Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json)
Hash identifier: FnXU37DyWoAFc/pdlkie5OlojM06RLd7CFlUf6XDGS0=
Subject key identifier: CA:D3:E0:D7:2A:79:81:9A:6C:97:7C:EA:4C:95:B3:C3:FF:80:41:60
Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Certificate serial: 018F9D2B7D703B07D31A7E8CDAE1EF06E117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
Manifest number: 0E34
Signing time: Tue 21 May 2024 22:00:24 +0000
Manifest this update: Tue 21 May 2024 22:00:24 +0000
Manifest next update: Wed 22 May 2024 22:00:24 +0000
Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: LlMQRdu7YnF8J7tKn4GnTxZEPD88E+kfWxrIEmhJIg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9d:2b:7d:70:3b:07:d3:1a:7e:8c:da:e1:ef:06:e1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Validity
Not Before: May 21 22:00:24 2024 GMT
Not After : May 22 22:00:24 2024 GMT
Subject: CN=cad3e0d72a79819a6c977cea4c95b3c3ff804160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:e9:fd:d6:83:e1:0c:43:b6:ab:ea:ce:1e:
89:31:e9:25:18:59:72:90:fc:3f:87:3a:29:a5:ca:
58:43:04:22:36:d8:f0:32:92:96:62:c9:eb:8e:ed:
fe:1a:74:05:8f:b0:61:33:59:a7:7b:02:ec:9a:b6:
94:75:73:b7:c3:c0:72:5d:c6:8c:00:6e:48:4a:bf:
ac:41:11:e9:7c:3c:2a:7f:f3:9d:b6:ad:3c:5c:70:
da:56:3d:1e:3f:61:81:ec:28:d6:b1:4d:27:16:69:
00:ae:c4:89:c8:1e:df:91:59:d0:19:8b:34:c7:e5:
60:42:76:00:49:5f:5a:98:46:18:d9:7a:de:05:39:
c3:47:41:08:07:d0:5b:78:91:6b:81:c9:1b:47:a1:
49:e1:1a:c3:52:f7:06:10:ea:42:94:38:b9:cf:c5:
8e:5a:d0:35:9a:fb:73:63:d2:14:57:d1:74:eb:4b:
40:14:68:c6:1a:58:28:38:46:39:a6:89:37:e3:d2:
36:74:6e:38:76:ec:ae:ab:7e:d0:5d:1a:ac:66:3b:
09:0e:87:0b:2d:62:ac:70:dd:c7:cb:e2:e3:14:62:
8a:e8:da:2a:a0:b6:fa:ad:fd:68:b5:ff:df:30:c8:
f9:65:cb:f5:79:a4:d9:62:7d:a5:52:31:38:04:93:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D3:E0:D7:2A:79:81:9A:6C:97:7C:EA:4C:95:B3:C3:FF:80:41:60
X509v3 Authority Key Identifier:
keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:14:0b:b5:2b:e3:cc:cf:e0:d2:f9:32:ba:7f:fd:3d:75:89:
04:81:6f:fb:76:e6:d7:21:09:7c:bb:eb:6e:8b:3c:52:c4:9b:
60:75:42:74:ae:6a:3e:8c:3f:80:0f:05:af:3c:17:b3:dc:22:
93:c9:d1:ef:d1:0e:17:d0:b4:e3:50:28:79:f0:21:14:0c:ba:
e2:a9:d9:5d:8c:15:49:68:b5:14:89:1b:35:49:c0:99:20:bb:
34:4a:a3:fd:c2:99:b4:a8:6a:45:08:eb:c4:35:7f:df:14:05:
a6:be:f0:d2:d8:30:0a:a8:3c:11:07:db:55:bc:3b:3a:16:36:
6b:b2:ba:1d:3c:99:de:18:0a:02:1e:0f:c7:38:a8:ad:10:9b:
57:bd:13:09:c5:13:c1:ad:8d:92:96:19:e2:e3:46:14:9a:2e:
8d:67:d3:e8:cb:33:82:1c:61:2a:0c:f5:d1:d9:e7:59:d8:7d:
14:5a:80:0d:52:d8:ff:8b:f8:ac:fa:ce:77:69:41:14:d6:34:
e6:87:24:83:60:41:f2:a9:17:15:e1:0c:02:6e:50:24:b4:03:
42:09:5b:5f:3d:a0:10:2e:ae:60:34:82:13:f1:9e:88:02:f4:
33:ca:b4:fa:70:f9:91:d3:e2:69:79:cc:9f:26:35:b7:0a:69:
21:44:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 22:33:37 2024 by rpki-client on console-fra.rpki-client.org