Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier: I+Z0nDAL7RSBX/lYMXmABDqIOZG4CbnQTpG36ub6XGE=
Subject key identifier: 0D:E2:C9:D7:12:E4:AA:73:77:FA:E6:D5:DB:DE:BD:38:51:F5:4B:EE
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial: 018F87B63145C130EC95FD72E4757CFCEACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number: 0778
Signing time: Fri 17 May 2024 18:00:15 +0000
Manifest this update: Fri 17 May 2024 18:00:15 +0000
Manifest next update: Sat 18 May 2024 18:00:15 +0000
Files and hashes: 1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: Lf4YIVXCgUNhpJogcqSPmSLeLqhCkDZcQ9NP7Z17GRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:b6:31:45:c1:30:ec:95:fd:72:e4:75:7c:fc:ea:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Validity
Not Before: May 17 18:00:15 2024 GMT
Not After : May 18 18:00:15 2024 GMT
Subject: CN=0de2c9d712e4aa7377fae6d5dbdebd3851f54bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:87:95:4b:48:59:63:c4:32:7f:e3:19:5b:
04:b1:4c:66:2f:72:0a:f6:1d:69:e1:ea:3f:ec:c2:
fb:2f:c4:be:b4:f9:20:05:59:68:35:9a:c1:b4:7b:
cc:02:28:65:4f:e8:65:bf:07:07:1a:df:19:41:79:
83:a4:9c:b2:d6:7c:97:4c:00:ae:9c:2b:7d:83:66:
ea:0e:4c:36:91:2a:7f:e8:b6:2a:3c:d6:fc:ef:61:
20:64:bf:75:f0:fb:cb:64:88:d6:8d:f6:06:a1:04:
bc:d4:99:c0:b2:ab:02:62:51:ff:6a:b2:5e:f9:ed:
6b:26:ec:a1:5b:7b:57:3b:03:58:86:d2:d1:4a:b3:
e2:df:02:fc:33:4a:0c:88:17:da:63:6f:24:7e:94:
75:00:3c:a2:ea:03:8a:0e:90:13:6a:1e:38:4e:58:
da:4b:2b:99:05:4a:bd:41:de:42:9e:d5:1d:eb:c2:
01:24:a0:97:7f:4c:17:f7:ec:f6:17:65:5e:50:f3:
cf:74:60:20:41:3d:33:be:5e:dc:6b:bd:7d:f9:63:
b1:8a:c5:ce:6c:39:37:b9:77:22:15:59:52:48:aa:
c8:6c:7d:29:88:41:f4:81:d9:9d:aa:bb:6e:85:a0:
99:60:65:36:9b:9d:ab:5e:83:dd:76:50:7c:87:46:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E2:C9:D7:12:E4:AA:73:77:FA:E6:D5:DB:DE:BD:38:51:F5:4B:EE
X509v3 Authority Key Identifier:
keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:d6:72:80:fa:34:12:cb:e5:d9:2f:f4:07:f8:be:00:3e:e1:
38:fb:f1:88:9b:6c:b1:af:c5:3e:f2:e4:b7:28:6d:2e:c7:32:
bd:b9:e5:d3:e9:0f:27:1b:5d:1f:c0:30:c8:a6:3a:79:d5:f5:
ca:1e:bf:83:d0:b5:c1:a4:89:9e:f3:d7:f4:38:13:24:0e:af:
83:77:50:1f:8b:6b:6b:6f:b3:c6:f2:29:8c:7c:fb:32:a3:e6:
61:44:e5:40:d9:2f:a4:3c:87:24:31:4e:1e:55:d6:e3:9b:c6:
d3:9f:7e:ec:d0:93:29:5a:b2:e8:32:5b:da:f6:59:52:c8:c2:
eb:8a:f1:1d:04:44:6b:25:40:5e:e5:47:1b:99:db:f5:cf:d1:
79:bd:7a:cf:cf:52:a7:56:68:d3:63:a6:0c:19:0c:09:a7:d6:
50:26:05:65:8d:81:72:89:84:08:aa:e7:fb:6b:a6:d5:b1:60:
96:da:f7:63:c6:52:70:08:e9:7c:63:df:67:6d:d6:32:1d:e9:
9f:28:bd:6e:09:62:4f:91:b2:6e:7c:01:74:cf:70:c4:f5:1d:
9a:4c:15:a3:75:d7:a8:16:69:34:42:f9:07:f8:39:77:98:6f:
fe:77:c0:2c:5e:06:f3:4e:3a:ac:ba:a0:33:c6:5f:80:af:36:
d4:c7:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:09:01 2024 by rpki-client on console-ams.rpki-client.org