Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
File: xGglzBDkwis4XEo3r5DzC2iBQRo.mft (raw, json)
Hash identifier: olq5ti83v+sCCOaz3ZvVUsK3BklnpAtcvPKJtBqjrPg=
Subject key identifier: 6C:2B:FB:C1:46:CE:69:5B:06:1A:83:24:F2:4A:48:F6:EF:6A:AD:51
Authority key identifier: C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
Certificate issuer: /CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Certificate serial: 018F8824315055A5E236D3DF6834100F341B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
Manifest number: 0252
Signing time: Fri 17 May 2024 20:00:24 +0000
Manifest this update: Fri 17 May 2024 20:00:24 +0000
Manifest next update: Sat 18 May 2024 20:00:24 +0000
Files and hashes: 1: xGglzBDkwis4XEo3r5DzC2iBQRo.crl (hash: En7XXU7buH7Yruwxyk0C0ZA7lIRRJh8I130MiBJfuRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:24:31:50:55:a5:e2:36:d3:df:68:34:10:0f:34:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46825cc10e4c22b385c4a37af90f30b6881411a
Validity
Not Before: May 17 20:00:24 2024 GMT
Not After : May 18 20:00:24 2024 GMT
Subject: CN=6c2bfbc146ce695b061a8324f24a48f6ef6aad51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:67:e9:62:bd:58:b6:6f:71:98:5b:a1:d3:
9f:6b:e8:67:00:08:14:4a:cd:20:e1:ea:4e:c7:65:
32:db:d0:2a:45:26:e7:c2:13:a8:9c:9a:b8:12:5c:
27:63:26:4d:9e:0d:d0:d8:8b:f1:28:ba:d8:53:0b:
a3:7a:1e:42:9c:62:a0:7e:94:ee:25:32:c7:a2:c8:
95:e4:0b:68:ff:52:85:e6:e0:28:fc:84:6d:f9:d2:
db:09:7f:ae:0f:a6:5b:f6:52:08:3b:9c:ab:33:f4:
55:5e:b9:58:36:8f:b8:20:e2:5a:56:95:dd:e4:7b:
73:bf:c6:96:e3:8a:00:7b:22:de:1d:85:a9:d3:c7:
91:f0:f9:03:22:54:c3:c7:14:75:2a:0a:ef:27:4a:
a4:82:46:96:09:2c:e7:4c:63:58:4d:32:17:b6:cf:
24:a7:d6:04:22:bf:3b:bc:c6:ce:d0:3a:1a:ad:80:
b2:21:80:66:e5:ad:fa:d6:05:d9:66:dc:4b:30:d8:
3c:ad:2d:ea:33:d2:f3:24:6d:9b:a4:3d:7b:0b:72:
9b:76:94:27:f7:ae:a4:15:72:0b:75:2a:1f:27:8d:
87:ae:c9:f8:13:98:e2:84:4c:4a:0a:45:08:05:a9:
db:7b:2f:2c:c6:63:ac:79:e7:87:69:45:d0:87:44:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2B:FB:C1:46:CE:69:5B:06:1A:83:24:F2:4A:48:F6:EF:6A:AD:51
X509v3 Authority Key Identifier:
keyid:C4:68:25:CC:10:E4:C2:2B:38:5C:4A:37:AF:90:F3:0B:68:81:41:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGglzBDkwis4XEo3r5DzC2iBQRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a1808-6fb8-45c8-954e-d549695e433c/1/xGglzBDkwis4XEo3r5DzC2iBQRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:28:dc:01:25:6e:1e:3c:31:ae:53:14:70:77:31:a0:6b:3c:
22:a9:19:1b:04:15:58:ab:c4:53:d1:9e:3c:05:fe:37:bb:94:
18:01:99:39:6f:1a:d5:49:87:e8:89:c0:e5:e4:30:04:cd:d5:
13:f9:f8:72:6a:17:77:ea:75:8e:62:6f:2b:39:d9:9d:bb:ea:
d5:f4:a4:08:a3:39:57:c2:66:90:82:d3:aa:05:79:f7:9d:82:
43:4c:97:5f:c8:31:f1:62:68:81:9d:9f:e0:2e:fc:5e:5b:f2:
ad:07:c9:8e:bb:24:68:ab:1a:08:d7:fb:c4:fb:84:79:ce:46:
37:78:0c:14:f0:b6:83:48:51:97:79:3b:f5:0c:f0:58:6d:07:
82:b3:75:0e:5e:ef:02:61:ab:eb:5a:cc:c7:a9:69:97:47:7e:
ed:fd:d9:7e:4f:c4:e4:98:37:3a:8b:00:3a:e3:ca:18:ca:d0:
90:a5:ef:70:26:50:13:52:05:5b:da:44:5f:3f:14:46:66:47:
4d:9c:34:8c:b2:3a:e2:47:27:8d:f1:b1:d9:c7:9e:de:43:3b:
30:86:87:03:65:94:67:68:2f:8b:2c:1d:5c:0d:62:9c:fd:49:
0a:1f:17:9d:4a:26:2a:89:d6:64:45:e5:6d:6f:e3:ec:a9:24:
c3:f5:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:26 2024 by rpki-client on console-fra.rpki-client.org