Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
File: qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json)
Hash identifier: Elqwj3r9yCY6hzuQP5qwanRp+bApTmw8GF4squXHObw=
Subject key identifier: 66:83:65:13:B0:E2:6D:94:A0:50:C3:2A:0E:12:E9:CD:7C:1D:E1:74
Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
Certificate issuer: /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Certificate serial: 019357D2D945B36139D6A5FE49941511B379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
Manifest number: 064E
Signing time: Sat 23 Nov 2024 07:00:56 +0000
Manifest this update: Sat 23 Nov 2024 07:00:56 +0000
Manifest next update: Sun 24 Nov 2024 07:00:56 +0000
Files and hashes: 1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: Itj4PWxM1WLPFV/JAey0pHVEzIDL9Gju60kZbgEWpFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:d9:45:b3:61:39:d6:a5:fe:49:94:15:11:b3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Validity
Not Before: Nov 23 07:00:56 2024 GMT
Not After : Nov 24 07:00:56 2024 GMT
Subject: CN=66836513b0e26d94a050c32a0e12e9cd7c1de174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:29:1a:d2:7e:ac:14:93:4e:ee:39:b3:75:
a9:7f:52:27:7d:4b:81:08:52:dc:d4:eb:d1:be:74:
2f:07:0c:5e:88:e8:58:eb:d9:cd:7f:26:b6:91:92:
73:d7:54:3c:5b:b8:33:05:e3:f5:ac:b8:70:c1:5c:
3e:45:4c:92:92:a0:c5:d7:a7:b1:86:57:c6:da:b6:
a6:65:3e:97:12:6f:97:ce:af:4e:ef:63:df:ef:dc:
72:7b:d1:4b:45:0c:c0:80:61:19:14:3e:a2:df:7a:
f9:0b:1f:6c:68:de:23:c3:f5:25:cc:0e:eb:26:90:
99:84:3a:6a:a2:39:e2:34:85:65:08:d3:f7:c3:37:
ed:08:06:04:65:a5:19:1b:98:5e:83:b0:f9:43:d6:
c6:cd:94:15:32:46:80:05:ff:57:79:11:70:ac:fe:
cb:16:97:aa:74:05:1a:12:b8:f5:f2:98:b4:16:7d:
96:3b:70:8a:38:20:7c:1a:dc:a8:9d:20:01:62:19:
31:52:02:df:b5:e5:68:c0:70:0f:14:72:ce:81:95:
85:5a:e4:59:e0:48:d3:9f:51:5e:be:51:1b:53:a3:
07:4f:a8:ce:fa:7b:cb:bf:e3:dd:0d:8d:aa:11:b2:
c2:41:68:eb:6b:71:9e:3b:5f:e4:68:57:68:70:f6:
06:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:83:65:13:B0:E2:6D:94:A0:50:C3:2A:0E:12:E9:CD:7C:1D:E1:74
X509v3 Authority Key Identifier:
keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fe:20:e5:05:ad:9b:a0:1d:0b:1d:7e:41:ab:b1:f8:5e:ea:
fc:c9:6a:3a:b6:96:e2:3d:18:c5:8c:61:e7:c9:13:50:36:27:
f5:fd:9d:62:ca:95:0c:68:b5:83:3a:84:8d:34:c4:c2:f5:83:
ed:7c:e9:39:5b:e7:6e:50:0c:7f:b9:17:f1:91:92:78:bb:99:
ff:f3:d4:3d:85:53:e2:81:e6:09:eb:cd:eb:cc:dc:02:b9:42:
7a:1a:c4:f8:71:e3:72:5b:a9:1c:19:82:48:30:12:79:72:0b:
c2:02:8c:fe:0a:69:25:be:9f:7f:a3:25:35:82:50:55:54:50:
d7:66:7d:1e:91:2e:9a:bd:68:44:2a:f8:9b:2a:51:aa:31:6b:
d5:a2:62:69:cf:79:8d:1a:f6:30:16:d3:cc:79:c1:97:69:10:
ed:fc:92:f8:94:e9:e7:29:fc:f4:4f:30:8a:93:34:f5:0f:81:
ce:66:22:56:47:89:64:43:2d:df:56:26:e8:d2:26:11:31:fe:
b9:a1:31:b4:77:ae:29:1b:58:b3:c4:6f:3d:55:45:23:12:8d:
e0:8b:b5:49:37:fc:9f:e0:64:f0:88:36:42:de:01:d1:3c:02:
07:19:7d:ea:f3:03:83:27:37:34:d5:6e:88:46:3a:15:b3:9b:
b6:13:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:42:30 2024 by rpki-client on console-ams.rpki-client.org