Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: P9USMpSqLgJHWCWCfdKOrPdWEh0Wt1n3/QGXXSNNWjs=
Subject key identifier: D9:72:53:95:07:B7:47:01:4C:E5:72:1D:37:10:AF:B7:A4:17:4E:5A
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 018F53CA0D6E965E83EDC8DD78A54E3039CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 0FCC
Signing time: Tue 07 May 2024 16:01:41 +0000
Manifest this update: Tue 07 May 2024 16:01:41 +0000
Manifest next update: Wed 08 May 2024 16:01:41 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: D/4uk1XgMWoA8FM41LXCkv1P/OQ7XLNN06HSgNpq1Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:ca:0d:6e:96:5e:83:ed:c8:dd:78:a5:4e:30:39:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: May 7 16:01:41 2024 GMT
Not After : May 8 16:01:41 2024 GMT
Subject: CN=d972539507b747014ce5721d3710afb7a4174e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:01:f1:fb:0f:c2:3f:ca:13:de:4f:f2:74:
37:7b:fc:24:94:fe:36:f0:74:c4:e7:94:c9:71:c0:
4b:2f:64:d4:4a:7e:32:70:d7:b8:52:67:c0:05:51:
9d:f5:ac:65:a0:c7:e2:b3:b3:9b:a7:2c:7d:22:4a:
e7:0b:21:22:7d:7f:6b:40:04:65:93:bd:de:96:88:
a3:90:f2:2d:3f:34:ea:c6:77:5a:f7:4f:d4:ce:2d:
72:00:31:b0:e6:8e:b2:66:08:ce:8f:11:59:2c:d8:
21:15:ef:b1:0e:c5:96:df:c2:88:be:61:75:f5:5d:
60:d3:77:76:c4:f9:d5:63:7e:8d:83:21:8b:44:c4:
cb:e4:f7:9d:91:d7:f7:86:21:88:7e:33:c0:d3:80:
ee:77:d8:9c:73:78:41:d5:a3:df:c4:ff:e5:b8:0f:
53:f7:52:88:92:29:ca:07:9a:dc:94:71:29:a9:38:
4f:85:56:51:5b:be:ff:43:97:6e:35:51:c0:c3:47:
f6:75:2f:4d:d4:ed:63:8b:32:0c:97:30:a6:85:b0:
b8:fb:79:e0:21:34:63:1d:01:60:72:3b:40:e8:95:
5f:c8:3b:83:59:ab:b3:3d:72:c8:8b:fe:41:83:9f:
81:5e:ef:e9:ab:f6:22:b3:65:9d:31:7a:0d:b5:3c:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:72:53:95:07:B7:47:01:4C:E5:72:1D:37:10:AF:B7:A4:17:4E:5A
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4c:e9:60:20:4d:a6:c7:7c:68:8f:8b:7c:fe:10:10:17:6a:
6e:c4:db:ec:6c:a0:e2:c9:90:c4:15:9b:52:95:df:d9:bb:65:
33:b2:5a:5f:8d:99:b8:de:4c:75:3c:c9:b9:7e:2b:7c:af:b9:
7f:f6:2e:5b:17:7c:dc:a8:b4:5b:ba:b4:f8:ad:a6:e2:f9:16:
0c:72:af:fb:1e:08:31:5f:30:43:72:0f:98:2f:78:6f:73:a9:
f8:1b:cb:94:36:23:0e:b6:39:81:3f:32:e6:9f:0e:69:20:a1:
4d:1d:a5:d3:5a:f8:7c:6d:b1:08:38:33:0a:f1:e1:f0:84:65:
2a:3c:aa:36:fd:15:db:d4:35:03:4b:9a:52:bd:3a:30:31:76:
4e:e1:40:bf:ac:40:67:cc:86:a2:96:ec:45:fa:ee:53:9f:33:
38:83:c4:cf:7a:b1:d1:70:9f:cb:26:97:70:ea:1e:f7:d8:e3:
96:93:e0:e4:64:8b:e7:41:11:29:3e:1b:d0:5b:fc:35:67:9d:
1e:c9:94:e4:3e:0b:55:17:bd:06:41:72:33:8a:98:0b:6c:b5:
c4:49:19:f0:f1:0a:09:65:4a:6d:80:64:be:dc:80:ca:cf:9f:
15:b0:83:8a:66:ef:c0:bd:f6:34:8e:5b:9a:e3:d3:24:b3:f1:
25:a8:16:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:58:19 2024 by rpki-client on console-fra.rpki-client.org