Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json)
Hash identifier: z8/ldSV8i5sEhWm1YwgTVcE41Nh3BfGQEehT44oXS2M=
Subject key identifier: 38:5C:67:98:DA:3D:86:71:13:CD:5C:0E:41:17:09:41:AF:76:11:95
Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Certificate serial: 018F874AFE438B545006570AC98D8B3560CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
Manifest number: 0A48
Signing time: Fri 17 May 2024 16:03:09 +0000
Manifest this update: Fri 17 May 2024 16:03:09 +0000
Manifest next update: Sat 18 May 2024 16:03:09 +0000
Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: at4D3gXJoG6vL9PT/c2mQKgODWxAl+Mkdjx+0oLZAuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:4a:fe:43:8b:54:50:06:57:0a:c9:8d:8b:35:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Validity
Not Before: May 17 16:03:09 2024 GMT
Not After : May 18 16:03:09 2024 GMT
Subject: CN=385c6798da3d867113cd5c0e41170941af761195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:26:e4:d4:8a:c4:fc:88:25:b6:d5:68:22:
5e:a6:e7:b8:df:51:d3:9d:8d:67:42:47:2a:b6:13:
e2:8c:1e:e1:b2:89:bc:a3:10:b9:d0:f1:2a:8e:72:
a2:3c:43:a6:97:58:9b:52:21:41:37:e3:80:46:9f:
88:3b:68:01:f4:32:a8:a1:6e:22:9a:6b:da:1e:e4:
6f:af:65:f4:f0:d4:b4:42:43:02:8c:27:f5:8a:ab:
40:7d:09:56:b7:c3:17:eb:60:4b:39:b6:03:98:d0:
1a:9f:cb:38:e6:ea:8b:bf:f8:b8:51:e6:da:fd:4c:
55:6d:97:5f:79:da:8e:91:c2:08:cd:f0:bd:2e:23:
8a:82:11:b2:43:68:77:13:b7:0f:2a:67:b7:4d:ee:
f2:37:6a:65:88:41:9e:80:21:fd:b5:ff:35:97:9a:
a5:be:88:0f:cb:8d:9a:75:2c:ae:1f:da:22:db:3b:
67:7b:64:09:25:7d:cf:d9:50:8a:d3:c9:63:36:0d:
69:d5:df:f4:a0:ff:31:72:10:2b:d2:fc:53:73:3d:
df:8d:df:83:69:e0:90:72:b6:4b:0c:4a:11:90:0a:
1e:1f:db:0b:37:b2:e4:e8:f9:4b:b1:ff:94:30:ab:
63:89:1f:af:31:a5:d8:3c:97:36:1a:b0:5c:8f:f8:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5C:67:98:DA:3D:86:71:13:CD:5C:0E:41:17:09:41:AF:76:11:95
X509v3 Authority Key Identifier:
keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:67:9c:01:ab:cb:f1:6e:d4:e7:5f:ef:d3:10:f4:8d:5b:2d:
1a:12:a5:5b:9d:4a:46:21:6d:8c:1e:4f:fd:c9:dc:9f:89:0a:
63:f6:16:d6:d7:5d:c7:93:de:8d:a6:0f:7b:cf:09:42:c0:91:
89:c9:00:88:a9:c5:ef:eb:00:9f:cc:0b:39:e8:5e:4e:90:78:
b9:be:9b:95:72:1f:fd:7c:e4:15:5f:83:fa:ef:20:c4:5a:fd:
09:02:aa:5a:cf:6b:f8:13:93:7d:cd:4a:7c:a5:47:16:b0:98:
22:be:d4:7e:17:3e:9a:9e:72:30:58:11:ad:64:b0:e7:94:72:
74:dd:9f:bb:92:e7:0e:0a:cb:ab:34:f1:f4:66:6a:a1:c6:ac:
01:12:72:bb:90:66:7a:71:df:0d:ed:89:e7:2a:e8:84:27:16:
c9:cf:46:12:36:31:47:74:83:5b:e2:57:d4:3b:10:ad:2a:61:
a4:af:03:50:30:3e:d2:ce:fb:d2:59:86:de:44:64:f0:33:cb:
d4:b7:cb:0d:7d:c4:a2:dd:6c:89:52:21:16:44:f7:e3:72:b7:
48:4b:07:39:ca:94:0c:b9:6a:d4:d4:82:f9:fc:69:0d:a1:55:
de:92:6c:f9:ae:19:f8:f0:21:7d:e2:30:c2:70:a7:fd:dd:5c:
4e:81:bf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:12:53 2024 by rpki-client on console-ams.rpki-client.org