Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
File: ew-qtXmEcO5RadPr8tExWFnPraQ.mft (raw, json)
Hash identifier: PRYqnjRxxadVJQIbNcXMvTlrJM17yTDnBEBWXng/7dc=
Subject key identifier: 9C:07:BD:2F:25:F4:3E:DE:46:C3:B1:8B:D8:7F:DA:6D:4A:8F:CD:C4
Authority key identifier: 7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
Certificate issuer: /CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Certificate serial: 019358787938BE3A79BFADED510D1F08D062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
Manifest number: 1122
Signing time: Sat 23 Nov 2024 10:01:50 +0000
Manifest this update: Sat 23 Nov 2024 10:01:50 +0000
Manifest next update: Sun 24 Nov 2024 10:01:50 +0000
Files and hashes: 1: ew-qtXmEcO5RadPr8tExWFnPraQ.crl (hash: O2tdQt9e9LRD7j2CzwLGgzQ+WoDgEiC784x92wTgkho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:79:38:be:3a:79:bf:ad:ed:51:0d:1f:08:d0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0faab5798470ee5169d3ebf2d1315859cfada4
Validity
Not Before: Nov 23 10:01:50 2024 GMT
Not After : Nov 24 10:01:50 2024 GMT
Subject: CN=9c07bd2f25f43ede46c3b18bd87fda6d4a8fcdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:42:04:3f:ea:b7:e3:21:8c:aa:94:cc:30:b3:
42:a1:36:41:2f:bf:b0:4a:60:48:8c:db:4e:b9:d1:
ec:1d:0c:ed:ab:01:db:15:43:45:e9:75:cb:16:30:
89:78:b5:51:c1:f7:5f:04:c5:c7:f9:f2:42:92:2e:
ea:4d:0f:99:ea:47:dc:f9:4f:de:df:82:63:ce:81:
f3:13:e3:64:e5:7b:97:fd:10:0a:45:1a:80:47:79:
58:75:84:a9:33:fe:82:6a:fc:43:88:76:f9:5a:87:
65:c6:43:70:61:3a:e2:22:96:ee:3f:0f:48:ea:f7:
88:cc:eb:02:66:0f:86:ac:e8:95:c3:cd:6b:6a:3b:
e3:73:54:64:b2:c2:e4:75:e6:cb:51:18:c7:02:79:
bd:05:55:1c:d3:24:8d:69:be:c5:13:b7:d6:76:d6:
31:eb:77:a7:ed:99:c0:9b:da:25:5d:10:64:09:2d:
61:ee:cb:aa:1f:d1:e9:c1:0f:b9:09:61:7c:f8:15:
3b:2c:ab:d7:5d:a5:f1:c0:4e:5c:71:22:23:1c:98:
be:00:7e:b2:56:08:cf:36:a0:a6:7f:e8:93:32:13:
a5:46:6c:8d:56:cf:63:de:95:57:36:b6:8f:fc:2a:
1a:ce:c9:e0:e6:b5:a5:c5:28:bc:8a:42:11:69:ac:
dd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:07:BD:2F:25:F4:3E:DE:46:C3:B1:8B:D8:7F:DA:6D:4A:8F:CD:C4
X509v3 Authority Key Identifier:
keyid:7B:0F:AA:B5:79:84:70:EE:51:69:D3:EB:F2:D1:31:58:59:CF:AD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ew-qtXmEcO5RadPr8tExWFnPraQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e37988-8081-4da4-b98f-bf8659c7823d/1/ew-qtXmEcO5RadPr8tExWFnPraQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d7:9f:07:6f:94:ea:6f:60:6b:86:09:f7:8b:d0:ad:7c:84:
7d:8e:0a:7a:ee:66:e5:ce:be:34:bf:09:1e:83:36:9a:93:06:
55:45:d2:36:2f:62:06:2d:f8:f7:6c:6a:24:fd:d5:bb:09:0a:
91:05:47:ca:3e:56:e5:e7:66:97:c8:4c:50:af:d3:48:b4:34:
df:49:52:d8:4c:bb:8b:a9:ab:e1:9e:44:76:6b:13:db:b5:ee:
d7:9f:de:c7:f1:77:af:b0:0a:9a:43:5b:17:a8:00:fb:ad:58:
49:f8:b8:2a:25:29:5d:d8:33:a0:3f:6b:14:36:75:ce:1a:ea:
e2:98:95:88:85:3c:e4:11:15:b5:cd:a6:76:97:28:e3:18:f0:
f6:99:43:40:51:22:22:ca:93:c8:65:8d:08:e5:cc:38:96:ff:
3c:fd:bc:fc:45:d0:2a:03:d3:33:b5:d7:e2:7f:49:95:e1:fa:
e5:7e:03:d1:59:db:4a:4f:05:95:00:4b:a2:ff:a3:98:54:21:
2b:e5:30:85:56:05:cb:c9:93:5a:0f:52:78:9c:9d:4e:4c:e4:
69:d6:4d:8d:3a:7f:29:b4:14:74:04:4b:90:53:c9:97:41:7e:
4e:a1:cf:24:2b:db:59:1a:75:3e:22:c5:72:76:f2:df:a6:87:
82:f6:8c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:02:38 2024 by rpki-client on console-fra.rpki-client.org