Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: xJr8A6B4p1vHYegYR3DvbaGz6AnHAuJknOBZQNWn5dc=
Subject key identifier: E7:0D:9B:16:8E:2D:FD:86:6F:54:F6:05:CC:CE:C5:64:95:5E:7F:62
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 0193572DDC92ED574051F1D79A98B8BE9E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 0704
Signing time: Sat 23 Nov 2024 04:00:43 +0000
Manifest this update: Sat 23 Nov 2024 04:00:43 +0000
Manifest next update: Sun 24 Nov 2024 04:00:43 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: s5yry7DL4ZINFbxI0zxzsY+kz1lHKXWTzP3p6X5T7xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:dc:92:ed:57:40:51:f1:d7:9a:98:b8:be:9e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Nov 23 04:00:43 2024 GMT
Not After : Nov 24 04:00:43 2024 GMT
Subject: CN=e70d9b168e2dfd866f54f605cccec564955e7f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:2d:7c:65:08:82:fc:5a:3f:6a:4b:10:fd:
75:d2:67:45:d7:86:95:22:4c:ff:53:c4:b0:e2:51:
a9:00:7a:b8:82:06:99:ed:0f:06:07:50:3e:6e:da:
e3:69:94:d1:e9:0d:7a:1e:1d:41:18:98:4b:3a:f7:
78:40:81:28:e4:41:ff:84:4a:5b:52:a1:4c:19:29:
c6:f6:82:f2:a4:64:b0:ac:b2:3a:14:6e:41:1a:6b:
4e:b5:67:cd:c8:4f:7c:b2:6d:f7:3b:e7:21:e6:c7:
1b:08:a3:0d:f7:70:f7:44:f7:19:a2:aa:1b:4f:19:
cd:1d:95:28:58:0a:94:cb:97:95:9b:55:d6:95:85:
05:ee:ae:9a:b9:aa:e5:32:de:71:7d:35:80:e1:16:
3d:3b:76:19:81:e6:17:93:c2:84:b3:a4:01:58:f6:
d0:68:7d:1a:a3:4b:5c:19:33:d0:a4:aa:fe:c9:95:
2b:81:34:f9:e7:62:06:1d:36:c6:41:b6:81:54:c9:
97:3a:2c:97:77:3a:4f:5a:6f:61:21:21:15:5c:86:
d6:33:a7:ff:6d:38:ae:70:b7:af:51:1d:10:f3:4b:
61:3f:04:8e:0a:19:ef:bf:2a:26:a7:e4:14:d9:9a:
fc:cb:b2:d4:78:5f:d0:6f:2c:54:07:bf:e6:78:fa:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0D:9B:16:8E:2D:FD:86:6F:54:F6:05:CC:CE:C5:64:95:5E:7F:62
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:06:96:22:8c:ca:9a:19:ab:fc:83:83:21:0d:70:06:3b:31:
6e:bb:42:08:0b:69:50:fa:d2:23:73:74:2d:fb:8b:fb:51:d1:
05:42:5f:98:b0:6b:c1:37:b5:a2:ff:8d:c2:fa:33:d1:9b:42:
5b:e2:d1:ef:48:b5:0b:d8:58:62:07:6c:94:44:47:b5:a4:ec:
86:16:a9:36:51:a6:94:31:bd:f7:5b:75:0d:c8:5a:b3:a2:01:
5c:fc:ea:9b:c5:4e:8f:a9:cc:d9:45:04:0a:4f:d8:b9:34:33:
cb:3d:27:4b:13:86:72:d5:8e:e8:ed:0e:61:c4:d9:c2:29:02:
d1:8b:78:a4:9a:62:50:b6:3c:79:26:e0:7a:34:0d:7e:14:ca:
8d:7d:ee:44:fb:ab:8f:60:12:ff:13:be:03:ff:8b:fa:fe:7d:
6f:87:65:9e:03:9e:42:1c:a4:4d:20:d2:78:ee:02:74:65:d2:
3c:3e:3b:cd:02:b9:ac:c9:72:d1:5a:42:48:57:84:0e:ee:f9:
a8:60:4f:94:4d:15:a7:25:a4:2b:21:5f:bd:90:6b:f7:9c:88:
7e:b4:1a:e4:b4:fe:18:e7:e4:41:61:36:aa:74:d0:c0:09:5a:
22:c4:ba:82:fa:39:98:21:36:5e:c1:5f:d3:17:28:6d:01:22:
43:dc:81:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:15 2024 by rpki-client on console-fra.rpki-client.org