Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
File: CUsU8URwOb33-d7l-ik4XB3OlZ0.mft (raw, json)
Hash identifier: Ttm9w9uieyIaH3UtwBtCrTZiygM2TQjdlI2vsMk+zeE=
Subject key identifier: 49:35:52:E4:AA:BE:03:C2:20:C0:5A:3E:DC:C8:0A:A9:3B:13:BD:A8
Authority key identifier: 09:4B:14:F1:44:70:39:BD:F7:F9:DE:E5:FA:29:38:5C:1D:CE:95:9D
Certificate issuer: /CN=094b14f1447039bdf7f9dee5fa29385c1dce959d
Certificate serial: 018F4B6C94489D52BE3A6EB9FBA103CDA8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
Manifest number: 10E8
Signing time: Mon 06 May 2024 01:02:38 +0000
Manifest this update: Mon 06 May 2024 01:02:38 +0000
Manifest next update: Tue 07 May 2024 01:02:38 +0000
Files and hashes: 1: CUsU8URwOb33-d7l-ik4XB3OlZ0.crl (hash: Tt8rbHW/mpoxHAIAjGhz/StcodjGEHAXs0LM6FgPeDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4b:6c:94:48:9d:52:be:3a:6e:b9:fb:a1:03:cd:a8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094b14f1447039bdf7f9dee5fa29385c1dce959d
Validity
Not Before: May 6 01:02:38 2024 GMT
Not After : May 7 01:02:38 2024 GMT
Subject: CN=493552e4aabe03c220c05a3edcc80aa93b13bda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:d3:91:8e:11:70:64:a5:d5:f3:bd:43:10:
87:0d:21:45:80:3a:3f:ce:6e:e6:d2:7d:b6:6e:6d:
ea:e2:d1:34:70:ef:9b:16:d0:ec:b7:84:ab:6a:a6:
68:37:8f:89:d6:d1:7f:fa:2b:9a:78:fc:5e:2a:f8:
23:85:85:01:5e:db:48:f2:09:36:0b:ef:c5:c4:b2:
1c:c2:98:92:d4:8b:d1:f7:be:ac:d1:5e:b9:42:1a:
c6:0f:1e:3c:1e:05:37:51:a3:99:d3:c4:d8:82:04:
8f:53:03:0a:0b:fb:f0:71:18:03:98:7a:23:22:b8:
8d:55:a7:a1:b9:6d:50:41:89:19:60:fc:b5:d2:15:
fc:a6:b9:1f:c6:79:9c:e1:4d:da:62:b6:6a:65:e7:
85:c4:c6:bd:40:5b:27:ec:b9:67:c5:23:63:a9:39:
ae:b2:30:9a:b7:7a:a9:b7:da:dd:91:dd:3b:77:d3:
cc:8f:63:5a:11:ab:76:f9:70:8d:2f:20:b5:0f:b8:
66:dd:ef:be:ff:38:98:70:7e:6b:4a:87:39:af:20:
59:76:5b:bd:a4:59:19:28:c1:bb:6e:bb:43:32:3c:
6e:c7:24:2c:0b:79:a3:95:e4:95:2c:ae:bc:8b:60:
22:20:e8:d3:61:6d:0a:a3:95:d1:1d:2a:11:cb:ac:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:35:52:E4:AA:BE:03:C2:20:C0:5A:3E:DC:C8:0A:A9:3B:13:BD:A8
X509v3 Authority Key Identifier:
keyid:09:4B:14:F1:44:70:39:BD:F7:F9:DE:E5:FA:29:38:5C:1D:CE:95:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUsU8URwOb33-d7l-ik4XB3OlZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/606939-cc69-4cfa-843e-50b64cbd0fe1/1/CUsU8URwOb33-d7l-ik4XB3OlZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:46:16:ff:b5:65:0d:f7:c1:b2:ec:7f:f8:3c:e3:88:87:a7:
5d:00:02:54:af:ca:05:7e:77:18:49:38:de:11:f6:46:dd:db:
38:e3:a6:3c:67:e6:5e:10:80:0f:c7:7d:09:dc:35:c0:60:01:
c5:bf:33:96:e9:44:09:28:e2:32:f4:76:d9:53:c4:23:23:25:
43:81:84:f5:e3:a3:f0:c8:02:3f:64:9c:cf:ad:02:d2:e3:77:
f5:ec:59:2d:e5:03:a9:72:70:c2:e8:aa:bb:c7:28:46:cf:db:
be:d7:bc:71:18:7e:48:75:46:96:4e:68:89:0e:26:75:55:e5:
13:52:b7:dc:41:be:76:e1:f7:ad:44:d2:c9:f3:4c:f0:9c:33:
8f:cf:06:64:7f:b1:08:17:8b:d5:e3:f3:38:f5:21:bb:f8:00:
11:f5:de:84:80:82:0c:04:1e:cd:38:41:bd:58:5d:39:69:00:
30:b1:33:d5:18:ba:9d:67:c5:9c:d4:bf:66:44:59:ef:66:9a:
61:73:2b:25:d6:64:0a:29:a8:1c:f5:9a:c3:f7:90:43:0c:15:
18:a0:1f:6e:14:18:4b:67:5e:b9:6c:fa:31:d8:be:ce:c5:d9:
8a:a5:a2:05:d8:e6:39:56:de:e3:63:24:01:84:b5:0f:90:23:
f1:7e:48:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:13:05 2024 by rpki-client on console-fra.rpki-client.org