Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
File: 30KpUq9vhPKfHRse6XQbBXKGh4Q.mft (raw, json)
Hash identifier: plCKD1zrqm9GFQmYNlWV7KsgQrBQg2VNn0lM8B5zAIs=
Subject key identifier: 17:7D:4F:52:99:BE:9E:91:E5:7F:0C:43:23:3D:5D:9E:32:18:FF:4A
Authority key identifier: DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
Certificate issuer: /CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Certificate serial: 018F40798DE7EE6DDEB7EF168A9F63FDEE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
Manifest number: 0CE2
Signing time: Fri 03 May 2024 22:00:59 +0000
Manifest this update: Fri 03 May 2024 22:00:59 +0000
Manifest next update: Sat 04 May 2024 22:00:59 +0000
Files and hashes: 1: 30KpUq9vhPKfHRse6XQbBXKGh4Q.crl (hash: JxdgOSkgLjS0X5Hvj525ktpj4z3mOdBCop/DhvEqVwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:79:8d:e7:ee:6d:de:b7:ef:16:8a:9f:63:fd:ee:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df42a952af6f84f29f1d1b1ee9741b0572868784
Validity
Not Before: May 3 22:00:59 2024 GMT
Not After : May 4 22:00:59 2024 GMT
Subject: CN=177d4f5299be9e91e57f0c43233d5d9e3218ff4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:29:54:aa:3c:5a:31:19:69:e8:aa:c1:0d:
ad:09:42:d5:e3:51:7d:bf:a6:77:a4:a9:df:0f:03:
a4:8d:2b:d5:8f:80:26:05:e9:59:80:5b:ca:01:e1:
95:d4:0e:3a:ec:79:23:33:39:16:28:98:80:54:68:
b2:79:79:a6:62:c4:a4:45:d4:4c:ef:00:21:2b:40:
bf:91:7b:44:66:a9:e0:82:df:53:70:ff:6d:93:75:
a2:b7:3e:98:d2:29:b0:96:0c:4d:3c:41:23:26:6c:
32:e0:5b:f1:07:be:e3:39:63:15:ef:b1:31:41:5c:
19:ce:b6:24:b6:78:80:23:5e:dd:2f:97:0c:15:6c:
e3:83:33:99:1a:e5:81:8e:59:22:5f:67:3c:40:a6:
64:da:7a:c8:4c:40:7b:0a:f3:de:36:10:31:20:4d:
d9:12:55:4a:d7:6b:79:8e:0e:e9:66:95:e1:f8:e8:
87:86:03:de:4f:6d:5b:2d:68:d0:61:12:8d:06:ff:
af:47:9d:0a:60:38:cb:cb:c7:53:c2:be:f6:c5:47:
40:ea:6e:19:47:16:1f:e5:f4:fb:8b:be:bf:e3:39:
67:01:68:a1:82:32:af:b3:b3:74:48:c5:ff:ca:0d:
5e:9a:f5:8e:d0:8c:1f:db:0a:86:f4:ef:f4:a1:55:
66:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7D:4F:52:99:BE:9E:91:E5:7F:0C:43:23:3D:5D:9E:32:18:FF:4A
X509v3 Authority Key Identifier:
keyid:DF:42:A9:52:AF:6F:84:F2:9F:1D:1B:1E:E9:74:1B:05:72:86:87:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30KpUq9vhPKfHRse6XQbBXKGh4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3ca04-9e88-4bfb-be5f-d2288525b087/1/30KpUq9vhPKfHRse6XQbBXKGh4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6e:03:15:2f:3a:15:28:39:5a:b8:7f:c7:0f:24:9a:6e:43:
64:79:52:5d:d7:9c:6d:94:11:69:e2:7f:d5:fd:3b:80:d4:8a:
b2:c3:da:d3:21:12:6f:dd:f1:6b:86:3a:8a:5d:93:41:fa:36:
1b:49:50:f4:24:51:c8:98:4c:f1:0c:2b:6b:09:f8:71:6b:bc:
b8:58:69:3b:a0:ac:ce:57:1c:6e:4d:8f:d2:41:ce:0d:26:bb:
7a:dd:c0:22:1d:13:42:07:9d:34:bd:f2:c0:e6:70:c4:71:15:
3e:28:fd:b8:72:7f:5d:14:d6:3b:c4:90:e7:32:b3:28:c4:41:
6a:f7:11:2e:a4:5d:9e:a7:80:62:1d:ab:83:5a:32:b8:1b:36:
e5:da:e0:28:4a:9c:1a:0d:4e:6b:cd:5c:65:5e:98:b5:d5:2d:
68:c8:0f:7a:7b:4b:02:e6:98:6a:c4:ec:88:40:b0:9a:39:c1:
77:49:94:a7:ed:5b:98:73:8e:b8:aa:94:b2:fa:09:41:43:48:
69:52:e8:9d:67:8d:ff:c9:4e:ae:82:f3:84:e5:e3:72:33:bc:
21:b7:ae:1e:68:e0:e7:16:5a:41:2d:d1:17:88:ce:65:5e:0e:
fa:20:62:55:97:27:ff:88:2c:03:55:59:31:3e:e3:41:e9:f8:
1c:fb:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 00:19:05 2024 by rpki-client on console-ams.rpki-client.org