Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier: C1fmxJZ2qtOFIvY90UDgmwgFWhnpnolUZcHWOvtoW0s=
Subject key identifier: BD:FB:97:48:05:F5:A2:1B:1B:BF:59:0B:A1:BF:04:06:6D:44:C4:C2
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial: 0193549BE4F5ED013FDEC4911D7CEB34CCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number: 0122
Signing time: Fri 22 Nov 2024 16:02:03 +0000
Manifest this update: Fri 22 Nov 2024 16:02:03 +0000
Manifest next update: Sat 23 Nov 2024 16:02:03 +0000
Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: dVRDQ7CvI+54XtMZvkfWI+l+LvqpMxkj41hZsr4qFhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:e4:f5:ed:01:3f:de:c4:91:1d:7c:eb:34:cc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Validity
Not Before: Nov 22 16:02:03 2024 GMT
Not After : Nov 23 16:02:03 2024 GMT
Subject: CN=bdfb974805f5a21b1bbf590ba1bf04066d44c4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:58:6b:63:4a:cb:47:a0:90:1e:53:29:e5:
68:d9:c3:e7:ac:82:c6:43:f1:e6:75:78:da:f1:b8:
3e:22:4f:d3:be:e0:f0:31:17:77:4f:a7:ad:ec:f0:
df:93:6c:04:01:a3:60:ce:48:1f:ce:24:aa:33:45:
4e:ac:63:a5:98:12:be:7b:40:7b:2a:23:3f:75:61:
60:45:75:8e:20:eb:24:80:50:33:fe:d3:e0:0b:07:
83:cf:00:06:8a:b2:95:62:a5:4c:e4:cc:2a:7f:f6:
6d:84:05:ff:e6:b4:fb:a4:74:ac:b4:bc:e2:23:1a:
aa:a6:d0:3e:d0:c4:cf:21:b6:4b:2f:4d:21:89:cb:
7f:50:3c:f5:bf:8a:79:c1:b4:42:4e:5a:5d:6d:4c:
0a:c6:a9:c8:b7:17:c9:0f:e8:a8:54:60:77:58:46:
ff:31:0f:8c:41:cc:3d:b8:79:0c:5b:82:ca:75:7b:
c3:e0:8b:9a:aa:eb:46:b7:ae:b0:4a:32:9b:9e:17:
c8:c9:af:64:11:a9:32:08:f6:ca:89:d1:ec:8d:e6:
c4:b2:1c:bb:f8:ac:6b:e4:01:e5:48:77:5d:29:23:
d2:5e:0d:ca:bf:29:d6:b4:ed:0f:25:56:b6:cd:e2:
2f:e6:73:0b:84:7d:f4:7a:43:8a:81:42:e6:7e:aa:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:97:48:05:F5:A2:1B:1B:BF:59:0B:A1:BF:04:06:6D:44:C4:C2
X509v3 Authority Key Identifier:
keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:50:56:7f:c3:2e:17:b1:35:f5:09:ce:ea:53:12:1e:fd:f1:
78:77:22:f8:45:f4:e7:eb:90:0d:4e:5a:b6:fb:f2:7c:77:32:
29:78:dd:b0:15:8c:15:0a:04:e3:0c:ba:52:13:40:af:ac:0c:
ab:4a:ad:23:7e:c3:64:35:63:30:62:05:ac:33:76:e3:fe:bd:
b2:a7:7a:dd:1c:ce:62:d7:e1:f7:0c:5b:ab:04:33:a3:b2:1d:
03:f7:38:8f:21:f8:2b:b4:09:6d:9b:ba:db:1f:09:2a:1c:ed:
7f:c9:91:34:0f:3d:20:73:3d:db:68:c7:1c:90:25:8f:21:bc:
46:03:0c:c7:c1:51:b6:2c:b0:6f:0f:a5:26:0e:f8:6d:12:b4:
7c:da:d6:47:d5:c7:b1:09:72:cd:e5:26:92:81:70:0c:9f:17:
c0:32:1e:70:35:9f:6a:a7:e4:45:1d:d4:fc:9b:eb:ec:1c:00:
9f:e5:0b:e8:81:5e:0c:ba:83:54:3d:a0:5d:34:d3:2b:12:36:
58:76:87:be:72:b7:67:e2:1c:94:2f:ef:80:ae:9d:5d:c0:6f:
83:43:21:46:c8:8a:5d:11:87:ef:3a:8b:fe:40:9c:70:a1:1f:
f4:0b:75:8f:8d:d4:25:fe:45:d0:16:0f:d0:4c:6d:91:6e:5c:
2a:af:06:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:29 2024 by rpki-client on console-fra.rpki-client.org