Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
File: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft (raw, json)
Hash identifier: D3E09YOwBJdjTv0S4cjUmZO/o5YngCfz9zljXnqpulo=
Subject key identifier: D0:6C:CB:C5:21:65:6E:70:93:84:A1:5F:B0:97:96:75:DB:6D:1A:1E
Authority key identifier: D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
Certificate issuer: /CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Certificate serial: 019356BF9B670DE21E227D446114C887C033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
Manifest number: 033D
Signing time: Sat 23 Nov 2024 02:00:17 +0000
Manifest this update: Sat 23 Nov 2024 02:00:17 +0000
Manifest next update: Sun 24 Nov 2024 02:00:17 +0000
Files and hashes: 1: 0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl (hash: 0B1cxKMYb2QKDfQ/+u1Uf67rMjFQnU0L46UR+bO0qHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:9b:67:0d:e2:1e:22:7d:44:61:14:c8:87:c0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0df3309b3f18fbbec999c412fdef1dc4420e42c
Validity
Not Before: Nov 23 02:00:17 2024 GMT
Not After : Nov 24 02:00:17 2024 GMT
Subject: CN=d06ccbc521656e709384a15fb0979675db6d1a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:91:44:27:60:b4:f9:2c:b5:75:1b:c6:9f:
3b:92:25:ab:93:dc:d6:14:fb:78:45:9d:88:e1:cd:
1a:7f:06:0e:77:3f:a1:8f:34:fc:78:29:fa:fc:5b:
5e:36:91:fc:2f:77:4c:d6:a1:21:ea:b5:77:a1:a4:
89:0b:65:5a:9c:a9:3c:67:69:f2:03:14:69:77:4b:
e8:11:52:08:31:f1:b7:c3:47:68:11:ef:a0:3f:52:
bb:e4:fa:10:92:05:9b:74:78:01:e9:9c:bd:93:13:
d3:3f:50:86:e8:81:32:91:0d:38:f4:23:11:c3:98:
60:ce:96:1d:e2:0f:62:fd:e6:ba:3c:63:70:10:70:
36:c3:5f:66:2a:20:16:fa:f2:e3:54:be:06:5c:03:
9e:62:a3:ae:77:fa:24:49:1f:e2:cc:02:8a:6a:4b:
d3:e4:f6:25:4a:76:25:30:d7:d6:2e:c8:48:be:26:
ad:99:f2:15:8a:0a:0e:c5:06:24:f6:6b:29:7c:e1:
52:46:d8:c9:e7:b5:11:d7:11:f4:1e:39:e2:62:a1:
40:33:60:2a:85:f7:95:21:14:5a:c7:74:bc:2b:fb:
e6:61:91:c6:78:91:bd:c3:cb:9b:8f:44:42:d6:a4:
71:ea:dd:7a:bd:63:f4:87:66:35:b0:2d:83:6e:63:
e4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6C:CB:C5:21:65:6E:70:93:84:A1:5F:B0:97:96:75:DB:6D:1A:1E
X509v3 Authority Key Identifier:
keyid:D0:DF:33:09:B3:F1:8F:BB:EC:99:9C:41:2F:DE:F1:DC:44:20:E4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N8zCbPxj7vsmZxBL97x3EQg5Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2f715b-cdaf-402c-9209-1ff915bfed99/1/0N8zCbPxj7vsmZxBL97x3EQg5Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fe:6e:e1:a8:c0:e6:25:f9:29:b7:c2:fe:41:eb:a6:ff:31:
1a:06:8f:7b:53:d5:6a:0a:80:c0:ee:bd:22:a8:1c:a4:d0:81:
51:bd:90:df:28:23:50:b0:49:7d:56:35:51:6b:3d:95:b5:8d:
8d:c3:32:47:9a:8c:7d:f7:39:c3:82:3a:f7:ea:97:1c:8a:b0:
dd:51:d6:21:71:6a:44:a0:ff:bb:44:b0:d7:a4:2d:dc:cd:e1:
b3:19:d0:42:b9:56:e5:55:22:4c:14:3b:4e:aa:bd:76:e9:8c:
86:3e:04:f0:68:2b:55:f8:24:ab:58:45:cc:bb:52:59:df:90:
86:7c:56:b4:c3:f0:8a:29:2c:dc:5a:d9:f0:f1:b2:0c:30:dc:
1a:6e:61:02:d6:f2:4a:33:53:45:7a:1d:73:ac:de:fa:46:6c:
f9:51:5e:8d:86:4c:4b:30:82:e7:a5:5e:8e:02:0f:49:b7:e7:
de:fe:ed:8b:5d:15:f1:d7:43:34:81:66:6d:7d:7d:15:e5:40:
01:04:16:e9:ab:54:8e:af:47:47:40:56:24:cd:6c:02:89:d0:
9c:81:08:35:1c:9d:75:33:e3:aa:73:3e:1e:ab:f5:e7:a9:87:
cc:44:3d:1a:28:cc:bc:1e:35:c6:87:5b:d0:32:6b:7e:7a:ef:
b0:c1:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:39 2024 by rpki-client on console-fra.rpki-client.org