Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
File: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft (raw, json)
Hash identifier: 3emBTbFD2QHud8kE2/41Z5psBrV2zB4h+ZhXrHAx3g8=
Subject key identifier: CE:41:58:FC:4B:EE:73:B1:7F:64:34:60:2A:D0:CE:74:7B:F9:B0:5D
Authority key identifier: 9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
Certificate issuer: /CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Certificate serial: 018F8823F0F325BDDB540097ECFA6F3A38A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
Manifest number: 1176
Signing time: Fri 17 May 2024 20:00:07 +0000
Manifest this update: Fri 17 May 2024 20:00:07 +0000
Manifest next update: Sat 18 May 2024 20:00:07 +0000
Files and hashes: 1: nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl (hash: thsHDEwyKdUsy91OxAjQy+3D8HtDHZyp7Bedm1iwoR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:23:f0:f3:25:bd:db:54:00:97:ec:fa:6f:3a:38:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbc532a4ab55f06f7c1b67019224f8dccda6534
Validity
Not Before: May 17 20:00:07 2024 GMT
Not After : May 18 20:00:07 2024 GMT
Subject: CN=ce4158fc4bee73b17f6434602ad0ce747bf9b05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:f3:f5:fc:1c:ef:2c:8d:3b:91:d2:5c:2b:
fb:59:a4:99:2a:73:8b:52:e3:80:ed:db:6a:f3:e2:
e4:89:de:a2:3d:88:f4:f5:c9:e7:d0:27:e8:69:af:
6f:4b:e1:fb:3f:f2:e1:51:32:f6:34:60:22:15:79:
92:80:e5:af:24:d1:e9:72:e3:2f:cd:8b:cb:8c:1f:
93:5b:d2:c8:d2:73:bf:7f:17:66:fd:58:55:62:77:
72:47:8e:35:14:55:e8:d8:52:6d:c2:00:bd:1d:8b:
1b:be:01:ad:e1:b1:d2:85:4d:c6:30:86:3d:86:06:
8b:02:c4:06:95:2f:f4:2d:07:65:04:83:3c:2d:a8:
82:07:f9:81:3c:8b:25:2b:21:00:25:71:23:73:6c:
d2:01:b7:6c:2b:bb:85:75:76:14:4d:a0:e3:7d:08:
80:cf:4d:38:4b:59:1e:07:8a:5f:0d:48:a0:8d:95:
e5:e7:d1:44:15:c7:92:e4:93:39:07:63:1b:90:2f:
0b:36:f2:71:30:04:6f:b5:19:0f:da:36:7b:92:2d:
5e:ac:52:78:e9:46:7d:a0:e5:49:8e:39:ac:10:56:
d2:72:8e:94:ab:5d:ab:a2:c8:12:7d:54:69:de:1c:
24:a8:82:9c:f4:ec:79:f1:d6:c9:3f:ad:2e:fb:1c:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:41:58:FC:4B:EE:73:B1:7F:64:34:60:2A:D0:CE:74:7B:F9:B0:5D
X509v3 Authority Key Identifier:
keyid:9C:BC:53:2A:4A:B5:5F:06:F7:C1:B6:70:19:22:4F:8D:CC:DA:65:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da5c0d-5944-4963-adec-fb66742045ed/1/nLxTKkq1Xwb3wbZwGSJPjczaZTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:41:19:aa:65:ee:88:85:69:14:5a:e3:1b:03:e7:90:60:0e:
12:8a:fb:b5:f3:b2:bf:7c:15:4e:ad:f3:15:3b:1a:9b:92:ca:
70:c9:9f:a5:03:73:b0:26:4b:20:55:c9:61:0d:bb:a3:b0:e2:
35:eb:97:2a:0b:14:a6:87:92:86:58:e8:75:9f:50:d5:d6:2a:
54:2f:c0:d2:da:d8:99:e2:73:63:cb:13:df:88:25:8c:0b:8f:
42:6e:dc:86:2d:eb:da:d5:27:9a:f0:01:66:66:0e:03:35:fc:
2e:1d:56:8d:c6:f9:ae:43:38:72:9a:83:bc:73:dc:7e:f5:b9:
74:14:17:64:cd:80:0c:e9:8b:e7:19:f6:65:92:49:0b:4b:14:
d9:0c:6c:11:4c:9d:c2:b3:3d:75:9e:83:f2:5b:81:55:da:3b:
51:66:cc:8d:d3:e5:16:ab:e9:10:d4:94:33:d6:9d:c5:2a:c2:
9f:f6:52:ac:f9:9c:54:f0:25:f3:ad:46:8e:ab:b4:19:a2:60:
89:02:7c:a5:5f:64:1d:f3:ca:3a:7c:7e:13:ee:42:0d:ea:70:
bb:c1:c7:58:2b:b0:2e:e0:8b:e2:1c:e5:38:4d:d7:13:8a:a3:
cb:dc:3f:33:20:b1:0a:5b:35:45:15:7b:4d:1e:41:15:16:17:
ef:e7:65:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:01:29 2024 by rpki-client on console-fra.rpki-client.org