:48:0d:49:76:6a:4f:07:51:e4:87:cc:
ae:31:75:42:c8:53:1b:16:d3:e9:c8:a4:6c:34:84:
0d:0f:84:4a:2d:4e:52:1a:ae:e2:35:8b:3d:7f:08:
2f:1c:13:c9:3d:8d:b5:05:28:4f:b0:8e:1c:b7:a0:
77:2b:13:07:dc:3e:1f:dd:33:5a:c9:c6:f7:23:52:
0a:de:26:3a:aa:f8:3a:1a:83:66:f7:6b:89:9b:79:
eb:90:33:3b:d0:21:5c:c3:4d:24:cc:40:57:36:b7:
4d:5a:cb:74:ca:ee:29:e5:97:22:d2:cb:e9:a9:63:
67:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:44:30:94:FA:39:C9:12:70:D9:CA:79:EB:08:C5:4A:28:F4:76:04
X509v3 Authority Key Identifier:
keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b1:e0:dd:17:9a:13:59:8a:dd:db:80:c5:f5:0d:01:14:53:
71:82:be:40:d8:12:a6:1e:15:ee:df:36:eb:a8:a4:9b:a2:1f:
1c:72:a5:ef:d0:b5:51:73:da:81:fe:5c:25:7b:a2:9a:9d:9f:
4e:69:18:2a:93:db:b2:84:b7:09:c8:fe:02:3b:1c:29:fa:55:
93:62:0d:7e:31:05:8f:a6:7d:d4:c7:27:25:c1:9b:0e:7f:e6:
bb:91:d8:a6:c5:4b:d2:26:e1:8a:3f:11:53:1e:c0:2f:b2:5b:
58:94:a7:8a:5a:0f:b9:0f:ab:f7:17:3f:fb:98:de:98:15:ee:
35:eb:1d:29:70:1a:47:b8:23:ff:04:26:11:a2:63:dd:fa:cb:
3b:e5:5e:04:ad:92:94:20:c0:a6:44:30:d5:ad:34:6c:83:07:
29:de:d5:31:b8:fb:c1:21:b9:a4:46:ec:f9:db:0c:3c:be:80:
c2:c9:22:d5:41:82:cb:ab:8e:29:68:90:96:90:d1:14:a9:95:
0a:17:06:bd:59:14:39:03:a1:3f:eb:c2:10:24:61:28:9e:59:
e6:93:a5:11:d2:b8:03:e7:d1:48:4e:ca:cf:aa:63:d6:51:60:
1f:35:bf:79:11:54:08:40:d6:e5:00:c5:ee:6b:ec:ef:7b:8c:
de:51:fa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 15:58:07 2024 by rpki-client on console-ams.rpki-client.org