Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
File: EFkFws-IrzKqrL3Wcc08w6z_ktE.mft (raw, json)
Hash identifier: 7lLTSj7SvVeM0fY7TOno/H0gBLqBQuVof0rRFl+fvMA=
Subject key identifier: 33:65:15:E7:AE:EA:B5:9E:8A:7A:BC:06:10:35:E4:DA:0A:D7:A4:0E
Authority key identifier: 10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
Certificate issuer: /CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Certificate serial: 0192399473B50581D5324A42F4896242A2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
Manifest number: 024A
Signing time: Sat 28 Sep 2024 17:01:23 +0000
Manifest this update: Sat 28 Sep 2024 17:01:23 +0000
Manifest next update: Sun 29 Sep 2024 17:01:23 +0000
Files and hashes: 1: EFkFws-IrzKqrL3Wcc08w6z_ktE.crl (hash: akPu/nl8h99A0X/LJDts+YY115ZonnQ/21y9QMpjXGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:39:94:73:b5:05:81:d5:32:4a:42:f4:89:62:42:a2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=105905c2cf88af32aaacbdd671cd3cc3acff92d1
Validity
Not Before: Sep 28 17:01:23 2024 GMT
Not After : Sep 29 17:01:23 2024 GMT
Subject: CN=336515e7aeeab59e8a7abc061035e4da0ad7a40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:7c:4e:35:65:79:3a:50:f7:20:04:8d:5e:
08:56:47:2b:9f:4e:f6:76:6e:d7:ad:86:08:76:0d:
0c:59:9e:c8:2d:ec:0c:bc:df:44:df:c1:34:bd:a6:
51:c3:d6:4d:38:ad:f1:1c:84:34:c0:06:63:ed:cf:
76:65:8a:10:11:a0:23:4d:2b:d2:a1:e3:84:17:a9:
d4:b8:16:9d:89:26:1a:18:8b:01:ab:28:c4:65:eb:
73:37:55:92:d1:86:b3:b8:9b:e3:5e:4d:c4:f8:b4:
1f:cf:61:08:c7:1f:69:31:b7:f7:28:a3:c8:9d:6f:
3f:f0:68:19:1d:fe:70:38:08:e1:3f:30:f2:5f:d2:
40:5d:10:a0:ad:b0:23:0c:f3:9c:6c:45:64:e1:40:
c6:67:c3:83:06:11:72:04:59:96:eb:28:cb:0d:83:
b1:eb:c4:69:66:f8:f5:30:8c:90:d3:4e:5e:51:ce:
43:1c:8c:8c:c1:4f:bb:b3:77:11:94:90:cb:37:f0:
16:68:ca:d1:c2:e4:c7:82:5b:4f:73:9a:89:5e:89:
fa:cc:c6:6b:44:44:9f:0c:3f:29:39:38:64:e5:d2:
66:6c:3a:08:90:eb:d5:8a:4f:02:23:7b:d1:57:86:
b6:3a:38:5a:ef:c8:b4:8e:f1:37:f3:6c:3f:25:0b:
f3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:65:15:E7:AE:EA:B5:9E:8A:7A:BC:06:10:35:E4:DA:0A:D7:A4:0E
X509v3 Authority Key Identifier:
keyid:10:59:05:C2:CF:88:AF:32:AA:AC:BD:D6:71:CD:3C:C3:AC:FF:92:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFkFws-IrzKqrL3Wcc08w6z_ktE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/651887-516a-4037-b8c0-453ad0df0e10/1/EFkFws-IrzKqrL3Wcc08w6z_ktE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a2:cb:75:0e:ba:9a:c4:2e:54:a5:8f:08:81:cc:4c:77:f7:
29:0a:2e:a4:45:68:3a:a2:b3:02:ba:dc:61:f4:39:e4:4e:67:
80:f9:b3:fb:39:89:a7:d9:be:e3:ad:ef:2f:a7:9f:83:a1:3c:
a2:ae:21:6f:d6:b1:b8:25:29:2e:37:02:e5:ca:3c:36:aa:46:
6a:2a:9a:ca:cb:14:17:27:f9:0e:ca:20:f1:5c:eb:9f:16:75:
19:da:c7:80:5c:83:ed:55:f3:80:6e:7b:c3:08:be:4c:34:6c:
1a:c8:df:1c:32:4a:e3:56:78:bd:ff:2d:fe:8e:23:f9:31:bc:
33:c4:c1:d3:0f:12:6c:45:08:d5:1c:1d:76:0e:dd:fc:b1:75:
cb:10:8a:a4:2d:40:42:2a:01:13:87:0d:01:96:0d:81:bb:b1:
b0:63:3c:f8:6a:19:e9:a0:ea:28:7c:88:a3:36:d3:d5:67:d4:
12:16:95:62:56:3b:e8:7f:1b:24:1b:84:ee:41:f9:3c:81:0d:
35:aa:63:4f:95:99:bd:d4:33:ad:ca:52:2e:a6:93:b9:31:be:
11:6a:20:e2:99:59:20:f3:e1:b1:b8:ed:c8:39:bb:6e:44:3e:
23:a3:32:2c:9c:b7:b1:11:de:5e:99:f0:cd:da:3d:b6:fa:02:
cd:d6:f2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 01:45:12 2024 by rpki-client on console-ams.rpki-client.org