Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: Yt+7h0h7j1ZGydE0DpRgI/NNPXmsam9VrFWjB2ybniE=
Subject key identifier: D3:8A:9F:88:F4:7C:4F:E4:F9:AF:D8:7F:8D:AB:47:22:9A:C9:35:41
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 01935878CE3EB5B8064CB6E738A5D7BF4CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 136D
Signing time: Sat 23 Nov 2024 10:02:12 +0000
Manifest this update: Sat 23 Nov 2024 10:02:12 +0000
Manifest next update: Sun 24 Nov 2024 10:02:12 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: ZNIHnj3t9lx7XMSiqb3ZfA+zJouSUNhhKoBbVkFB5nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:ce:3e:b5:b8:06:4c:b6:e7:38:a5:d7:bf:4c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: Nov 23 10:02:12 2024 GMT
Not After : Nov 24 10:02:12 2024 GMT
Subject: CN=d38a9f88f47c4fe4f9afd87f8dab47229ac93541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:90:50:d0:8c:2f:e1:0c:6e:ae:eb:d0:5b:
50:de:9c:0e:ec:ed:0d:33:86:6d:f1:5b:6f:87:56:
32:1d:39:a8:a0:d8:bf:07:01:ff:8c:27:97:bd:e0:
ae:41:ee:b4:74:0b:ba:a4:63:72:91:3b:8e:d4:f5:
86:6c:8a:0b:6e:fd:40:b8:08:16:c6:64:75:e7:c1:
3c:59:25:dd:b8:d8:da:30:1c:a4:d8:19:4a:c7:13:
e3:df:f2:c3:f5:b2:2a:1f:77:8b:30:fe:c9:d3:a3:
0d:27:93:0b:fc:3e:7a:d6:29:58:78:55:b1:cb:8e:
0b:51:4c:31:a9:ce:62:65:5d:da:9e:4c:5c:db:c7:
cd:d0:10:8f:99:4e:4e:ab:19:7f:e3:9e:29:95:28:
da:40:ae:33:71:83:ea:ba:98:11:e4:77:31:3f:de:
70:d8:8a:a9:bc:92:62:76:6c:3d:4f:7c:9f:f4:7c:
6c:21:20:97:09:81:88:75:48:de:6d:f5:61:15:69:
ad:d0:b0:d0:29:f6:10:fe:8a:0a:08:c7:a3:29:51:
13:3d:35:37:58:67:3a:de:8e:a4:13:df:a7:42:d4:
63:95:45:ca:f1:00:13:24:45:3e:3f:3d:9e:78:cf:
23:bf:0a:f2:c6:e4:c3:d0:07:fa:35:f1:12:8a:3f:
29:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8A:9F:88:F4:7C:4F:E4:F9:AF:D8:7F:8D:AB:47:22:9A:C9:35:41
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b6:c7:37:fe:fe:e5:b4:b5:43:3c:7b:4a:b7:b0:75:44:8a:
8c:28:2a:88:1d:56:3c:01:8f:8f:0c:ab:68:e9:f6:15:bc:f3:
72:05:fd:c6:a2:48:f2:1d:18:2e:cb:f7:b6:df:89:98:5b:15:
11:02:c7:f3:cd:43:10:6b:60:ea:a6:0b:45:5f:f6:bf:43:75:
e5:b2:9f:4c:8e:eb:df:4c:e4:0c:86:bf:9e:88:d3:06:c0:c8:
58:07:70:00:16:a4:41:5b:4d:8c:57:54:d9:79:74:29:ac:18:
b6:a4:ca:82:21:26:db:bc:6f:83:be:eb:6b:81:2b:57:f7:1b:
f6:cf:88:30:63:a0:fd:35:a3:ce:b5:a7:2b:b0:95:8a:ce:14:
03:8b:74:21:ed:6f:20:40:37:ef:5f:1b:7d:3a:9a:45:61:1f:
ac:72:14:87:ac:14:68:9f:ec:e5:14:f1:7e:e2:ae:31:a3:71:
a5:2d:a6:14:d8:3b:be:b8:bf:a6:48:59:f4:af:19:93:48:e5:
8c:ad:b4:5a:1a:97:39:14:23:b3:ce:52:a0:fa:46:92:92:e6:
fd:38:e6:1d:43:1c:75:b0:bb:99:a1:dd:08:f2:64:0b:56:15:
4e:ac:62:a2:c5:7a:35:93:85:79:a5:dc:96:c2:45:c5:36:45:
61:eb:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:01:25 2024 by rpki-client on console-fra.rpki-client.org