Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eefc91-32f3-4d65-b444-4567d82f6631/1/xrZwIi65BeUq-fnXoN4r6d9uGUY.mft
File: xrZwIi65BeUq-fnXoN4r6d9uGUY.mft (raw, json)
Hash identifier: rmumm25i0wHOqBK5X0ez6wguqVUxa8ucfSJH5Abxazg=
Subject key identifier: AC:B3:34:F6:B5:4E:57:FA:9D:05:C0:BC:5E:CC:67:A7:34:3E:70:6E
Authority key identifier: C6:B6:70:22:2E:B9:05:E5:2A:F9:F9:D7:A0:DE:2B:E9:DF:6E:19:46
Certificate issuer: /CN=c6b670222eb905e52af9f9d7a0de2be9df6e1946
Certificate serial: 018F88924A2025564C08E310D2F3ED3AF6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrZwIi65BeUq-fnXoN4r6d9uGUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/eefc91-32f3-4d65-b444-4567d82f6631/1/xrZwIi65BeUq-fnXoN4r6d9uGUY.mft
Manifest number: 085E
Signing time: Fri 17 May 2024 22:00:39 +0000
Manifest this update: Fri 17 May 2024 22:00:39 +0000
Manifest next update: Sat 18 May 2024 22:00:39 +0000
Files and hashes: 1: xrZwIi65BeUq-fnXoN4r6d9uGUY.crl (hash: T2OAABWF15F04/06Vl9mQq0Wo421z0yOPOyKZpIfGLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/eefc91-32f3-4d65-b444-4567d82f6631/1/xrZwIi65BeUq-fnXoN4r6d9uGUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/eefc91-32f3-4d65-b444-4567d82f6631/1/xrZwIi65BeUq-fnXoN4r6d9uGUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrZwIi65BeUq-fnXoN4r6d9uGUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:88:92:4a:20:25:56:4c:08:e3:10:d2:f3:ed:3a:f6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b670222eb905e52af9f9d7a0de2be9df6e1946
Validity
Not Before: May 17 22:00:39 2024 GMT
Not After : May 18 22:00:39 2024 GMT
Subject: CN=acb334f6b54e57fa9d05c0bc5ecc67a7343e706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:50:31:e6:63:44:03:f5:ca:4f:ec:eb:1b:
38:c5:42:a3:a4:8f:2c:98:9a:c7:86:14:df:1a:df:
05:42:ad:ba:41:85:dd:78:20:64:56:a9:6b:31:c3:
c9:90:53:38:04:a4:8e:85:4b:95:d2:ba:18:f9:e7:
a0:57:d3:58:64:6e:f6:89:83:bb:e8:ed:c6:6e:ad:
1c:e1:80:c2:c1:26:a7:a6:d1:57:d2:f8:0a:2c:04:
35:eb:71:1d:f0:d6:ec:f3:b7:fe:c1:2d:35:4d:aa:
2b:94:26:a6:69:66:b4:43:0a:f8:03:42:86:8d:2a:
ce:2f:f7:de:8c:ec:93:b0:1b:08:38:7d:2e:00:67:
e6:98:62:b4:28:08:14:0f:0c:d3:1d:de:73:71:88:
d0:f3:e7:54:28:1a:0b:35:6a:d8:6a:26:6a:88:29:
b5:3c:e3:34:35:d6:58:04:5a:1e:67:15:ba:40:6f:
c4:12:ed:fe:f0:b0:84:c9:2e:9d:a9:2d:2e:c7:d2:
94:5a:17:96:32:b6:46:fe:2a:df:c3:04:42:f1:ff:
3c:38:09:50:ff:c4:24:b7:e6:be:3e:78:a4:2c:59:
d6:be:a9:f6:dd:12:d1:78:30:fb:4d:fb:f7:2f:bc:
b3:8c:01:41:d0:ad:e4:67:f8:5f:12:10:3a:dd:dc:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B3:34:F6:B5:4E:57:FA:9D:05:C0:BC:5E:CC:67:A7:34:3E:70:6E
X509v3 Authority Key Identifier:
keyid:C6:B6:70:22:2E:B9:05:E5:2A:F9:F9:D7:A0:DE:2B:E9:DF:6E:19:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrZwIi65BeUq-fnXoN4r6d9uGUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eefc91-32f3-4d65-b444-4567d82f6631/1/xrZwIi65BeUq-fnXoN4r6d9uGUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eefc91-32f3-4d65-b444-4567d82f6631/1/xrZwIi65BeUq-fnXoN4r6d9uGUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:de:dc:b8:3b:23:50:be:f1:cc:85:07:f1:df:e5:76:19:1b:
67:bf:6f:cd:60:62:23:2b:7f:4a:1d:5b:20:db:3c:1c:69:f3:
ae:d2:1c:b9:02:68:20:97:94:cc:ea:58:7d:68:d7:c2:6f:d4:
9e:88:42:66:7e:24:66:e9:b5:13:2e:8f:43:92:a8:df:65:5f:
d4:4c:ba:c2:26:49:ed:84:dc:2e:7e:0a:c7:cc:1f:ab:7b:aa:
c5:5d:62:f5:37:25:43:03:f7:32:a4:08:6c:66:ec:90:33:54:
e9:df:65:b3:63:e9:40:27:52:2d:57:69:c2:03:0d:16:ea:c0:
0c:61:9a:42:e6:2e:17:2f:35:2a:5e:43:ac:29:ca:40:df:f4:
aa:35:25:23:08:89:ba:4e:ca:bf:dd:e8:14:be:c5:e8:c0:f1:
a2:42:38:ab:43:fa:9b:f7:fc:f9:a8:ae:d5:8a:d5:1e:97:17:
1e:58:90:b8:af:23:a3:81:1b:63:1b:7d:2b:ea:51:79:db:31:
d3:2b:90:5a:8e:ea:d5:d4:45:87:df:82:2b:f8:4c:cb:f6:4c:
60:41:c9:5b:6a:47:f5:02:88:77:66:66:e7:50:0c:03:da:09:
5c:f5:39:a5:72:59:7b:79:59:f3:2f:26:09:78:c6:29:10:77:
d8:2d:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:04:27 2024 by rpki-client on console-fra.rpki-client.org