Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
File: hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft (raw, json)
Hash identifier: aEyNQAuCbMaauTTjtSt6qaJ/l7bj9L2r+i5HlEFUE1Y=
Subject key identifier: 57:48:79:FF:A9:E1:D7:89:A9:2C:29:96:3A:42:F5:FC:24:5B:58:90
Authority key identifier: 85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
Certificate issuer: /CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Certificate serial: 019357D268299F5AF52D485F594A34478B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
Manifest number: 0108
Signing time: Sat 23 Nov 2024 07:00:27 +0000
Manifest this update: Sat 23 Nov 2024 07:00:27 +0000
Manifest next update: Sun 24 Nov 2024 07:00:27 +0000
Files and hashes: 1: hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl (hash: LT6ZZnS17ZNDiNfug3NczleiPxQOtgQFFlJf3+CdL/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:68:29:9f:5a:f5:2d:48:5f:59:4a:34:47:8b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85028f9014283b349d16cafdc94b7f5ef1530e4d
Validity
Not Before: Nov 23 07:00:27 2024 GMT
Not After : Nov 24 07:00:27 2024 GMT
Subject: CN=574879ffa9e1d789a92c29963a42f5fc245b5890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:db:cd:7e:5c:69:e7:5a:b9:f6:2c:1b:0d:
cd:4c:fc:bc:c2:9a:28:f2:95:60:79:2b:91:d1:50:
ae:ff:b3:67:50:ea:95:55:43:d7:14:50:5f:93:82:
19:1f:37:a2:cd:84:a4:0b:65:23:02:63:dd:de:53:
96:dd:6d:82:f0:7d:bf:6d:83:dd:87:32:92:2e:d1:
44:27:2a:da:ac:c9:1f:ac:38:79:67:9b:86:79:1f:
bd:65:e5:1e:9a:45:37:f0:0d:f0:98:fa:3f:dc:48:
4a:d7:cb:4b:b3:93:ce:ec:79:14:3b:6b:3d:80:f4:
32:af:e2:5c:31:ec:71:c4:a7:cc:56:a7:2c:5f:8f:
2a:47:fb:09:57:f5:47:49:9e:ce:29:3c:50:2c:90:
9d:9a:d7:77:52:13:8d:15:eb:05:18:7c:49:1a:01:
b9:5b:90:94:ad:18:23:dd:d2:34:02:a1:13:74:da:
fb:67:98:3c:82:03:36:c0:e4:b0:84:b6:dd:a0:2c:
0e:6e:53:b9:98:17:31:d2:fd:80:98:a5:0a:68:cc:
5a:a6:f1:cf:5d:c4:1c:05:c6:e4:18:e4:fd:e3:5f:
67:96:7b:eb:61:00:9b:a6:71:04:7f:58:2f:ae:46:
07:a1:ff:1a:a7:68:12:96:df:43:dd:15:d5:d4:8a:
df:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:48:79:FF:A9:E1:D7:89:A9:2C:29:96:3A:42:F5:FC:24:5B:58:90
X509v3 Authority Key Identifier:
keyid:85:02:8F:90:14:28:3B:34:9D:16:CA:FD:C9:4B:7F:5E:F1:53:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQKPkBQoOzSdFsr9yUt_XvFTDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e70fce-9612-4047-92e1-8639e5da97e7/1/hQKPkBQoOzSdFsr9yUt_XvFTDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:19:89:26:30:9a:18:19:46:1d:09:b1:4b:6e:f7:17:44:e7:
0e:d6:9e:8c:16:ad:23:43:d1:ad:36:55:6f:4e:33:9f:11:dd:
2b:6d:11:bb:c1:34:e6:6f:25:e7:47:2c:46:8c:e0:9e:05:24:
f0:f4:da:08:a6:85:01:24:73:0b:e9:66:e0:17:40:92:4a:dd:
e3:8a:90:e1:35:a6:80:24:f5:1b:aa:cc:44:aa:30:65:44:d5:
a7:ea:f3:34:78:55:a6:a2:b3:4e:71:34:a2:a0:6b:04:f4:62:
de:5f:34:87:7f:95:a2:3b:b0:e8:f2:74:f5:63:ae:01:1d:21:
9d:fa:56:db:d0:54:8f:0e:31:6f:c7:a9:65:7b:6b:71:87:34:
7a:2d:ed:44:8a:c9:0f:27:d2:fa:6a:d7:f7:00:d7:ba:49:96:
cd:8b:8b:18:42:46:7f:bf:9e:41:b8:a0:78:2d:b0:26:44:6b:
49:b7:9e:a7:ce:f8:06:50:08:7f:02:64:59:dc:89:ac:13:a3:
43:20:aa:74:80:99:b8:2c:3f:ef:47:a7:4d:9c:de:94:3c:6e:
c2:61:e2:0f:c5:bb:65:b8:9c:24:58:6e:5a:5e:9b:a2:79:98:
c6:3f:6b:29:0e:fb:d3:88:17:17:a6:95:74:e8:ab:69:50:7d:
f0:c1:2e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:26 2024 by rpki-client on console-fra.rpki-client.org