Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
File: cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json)
Hash identifier: O+fcY+hG7ktQlpCV+8Fw+YXLGjdQ7XUQuCDE4gMmP2k=
Subject key identifier: 64:60:13:CA:82:5F:82:C8:3A:B6:2A:C9:B5:E7:65:24:57:59:81:D0
Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
Certificate issuer: /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Certificate serial: 018F87EDA1DF479D9A5B9C67E646C6AC582E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
Manifest number: 1175
Signing time: Fri 17 May 2024 19:00:48 +0000
Manifest this update: Fri 17 May 2024 19:00:48 +0000
Manifest next update: Sat 18 May 2024 19:00:48 +0000
Files and hashes: 1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: tiZernA1+MvJxj6SS7Tx5yjHERMjBHFAFyZxZwmsVxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:ed:a1:df:47:9d:9a:5b:9c:67:e6:46:c6:ac:58:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Validity
Not Before: May 17 19:00:48 2024 GMT
Not After : May 18 19:00:48 2024 GMT
Subject: CN=646013ca825f82c83ab62ac9b5e76524575981d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:8c:3c:f9:59:e8:8d:2c:57:d4:69:05:b4:
db:ec:38:24:8a:9a:aa:91:d6:cc:a8:dc:e5:72:54:
45:be:e6:9d:d2:39:25:b6:81:85:f7:ff:cb:f7:44:
93:f6:89:2e:06:0a:c1:48:9d:9d:00:19:d1:7f:42:
7d:57:fe:de:bc:a0:9d:ef:87:ba:c8:d7:6d:2e:af:
56:68:22:69:3d:a2:f6:d2:11:73:2f:db:28:d0:f7:
60:fc:e1:87:de:a4:fb:ac:ef:eb:c5:70:42:f6:b3:
af:cd:4b:e7:17:fb:18:e8:ff:e1:24:2c:d6:32:5b:
aa:1e:b2:12:92:a7:d4:b7:a8:20:4f:8c:90:6c:13:
d9:4f:cd:b5:45:ff:90:32:d9:7b:01:c8:59:b0:f3:
0d:21:60:c8:e5:1a:20:8f:e9:ac:48:5a:6e:42:bb:
4f:e4:a1:b7:5f:ba:9f:d9:35:4a:fa:63:f1:e0:85:
22:2a:6b:ba:1f:20:e9:84:73:c1:af:19:29:1c:c5:
ce:27:a0:66:b4:68:ed:7c:35:4a:01:7c:16:a4:8d:
b2:74:9d:87:54:bc:7a:06:ba:e8:8e:86:e2:4b:58:
4a:a2:cd:6a:28:51:b5:46:22:7d:48:4f:ae:35:cd:
9b:18:7b:1a:c9:ef:05:47:5d:ee:a8:b1:fe:38:ed:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:13:CA:82:5F:82:C8:3A:B6:2A:C9:B5:E7:65:24:57:59:81:D0
X509v3 Authority Key Identifier:
keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:61:76:c2:75:eb:d3:4c:39:51:cf:c3:79:4a:b2:f2:d6:bc:
e0:69:bb:83:9d:b2:57:93:92:07:19:04:a6:ff:94:2d:02:4a:
03:ba:04:5c:8d:53:fe:fc:20:b4:96:57:25:59:4b:9f:19:f6:
e8:49:28:a0:53:83:02:0a:16:2a:17:d4:30:cb:c5:f6:6e:6a:
24:2a:b7:df:98:cb:50:75:ad:4b:b9:3a:61:09:8e:4d:05:06:
d1:f6:96:18:34:50:a5:14:03:54:e3:f3:24:0e:d3:ca:9d:08:
cc:84:8b:47:5e:67:d7:ff:1c:33:4f:44:3e:4a:05:81:7f:53:
24:7e:5b:ad:d1:60:eb:8d:07:8c:63:b3:66:b5:ef:a9:65:e5:
dd:8e:47:b7:56:0c:2f:21:78:dc:c7:88:f5:74:19:06:93:b6:
4b:bc:33:d2:ac:dd:3c:eb:62:47:c9:e6:ea:e4:a5:b7:2b:a5:
a0:9e:a6:95:15:f9:9a:6c:64:69:e9:0d:0c:bc:2b:35:6f:f4:
5a:45:79:d2:ef:75:48:86:7e:7f:02:6b:29:3c:f1:e4:dd:9b:
eb:fc:c3:61:af:0b:83:4d:6a:ac:cb:9c:98:d6:49:3b:fe:97:
ec:86:a7:a0:39:29:6d:19:14:91:81:11:72:5b:44:e6:04:07:
74:a8:80:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:03 2024 by rpki-client on console-ams.rpki-client.org