Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
File: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft (raw, json)
Hash identifier: XcXOSKBr6CigqDDNV30nZaSPS7j9uGjWhJowGyPnCV0=
Subject key identifier: 44:65:1C:25:61:8A:50:07:0E:66:89:F8:51:A0:4D:FF:85:89:62:F9
Authority key identifier: 95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
Certificate issuer: /CN=954cf721c08c8e9bc5242d56196677217350455c
Certificate serial: 01935878CF7A06FD34F4A9AA46A2D4325F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
Manifest number: 0391
Signing time: Sat 23 Nov 2024 10:02:12 +0000
Manifest this update: Sat 23 Nov 2024 10:02:12 +0000
Manifest next update: Sun 24 Nov 2024 10:02:12 +0000
Files and hashes: 1: lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl (hash: iXtfl0h/MrUryz6sZMftKOjTklo6VM5oxSUTZcLCY2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:cf:7a:06:fd:34:f4:a9:aa:46:a2:d4:32:5f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954cf721c08c8e9bc5242d56196677217350455c
Validity
Not Before: Nov 23 10:02:12 2024 GMT
Not After : Nov 24 10:02:12 2024 GMT
Subject: CN=44651c25618a50070e6689f851a04dff858962f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:3d:56:20:98:13:70:e1:d6:9c:2d:21:79:
58:b0:ea:ba:83:b4:cc:5e:8f:91:2b:97:6b:94:23:
cf:32:5b:49:20:97:11:8d:e6:3c:f2:28:67:25:b7:
01:b2:4f:50:24:10:4b:86:3e:9c:25:86:0f:be:70:
49:83:c0:d5:50:c0:a8:0e:14:d2:cf:f6:cc:78:8a:
88:26:6f:39:de:3e:23:c1:b4:24:fc:47:1f:bc:ce:
22:43:25:28:29:07:d9:d5:76:55:4d:e5:d1:05:be:
a5:c5:d0:60:15:b1:e9:74:a4:fc:26:97:99:8b:80:
87:b8:61:c0:64:d6:b9:4f:f8:07:cc:52:67:a4:be:
1b:dd:51:7c:12:fe:70:69:58:98:c9:d2:7f:d7:8f:
4b:ef:af:de:f5:e5:0d:26:c5:97:16:40:4d:b6:90:
1c:72:dc:2e:d9:4c:d7:9f:fb:bf:26:39:3e:43:78:
68:26:2d:46:fd:d5:5e:59:da:b5:a2:4c:d7:9c:9d:
15:3f:74:e2:89:08:98:8d:31:6c:cc:72:0e:ff:cb:
26:52:a7:32:90:61:a8:03:49:98:31:8f:83:d0:0f:
cf:a0:07:e1:21:43:57:6a:c2:16:0a:50:03:db:85:
7f:2f:12:2a:47:81:9f:5b:4a:89:28:ef:20:a8:86:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:65:1C:25:61:8A:50:07:0E:66:89:F8:51:A0:4D:FF:85:89:62:F9
X509v3 Authority Key Identifier:
keyid:95:4C:F7:21:C0:8C:8E:9B:C5:24:2D:56:19:66:77:21:73:50:45:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2823dd-25a1-44a0-bfc1-cbbd08ad3ec2/1/lUz3IcCMjpvFJC1WGWZ3IXNQRVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:89:52:9b:86:0b:7e:28:91:91:9d:37:33:7c:63:f5:8d:29:
20:2d:15:c5:7f:cd:a9:35:5f:c1:d5:17:1c:0d:db:3a:a4:32:
ec:fd:09:e0:b7:94:61:00:1d:fb:f9:33:1c:6a:70:e4:e2:d5:
ca:d1:2e:62:d5:3d:fc:60:d8:16:a7:07:7d:c8:d6:32:44:c9:
a2:6b:a4:c2:2e:24:74:e8:b2:f7:04:ad:d5:02:d4:a8:89:62:
01:1b:46:0f:ca:9a:2a:fd:f2:fc:5f:67:5f:98:80:71:5b:4b:
b6:e7:66:ed:f6:01:af:9c:09:61:be:c8:e5:a6:6c:c4:6b:e6:
86:35:a0:a8:cb:61:d4:08:fd:2a:e5:94:b5:3b:65:99:c6:df:
e7:7e:93:d4:1f:c3:17:a7:68:fc:09:ee:c5:a9:ec:9c:7c:21:
60:22:cc:61:82:17:82:18:fc:21:37:0f:11:af:df:75:6f:d1:
94:4d:bd:49:15:b9:60:bd:c3:b6:0e:12:e0:cc:86:34:17:a6:
43:c7:98:37:1a:47:96:bf:8a:1d:f0:3d:6f:79:df:4d:3b:32:
2a:7e:24:0f:b7:0a:ae:46:67:b4:8e:c7:67:1d:d9:e0:df:a5:
df:c2:22:e1:3f:52:0f:17:1a:ed:36:c1:56:bc:31:b4:b9:7c:
55:0f:54:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:17 2024 by rpki-client on console-fra.rpki-client.org